Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

we hijacked perplexity comet by sending a weaponized calendar invite then used it to takeover victim's 1p account and exfil their local files call it pleasefix. like clickfix, but instead of social eng'ing a human you just ask their ai real nicely incredible work by StAJect0r

mbrg0's profile picture

Michael Bargury

8,926 subscribers

47,394 Aufrufe • vor 4 Monaten •via X (Twitter)

Nachrichten & PolitikWissenschaft & Technologie
LIVE

Anya Rossi• Live Now

Private livecam show

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

We got ChatGPT to leak your private email data 💀💀 All you need? The victim's email address. ⛓️‍💥🚩📧 On Wednesday, OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by Anthropic But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense. And with just your email, we managed to exfiltrate all your private information. Here's how we did it: 1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite. 2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar 3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email. For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve. Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data. ChatGPT + Tools poses a serious security risk
2:54

We got ChatGPT to leak your private email data 💀💀 All you need? The victim's email address. ⛓️‍💥🚩📧 On Wednesday, OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by Anthropic But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense. And with just your email, we managed to exfiltrate all your private information. Here's how we did it: 1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite. 2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar 3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email. For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve. Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data. ChatGPT + Tools poses a serious security risk

Eito Miyamura | 🇯🇵🇬🇧

1,538,099 Aufrufe • vor 10 Monaten

Tony Blair and Oracle co-founder Larry Ellison plan to use digital ID to "unify" all data on each country's citizens "so it can be consumed and used by" their AI models. "We have to take all of this data... and move it into a single... unified data platform." "When we want to ask a question, we've provided that AI model with all the data they need to understand our country." "We need to unify all of the national data, put it into a database where it's easily consumable by the AI model, and then ask whatever question you like."
1:06

Tony Blair and Oracle co-founder Larry Ellison plan to use digital ID to "unify" all data on each country's citizens "so it can be consumed and used by" their AI models. "We have to take all of this data... and move it into a single... unified data platform." "When we want to ask a question, we've provided that AI model with all the data they need to understand our country." "We need to unify all of the national data, put it into a database where it's easily consumable by the AI model, and then ask whatever question you like."

Wide Awake Media

54,084 Aufrufe • vor 8 Monaten

Just watched Ref Watch on their penalty yesterday and I’m standing by it it was the correct decision. 👀 You don’t have to like it, but by the letter of the law it’s a pen. Sometimes you’ve just got to be honest about it instead of bending the rules to suit your badge.
2:00

Just watched Ref Watch on their penalty yesterday and I’m standing by it it was the correct decision. 👀 You don’t have to like it, but by the letter of the law it’s a pen. Sometimes you’ve just got to be honest about it instead of bending the rules to suit your badge.

nicoraskinssocks

84,212 Aufrufe • vor 4 Monaten

The Democrats are intentionally using hoaxes to destroys lives and families Scott Adams “The news used to be just the news, and you could let everybody have their say. But once people weaponized it by making it up and then acting like it was real, and then having all the other entities also back you up on the thing you made up, obvious hoaxes, that’s not like anything we’ve experienced before, and that shit has to be dismantled completely.”
3:02

The Democrats are intentionally using hoaxes to destroys lives and families Scott Adams “The news used to be just the news, and you could let everybody have their say. But once people weaponized it by making it up and then acting like it was real, and then having all the other entities also back you up on the thing you made up, obvious hoaxes, that’s not like anything we’ve experienced before, and that shit has to be dismantled completely.”

jay plemons

151,590 Aufrufe • vor 9 Monaten

Perplexity just launched "Personal Computer", an always-on AI agent that merges their cloud-based Computer system with a Mac Mini. It accesses local files, apps, and sessions, orchestrates 19+ AI models, and can run 24/7. The Mac Mini continues to have its AI moment:
1:27

Perplexity just launched "Personal Computer", an always-on AI agent that merges their cloud-based Computer system with a Mac Mini. It accesses local files, apps, and sessions, orchestrates 19+ AI models, and can run 24/7. The Mac Mini continues to have its AI moment:

The Rundown AI

20,847 Aufrufe • vor 4 Monaten

when the game was structured in a way svt had to work together to beat jeonghan but nothing he did here was aggressive. he just read through their personalities, used it to his advantage, & got through their heads one by one by appealing to their prides like.....wow
2:17

when the game was structured in a way svt had to work together to beat jeonghan but nothing he did here was aggressive. he just read through their personalities, used it to his advantage, & got through their heads one by one by appealing to their prides like.....wow

ًces

85,318 Aufrufe • vor 5 Monaten

Perplexity Comet Assistant got a major upgrade yesterday. It’s now much more reliable and performs 23% better in internal tests, so I decided to put it to the test. The task was to handle my LinkedIn account, follow the CEO of Perplexity, find a specific post, and comment under it, and it nailed it in one shot. It’s navigating more like a human now, and its reasoning at each step is quite good in how it decides the next move. Comet has become really powerful.
1:36

Perplexity Comet Assistant got a major upgrade yesterday. It’s now much more reliable and performs 23% better in internal tests, so I decided to put it to the test. The task was to handle my LinkedIn account, follow the CEO of Perplexity, find a specific post, and comment under it, and it nailed it in one shot. It’s navigating more like a human now, and its reasoning at each step is quite good in how it decides the next move. Comet has become really powerful.

AshutoshShrivastava

58,154 Aufrufe • vor 8 Monaten

You can just ask Perplexity Comet to generate a video for you using Veo 3 inside Gemini 🙂 You can either give a detailed prompt with steps or just keep it simple like this, both work: Comet Prompt: You have access to the Gemini interface, use it to generate a video and wait for rendering to complete. Prompt: It figures out the rest. Where to paste the prompt, whether to click the video option, everything. Pretty smart.
0:21

You can just ask Perplexity Comet to generate a video for you using Veo 3 inside Gemini 🙂 You can either give a detailed prompt with steps or just keep it simple like this, both work: Comet Prompt: You have access to the Gemini interface, use it to generate a video and wait for rendering to complete. Prompt: It figures out the rest. Where to paste the prompt, whether to click the video option, everything. Pretty smart.

AshutoshShrivastava

35,501 Aufrufe • vor 1 Jahr

Instead of going back and forth with your agent saying "hmm little more, no a little less" just ask it to build you a control to tweak it yourself, then give it the params you like.
0:25

Instead of going back and forth with your agent saying "hmm little more, no a little less" just ask it to build you a control to tweak it yourself, then give it the params you like.

Aaron Francis

294,780 Aufrufe • vor 2 Monaten

The team at OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇
0:43

The team at OpenAI just fixed a critical account takeover vulnerability I reported few hours ago affecting #ChatGPT. It was possible to takeover someone's account, view their chat history, and access their billing information without them ever realizing it. Breakdown below 👇

Nagli

708,177 Aufrufe • vor 3 Jahren

Larry Ellison—owner of Oracle, CBS, and now TikTok—tells Tony Blair about his plan to use digital ID to "unify" all data on each country's citizens "so it can be consumed and used by" his AI models. "We have to take all of this data... and move it into a single, if you will, unified data platform." "When we want to ask a question, we've provided that AI model with all the data they need to understand our country." "We need to unify all of the national data, put it into a database where it's easily consumable by the AI model, and then ask whatever question you like."
1:14

Larry Ellison—owner of Oracle, CBS, and now TikTok—tells Tony Blair about his plan to use digital ID to "unify" all data on each country's citizens "so it can be consumed and used by" his AI models. "We have to take all of this data... and move it into a single, if you will, unified data platform." "When we want to ask a question, we've provided that AI model with all the data they need to understand our country." "We need to unify all of the national data, put it into a database where it's easily consumable by the AI model, and then ask whatever question you like."

Wide Awake Media

144,324 Aufrufe • vor 5 Monaten

First I supported #Bitcoin but then it got hijacked by bankers and turned into slow and expensive garbage. Ever since then I support #BitcoinCash because it allows you to be your own bank with instant and cheap transactions. The takeover is inevitable.
2:20

First I supported #Bitcoin but then it got hijacked by bankers and turned into slow and expensive garbage. Ever since then I support #BitcoinCash because it allows you to be your own bank with instant and cheap transactions. The takeover is inevitable.

Kim Dotcom

224,747 Aufrufe • vor 2 Jahren

Perplexity just released Comet the most powerful agentic browser we’ve ever seen. It searches the web, summarizes, and answers questions in real time. 10 wild examples: 1. Email and Calendar management
1:05

Perplexity just released Comet the most powerful agentic browser we’ve ever seen. It searches the web, summarizes, and answers questions in real time. 10 wild examples: 1. Email and Calendar management

AI Frontliner

154,234 Aufrufe • vor 1 Jahr

First AI Engineer That Takes JIRA Tickets We just assigned a JIRA ticket to an AI and it actually shipped the feature Clark by Superblocks doesn't just code - it works like a real engineer:
1:48

First AI Engineer That Takes JIRA Tickets We just assigned a JIRA ticket to an AI and it actually shipped the feature Clark by Superblocks doesn't just code - it works like a real engineer:

AI Club

61,860 Aufrufe • vor 1 Jahr

This megalithic site in Malta is over 5600 years old and holds an incredible secret. It is a colossal stone calendar, believed to have been built at a time we call The Stone Age. Filmed/Edited/Narrated by me. Support my work with a Like/Comment/Repost
6:16

This megalithic site in Malta is over 5600 years old and holds an incredible secret. It is a colossal stone calendar, believed to have been built at a time we call The Stone Age. Filmed/Edited/Narrated by me. Support my work with a Like/Comment/Repost

Jay Anderson

46,005 Aufrufe • vor 2 Monaten

“ AI music and fictional characters are radically disrupting the industry but are not fully replacing real music or artists. Instead of a total takeover, we are seeing a shift where AI and human artistry coexist, forcing human musicians to lean into live performances, branding, and authentic storytelling.”
0:58

“ AI music and fictional characters are radically disrupting the industry but are not fully replacing real music or artists. Instead of a total takeover, we are seeing a shift where AI and human artistry coexist, forcing human musicians to lean into live performances, branding, and authentic storytelling.”

Alaa Mubarak

39,927 Aufrufe • vor 1 Tag

It looks like Microsoft has blocked the bypass that allowed you to create a local account during Windows 11 setup by typing in a blocked email address. Now it just loops you back to typing in a different account :(
0:30

It looks like Microsoft has blocked the bypass that allowed you to create a local account during Windows 11 setup by typing in a blocked email address. Now it just loops you back to typing in a different account :(

Zac Bowden

337,946 Aufrufe • vor 2 Jahren

I had originally dismissed document number 147661 as rather ridiculous, as it was a summary of a complaint that was made, seemingly by a random schizo. That is, until the DoJ deleted it from their database, like it never existed. Granted, it should be patently obvious by now that the DoJ is teasing interesting files, then deleting them just to mess with us, but still.
0:21

I had originally dismissed document number 147661 as rather ridiculous, as it was a summary of a complaint that was made, seemingly by a random schizo. That is, until the DoJ deleted it from their database, like it never existed. Granted, it should be patently obvious by now that the DoJ is teasing interesting files, then deleting them just to mess with us, but still.

BelowTheTearline

11,481 Aufrufe • vor 5 Monaten