We got ChatGPT to leak your private email data 💀💀
All you need? The victim's email address. ⛓️💥🚩📧
On Wednesday, @OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by @AnthropicAI
But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense.
And with just your email, we managed to exfiltrate all your private information.
Here's how we did it:
1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite.
2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar
3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email.
For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve.
Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data.
ChatGPT + Tools poses a serious security risk
OK. I want to talk about the huntress.
I just fought the PoE2 act 2 boss with the huntress.
I was stuck for THREE hours regearing, retrying, adding levels, etc. I was CONSTANTLY running out of mana and flask charges.
I've defeated this boss on 3 other characters within 3-10 minutes at most in the past. I know the moves. I only made my own builds every time and I approached huntress the same way. So why was it so much harder?
Problem #1: High effort. Low payoff. The class offers combos, but VERY little reward. At least at this point. Why bother with Stopping Attacks + Parry + Disengage to get a frenzy charge, if the empowered attack is weaker than Whirlwind+Twister spam
Problem #2: Too many buttons. I have to WASD, dodge, attack, potion. Parry+Disengage is very hard to fit in. The combo shold've been one button. Hold to parry, release to backflip+charge
Problem #3: Poor mobility. The huntress can disengage, but her gap closers are pretty mediocre and way weaker than what monk does. Her set desperately need a good lunge.
Problem #4: No good melee attacks so far. I have a beast that constantly applies shock and primal strikes is STILL weaker than whirlwind+twister spam and way more clunky. Fangs of frost is just laughably poor compared to monk strike skills.
Problem #5: Not enough support gems. Early act 3, I can't find enough viable supports for storm lance.
I'll report on my progress tomorrow, I hope it gets better, but so far this was a rough experience.
The half-court buzzer-beater from Jokić gave him 16,003 career PTS.
He is now the FASTEST player (739 games) in NBA history to reach 16,000 PTS, 8,000 REB, & 5,000 AST 🃏
The previous fastest was Larry Bird, who reached those figures in 799 games!
100+ support gems, 100+ new uniques, a lot of new crafting options and map encounters - all of this sounds really good.
It's a bit of a shame, there's no druid and no challenge league, but they still managed to get me quite hyped for PoE2 again!
LOGIN!