c/technology · by throws_lemy@lemmy.nz · 69d

Hackers could use poisoned WhatsApp and Slack notifications to take over your Google Gemini – and make it work on their behalf

https://www.techradar.com/pro/security/hackers-could-use-poisoned-whatsapp-and-slack-notifications-to-take-over-your-google-gemini-and-make-it-work-on-their-behalf

129 points · 15 comments · view on lemmy.world

15 Comments

hansolo@lemmy.today · 32 pts · 69d (5 replies)

lol. Your Gemini. I ain't touchin' that shit.

tourist@lemmy.world · 13 pts · 69d (4 replies)

Gemini is the name I gave my taint

fartographer@lemmy.world · 5 pts · 68d (2 replies)

I used it to write code in my latest release, and it totally tainted the database. I should have been more anal in my MR. At least we're able to keep everything open and free. In other news, the foundation finally sacked up, and hired a new CEO; they're from Blackstone, and we foresee some really big changes in our stream. In fact, now is as good a time as any to announce that we're seeking pubic evaluation.

tourist@lemmy.world · 3 pts · 68d (1 reply)

I'm friday-night-high and I really enjoyed reading this.

Thank you, fartographer.

fartographer@lemmy.world · 2 pts · 66d

I'm glad you enjoyed it. I hoped that my jokes would land, but was worried that I wrecked 'em.

a_non_monotonic_function@lemmy.world · 2 pts · 68d

Wait that is what I was calling your taint. 🤔

Imperious_melange@lemmy.world · 17 pts · 69d

[ removed ]

Satellaview@lemmy.zip · 8 pts · 69d

They… patched it? Yeah right. This is a whole class of fundamental design problem inherent to LLMs. But don’t worry, Google claims that it’s fixed now, I’m sure they’re telling the truth and not just pumping the bubble…

arcine@jlai.lu · 5 pts · 68d (3 replies)

I use none of those three apps 😂

WhyJiffie@sh.itjust.works · 5 pts · 68d (2 replies)

first paragraph:

They can also be done on Android, using pretty much any communications platform in existence today.

this probably relies on the gemini spyware sending all your notifications to google

The idea is that the victims will dismiss the foreign-language question as a bug or a glitch and will simply proceed as if nothing’s happened.

but sadly this is not a 0 click prompt injection

arcine@jlai.lu · 3 pts · 67d (1 reply)

Considering I don't use Gemini, which is the lynch pin here, I feel 100% safe.

WhyJiffie@sh.itjust.works · 2 pts · 67d

you probably shouldn't feel that safe, because people you chat with probably do use it

dbtng@eviltoast.org · 3 pts · 68d

Please yes. I want this to be a thing.

EndlessNightmare@reddthat.com · 2 pts · 69d

Assuming control

darkangelazuarl@lemmy.world · 2 pts · 67d

Jokes on you I don't use Gemini

MrRandom@lemmy.zip · 1 pts · 69d

Joke's on them, I disabled my Whatsapp notifications ages ago. It's annoying AF