Rohan Maloney

Working at ServiceNow.
Former @CDC:DC @Delltech @Microsoft @Samsung
Automation for the enterprise.

[NASA @NASA]

Have you signed up to fly your name around the Moon?

If not, there’s still time to send your name with our crew on the Artemis II mission! Submitted names will be stored on a memory card inside the Orion spacecraft. Join the flight: https://t.co/5nu5GdtPvo

[Eito Miyamura | 🇯🇵🇬🇧 @Eito_Miyamura]

We got ChatGPT to leak your private email data 💀💀

All you need? The victim's email address. ⛓️‍💥🚩📧

On Wednesday, @OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by @AnthropicAI

But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense.

And with just your email, we managed to exfiltrate all your private information.

Here's how we did it:
1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite.
2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar
3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email.

For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve.

Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data.

ChatGPT + Tools poses a serious security risk

[Rohan Maloney @rohanmaloney]

Learn a language with me for free! Duolingo is fun, and proven to work. Here’s my invite link: https://t.co/XfqDBSM1Kg

[Rohan Maloney @rohanmaloney]

Learn a language with me for free! Duolingo is fun, and proven to work. Here’s my invite link: https://t.co/XfqDBSM1Kg

[Rohan Maloney @rohanmaloney]

Learn a language with me for free! Duolingo is fun, and proven to work. Here’s my invite link: https://t.co/XfqDBSM1Kg

[Anthony Ellis @skydog811]

https://t.co/xuGBqP1WL9

[Chubby♨️ @kimmonismus]

What? Look how good this humanoid robot from EngineAI is running! Not only does it look human but it’s fast aswell. It’s nuts how fast robots are developing at such an insane pace

[pixelfun @PPixelfun]

@rohanmaloney Gift :-) #pixelfun #starship Only made with the starship flight video frames
RT is Cool, a follow is appreciated

[David Rivera @darifernet]

Windows Server 2025, security baseline | Microsoft Community Hub https://t.co/e7FB6FpHic

[Rohan Maloney @rohanmaloney]

The AI bust is here – Computerworld https://t.co/aeV6Zgeute

[Matt Baker @mattwbaker]

BTW, has everyone forgotten about Llama2, Mistral, Mixtral, and Llama3 have done over the last year or so? Deepseek is just another turn of the algorithmic innovation crankhandle.

Algorithmic Innovation > Cluster Size/GPU Sophistication

[Rohan Maloney @rohanmaloney]

Great article by @sandy_carter @ForbesWeb3

[Unstoppable Domains @unstoppableweb]

@sandy_carter @mattgould @Forbes @ForbesWeb3 https://t.co/tP5Fm662xP

[Unstoppable Domains @unstoppableweb]

Awesome article today in @Forbes by @sandy_carter
Also some great insight by @mattgould ) - “Companies and communities will increasingly adopt their own TLDs (e.g., .BRAND), leveraging them to create immersive, loyalty-driven ecosystems in Web3 environments.”

@ForbesWeb3

[Black Hole @konstructivizm]

Beautiful picture of Jupiter
NASA

[Rohan Maloney @rohanmaloney]

@BenThePCGuy @FriarNickLocked Ohh no pressure, but I'm super interested in comparing supplement regimes, would you mind if I could grab a list as well?

[CanberraDSN 📡 @CanberraDSN]

Who ya goin' to call!📞
Deep Space Station 43!📡

Our big antenna dish was integral to the return to operations by @NASA @NASAJPL's Voyager 1 spacecraft, after a power and communication glitch nearly 25 billion kilometres from home. #DSS43 https://t.co/dZwGFKDLKu

[Orin Thomas @orinthomas]

Performing a direct in-place upgrade of a Windows Server 2012 R2 domain controller to Windows Server 2025 https://t.co/WzKW1NtZLq #WindowsServer

[Rohan Maloney @rohanmaloney]

https://t.co/6lFDGrKaE6

[Josh RR Jokien @joshcarlosjosh]

SAM: Folk in those stories had lots of chances of turning back only they didn’t. Because they were holding on to something.

FRODO: What are we holding on to, Sam?

SAM: That there’s some good in this world, Mr. Frodo. And it’s worth fighting for.