‹ BackHN Continuity

Thread

A Privacy Analysis of Web and Mobile Conversational AI Agents [pdf]

425 points · 141 comments · damaru2

  1. damaru2 · · focus · HN ↗
    Entire conversations via exposed permalinks. For Grok: trackers receiving the conversation URL could access the full chat because the link lacked access controls.

    Screenshots of conversations. TikTok received screenshots of Grok chats during sharing, exposing the actual visible conversation content.

    Conversation-derived content tied to persistent identifiers, including prompts and automatically generated chat titles revealing sensitive facts. "Salary 85k NYC: mortgage 280–350k".

    1. Traster · · focus · HN ↗
      That is a staggering level of incompetence.
      1. ex1fm3ta · · focus · HN ↗
        what do you want it's the era of vibecoding.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.