Comment on Should I be worried about "Prompt ejection" attacks on my gmail?
nandeEbisu@lemmy.world 3 days agoSure, it’s important to be aware of future potential issues, but there’s a huge difference between I get the wrong answer when I ask a chatbot about my email vs remote code execution.
Also, one is a general security vulnerability with email as a whole, like phishing you can get scammed regardless of your email client, vs improperly implemented features in a specific library. I don’t think this is a reason to leave Gmail.
I don’t think this is a reason to leave Gmail.
I agree. I left Gmail long ago for other reasons.
Mainly that I’ve seen nothing in the terms of sevice that says they won’t sell what they know about me to employers to help employers low-ball me during a salary negotiation.
pinball_wizard@lemmy.zip 3 days ago
New code tends to have flaws. There’s no strong reason to expect that the current new implement has a serious flaw.
But if I was still using Gmail, I would turn the new feature off.
Anything that can be exploited in a software stack is a higher risk when exposed to the risk cesspool of modern email.
So in summary: chance that this new feature is an injection risk: low.
Risk of harm if there’s any security flaws in it: high.