3 ms·

This attack was demonstrated a couple years ago, it's not really a new thing. https://simonwillison.net/2023/Oct/14/multi-modal-prompt-injection/ https://simon

This attack was demonstrated a couple years ago, it's not really a new thing. https://simonwillison.net/2023/Oct/14/multi-modal-prompt-injection/ https://simonwillison.net/2023/Oct/14/multi-modal-prompt-inj...

judge2020 1y ago
The problem is that this was a vulnerability in Notion without any mitigations or safeguards against it.
jhealy 1y ago
Not really a new vulnerability, and yet Notion just shipped it this week. All caution thrown to the wind in the name of an announce-able AI feature
- zwnow 1y ago
  And people will still continue to glaze AI over and over again.
milinatw 1y ago
I’m just curious — does the Notion AI agent send the PDF directly to Claude, or does it extract the content of the PDF and then send only the content to Claude? If it’s just the content, then Claude would have no way of knowing it’s an attack, right?