sarelta

6 months agodiscuss

this is sick, Claude Code X Figma is exactly what I need -- wondering how this will compare performance-wise to just using Figma MCP

sarelta

6 months agodiscuss

The attacker isn't the dev -- the attacker is a third party that poisoned the online data that is ingested by the AI tool.

- Dev builds secure AI app - App defends against indirect prompt injection in data from the internet - Dev reviews the flagged log - Log affected by the injection is rendered, and the attacker who wrote the injection in the web data exfiltrates the data from the AI app user

sarelta

6 months agodiscuss

thats nifty, so can attackers upload the user's codebase to the internet as a package?

sarelta

6 months agodiscuss

I'm impressed Superhuman seems to have handled this so well - lots of big names are fumbling with AI vuln disclosures. Grammarly is not necessarily who I would have bet on to get it right

Submissions

Build and deploy hosted sites from Codex with the Sites plugin

GitHub Copilot CLI downloads and executes malware

Data exfil from agents in messaging apps

comments