‹ BackHN Continuity

Thread

A Privacy Analysis of Web and Mobile Conversational AI Agents [pdf]

425 points · 141 comments · damaru2

  1. postalcoder · · focus · HN ↗
    My least favorite trend I’ve noticed with so many AI chat services is they seem to equate a UUID in the url with privacy.

    Perplexity does this. Visiting a past perplexity search url exposes your full conversation.

    1. someonebaggy · · focus · HN ↗
      Isn't that equivalent to a password? Knowing my password exposes my full data.
      1. layerv-ai · · focus · HN ↗
        not as bad since the blast radius is only your chat vs. knowing your password exposes all your data.

        however - agree that this is not great - espeically if chat TTL is long. someone who gets your URL can read everything you're asking (eg. by sniffing your network/accessing your browser history)

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.