←back to thread

Hidden risk in Notion 3.0 AI agents: Web search tool abuse for data exfiltration

(www.codeintegrity.ai)
156 points abirag | 3 comments | 19 Sep 25 21:49 UTC | HN request time: 0.206s | source
Show context
nwellinghoff ◴[19 Sep 25 23:06 UTC] No.45307850[source]▶
How does a random user get a document in your notion instance?
replies(5): >>45307876 #>>45307919 #>>45308473 #>>45308804 #>>45310975 #
1. cobertos ◴[19 Sep 25 23:08 UTC] No.45307876[source]▶
People put all kinds of stuff in Notion. People use it as a DB. People catalog things they find online (web clipper). There's collaboration features.

There are many ways

replies(2): >>45308540 #>>45310985 #
2. PokestarFan ◴[20 Sep 25 00:35 UTC] No.45308540[source]▶
If I had to describe it, Notion is if somehow managed to combine OneNote and Excel. Of interest is the fact that the "database" system stores each row as a page with the column values other than title stored in a special way. Of course, this also means that it doesn't scale at all, but I have seen some crazy use cases (an example is replacing Jira).
3. freakynit ◴[20 Sep 25 06:35 UTC] No.45310985[source]▶
Notion is like the "dump-truck" of everything lol.