←back to thread

Comet AI browser can get prompt injected from any site, drain your bank account

(twitter.com)
645 points helloplanets | 1 comments | 24 Aug 25 15:14 UTC | HN request time: 0.245s | source
Show context
gtirloni ◴[24 Aug 25 15:41 UTC] No.45005076[source]▶
Nobody could have predicted this /s

Joke aside, it's been pretty obvious since the beginning that security was an afterthought for most "AI" companies, with even MCP adding secure features after the initial release.

replies(1): >>45005124 #
brookst ◴[24 Aug 25 15:45 UTC] No.45005124[source]▶
How does this compare to the way security was implemented by early websites, internet protocols, or telecom systems?
replies(5): >>45005206 #>>45005207 #>>45005488 #>>45007680 #>>45010326 #
1. phyzome ◴[25 Aug 25 04:51 UTC] No.45010326[source]▶
The way it compares is that we've had 30 years to learn from our mistakes (and apparently some of us have failed to).