←back to thread

Comet AI browser can get prompt injected from any site, drain your bank account

(twitter.com)
645 points helloplanets | 1 comments | 24 Aug 25 15:14 UTC | HN request time: 0.21s | source
Show context
gtirloni ◴[24 Aug 25 15:41 UTC] No.45005076[source]▶
Nobody could have predicted this /s

Joke aside, it's been pretty obvious since the beginning that security was an afterthought for most "AI" companies, with even MCP adding secure features after the initial release.

replies(1): >>45005124 #
brookst ◴[24 Aug 25 15:45 UTC] No.45005124[source]▶
How does this compare to the way security was implemented by early websites, internet protocols, or telecom systems?
replies(5): >>45005206 #>>45005207 #>>45005488 #>>45007680 #>>45010326 #
SoftTalker ◴[24 Aug 25 15:53 UTC] No.45005207[source]▶
Must we learn the same lessons over and over again? Why? Is our industry particularly stupid? Or just lazy?
replies(6): >>45005267 #>>45005312 #>>45005369 #>>45005463 #>>45005776 #>>45011042 #
1. zahlman ◴[24 Aug 25 16:00 UTC] No.45005267[source]▶
Rather: it's perpetually in a rush for business reasons, and concerned with convenience. Security generally impedes both.