I forget that many of the people who created computers and the internet are still alive. You could literally go talk to them. It wasn’t that long ago. And yet computers and the internet have existed my entire life.
We got ChatGPT to leak your private email data 💀💀
All you need? The victim's email address. ⛓️💥🚩📧
On Wednesday, @OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by @AnthropicAI
But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense.
And with just your email, we managed to exfiltrate all your private information.
Here's how we did it:
1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite.
2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar
3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email.
For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve.
Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data.
ChatGPT + Tools poses a serious security risk
ahora que estoy desarrollando la funcionalidad de tarjetas cashless en showslink, me puse a investigar que androids de uso rudo existen.
y me encontré que es un nicho interesante, el teléfono NO debe ser bonito, solo debe ser económico, pesado, resistente, funcional y limitado.
Un tema no tan conocido por Devs es la Reflection. Reflection es la capacidad que tienen los lenguajes de programación para observarse a sí mismos.
Esto es util para hacer validaciones dinámicas, metaprogramación, y es una de las bases de cómo funcionan los ORMs.
Justo ayer lidié con esto:
Un componente TripCreator empezó a crecer y crecer hasta las 400 líneas de código y un buen de UseState (justo como la imagen)
Mi solución fue dividir responsabilidades en componentes más pequeños: TripCreationForm, TripShareScreen y CreatorVoting
Just one more state variable bro. Just one more hook and the page will have everything it needs. Just one more state variable please bro. Bro? Add one more state variable please bro
Dawg, y'all actually live like this??
Hice un reproductor de música por cmd/terminal. Se maneja full con teclado y atajos, aunque también soporta clicks de mouse.
Ocupa 17 MB RAM reproduciendo canciones. Open source. Código fuente y descarga en los comentarios.
1.- Implementa esta feature: "El usuario hace x, luego y, tiene que pasar...."
2.- Sigue la arquitectura actual del sistema (controladores, servicios, shared types (como DTOs), etc)
3.- Implementa los tests correspondientes
4.- Todos los tests tienen que pasar