TechTakes

2254 readers

142 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 2 years ago

MODERATORS

dgerard@awful.systems

It’s trivial to prompt-inject Github’s AI Copilot Chat (pivot-to-ai.com)

submitted 4 days ago by dgerard@awful.systems to c/techtakes@awful.systems

1 comments fedilink hide all child comments

‘You won a free $10 Copilot coupon!’

https://www.youtube.com/watch?v=iapCiYBj1bI&list=UU9rJrMVgcXTfa8xuMnbhAEA - video
https://pivottoai.libsyn.com/20251014-prompt-inject-githubs-ai-copilot-chat - podcast

time: 5 min 32 sec

you are viewing a single comment's thread
view the rest of the comments

[–] BlueMonday1984@awful.systems 13 points 4 days ago

But can we do a zero click attack? Can we make Copilot Chat give us the user’s private data if they even look at the pull request page? Yes, we can!

In a YouTube commenter's own words: