hackerBanana

4 ms·

1.
Microsoft Copilot Cowork Controlled by Attacker, Bypassing Sandbox(promptarmor.com)
3 points by hackerBanana 1mo ago|0 comments
2.
Artificial Intelligence Policy(law.berkeley.edu)
42 points by hackerBanana 1mo ago|31 comments
3.
Letter to Governor Abbott on responsible AI infrastructure in Texas(openai.com)
124 points by hackerBanana 2mo ago|242 comments
4.
Atlassian Rovo Exfiltrates Data, Bypassing Controls(promptarmor.com)
306 points by hackerBanana 2mo ago|138 comments
5.
Codex Exfiltrates Connector Data(promptarmor.com)
3 points by hackerBanana 3mo ago|0 comments
6.
The Full Claude Desktop Experience on AWS, Google Cloud, and Microsoft Foundry(claude.com)
3 points by hackerBanana 3mo ago|1 comments
7.
Measuring LLMs' impact on N-day exploits(red.anthropic.com)
4 points by hackerBanana 4mo ago|0 comments
8.
Codex 'Auto-Review' Agent Runs Malware(promptarmor.com)
1 points by hackerBanana 4mo ago|0 comments
9.
Confidential submission of draft S-1 to the SEC(openai.com)
359 points by hackerBanana 4mo ago|316 comments
10.
Claude Dynamic Workflows Inaccurate Permissions Docs(promptarmor.com)
1 points by hackerBanana 4mo ago|0 comments
11.
GPT-5.5 and Codex are now GA on Amazon Bedrock(aws.amazon.com)
2 points by hackerBanana 4mo ago|0 comments
12.
ChatGPT for Google Sheets exfiltrates workbooks(promptarmor.com)
324 points by hackerBanana 4mo ago|121 comments
13.
RIP infinite money glitch via LLM generated music(justice.gov)
1 points by hackerBanana 6mo ago|2 comments
14.
MacBook Neo, best repairability score in years, still 6/10(ifixit.com)
3 points by hackerBanana 7mo ago|0 comments
15.
Control Flipper Zero with AI(github.com)
3 points by hackerBanana 7mo ago|0 comments
16.
Cursor's 'new' model is an unauthorized rip of KimiK2.5(old.reddit.com)
5 points by hackerBanana 7mo ago|2 comments
17.
Wikipedia RFC on banning LLM contributions(en.wikipedia.org)
48 points by hackerBanana 7mo ago|2 comments
18.
by hackerBanana 7mo ago
does everyone really need their own coding agent CLI? i feel like companies are skipping security to push out these tools
19.
by hackerBanana 8mo ago
"closed with the status 'Not applicable' after 4 follow-ups"
20.
Docs.google.com in your CSP can enable AI-based data exfiltration(simonwillison.net)
3 points by hackerBanana 9mo ago|1 comments
21.
by hackerBanana 9mo ago
pretty funny that the text shown users when trying run commands with substitution like $() specifically says they block process substitution in commands, but the code just doesnt block it at all