macOSCryptoAI
Joined 3 years ago
Karma
75
Submissions
10
Member since
Nov 19
Recent submissions
Comment · 1 year ago
Comment · 1 year ago
Was wondering about that, that part seems missing... Isn't there at least one time the user must approve the interaction with the MCP server and data sent to it?
The existence of a "Allow always" is certainly problematic, but it's a good reminder that prompt injection and confused deputy issues are still a major issue with LLM apps, so don't blindly allow all interactions.
Comment · 2 years ago
Yes, images! And also link unfurling in bots. This researcher here talked about it before and also found tons of such data exfil issues in various LLM apps: https://embracethered.com/blog/posts/2024/the-dangers-of-unf...
Comment · 3 years ago
An Uber self-driving car killed a person.
https://monthofaibugs.com