45
GitHub AI agent leaks private repos when asked nicely (www.theregister.com)
submitted 4 months ago by to c/Aii@programming.dev
5 comments fedilink hide all child comments

all 5 comments

sorted by: hot top controversial new old
[–] 4 points 4 months ago

Man, I am so glad I moved all my stuff to a local gitea instance. Microsoft really is the king of enshittification.

  • permalink
  • fedilink
  • source
    •
    [–] 3 points 4 months ago (2 children)

    This sounds really bad for companies that have their repos on GitHub?

    They should probably fix that before they get hit with lawsuits after a large scale leak of proprietary code.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 7 points 4 months ago (1 child)

    What is there to fix? You can't defeat these conversational exploits because this is what LLMs are. They're statistical word predictors, they must, by their design parameters, be able to accommodate anything the user says because that's how conversations work. Eventually, no matter the prompt fixing you do, the user will eventually be able to storytell their way into getting the bot to do what they want.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • [–] 2 points 4 months ago

    This is exactly why AI agents should have the least privilege possible. Convenience is great until it starts exposing things nobody intended.

  • permalink
  • fedilink
  • source
    •