TechTakes

2253 readers

110 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 2 years ago

MODERATORS

dgerard@awful.systems

It’s trivial to prompt-inject Github’s AI Copilot Chat (pivot-to-ai.com)

submitted 3 days ago by dgerard@awful.systems to c/techtakes@awful.systems

1 comments fedilink hide all child comments

‘You won a free $10 Copilot coupon!’

https://www.youtube.com/watch?v=iapCiYBj1bI&list=UU9rJrMVgcXTfa8xuMnbhAEA - video
https://pivottoai.libsyn.com/20251014-prompt-inject-githubs-ai-copilot-chat - podcast

time: 5 min 32 sec

top 1 comments

sorted by: hot top controversial new old

[–] BlueMonday1984@awful.systems 13 points 3 days ago

But can we do a zero click attack? Can we make Copilot Chat give us the user’s private data if they even look at the pull request page? Yes, we can!

In a YouTube commenter's own words: