Thread

1. ticulatedspline · 1790264985 · focus · HN ↗

   AI poisoning is currently the new exploit frontier and I don't think it's going away anytime soon.

   I was just contemplating the other day that agents we use at work are exposing new attack surfaces. For example, historically a folder of documents (maybe google docs) isn't a huge risk, particularly if it doesn't contain sensitive documents.

   Now though if one employee is running a harness capable of computer control, and running an agent that reads from that directory, simply dropping some files with instructions could poison the AI to leak info or even own the host.

   Skills are another supply risk, malicious instructions could be added to them.

   1. reactordev · 1790266823 · focus · HN ↗

      The models themselves are an inherent risk. It’s amazing what they can do but at the same time you are no longer in complete control.

Unofficial Hacker News client; not affiliated with Y Combinator.