Hacker News new | ask | show | jobs
by cjonas 140 days ago
ya... the number of ways to infiltrate a malicious prompt and exfil data is overwhelming almost unlimited. Any tool that can hit a arbitrary url or make a dns request is basic an exfil path.

I recently did a test of a system that was triggering off email and had access to write to google sheets. Easy exfil via `IMPORTDATA`, but there's probably hundreds of ways to do it.

1 comments

Guys, I think we just rediscovered fascism and social engineering. Lets make the torment nexus on the internet!