Hacker plants false memories in ChatGPT to steal user data in perpetuity - eviltoast
Emails, documents, and other untrusted content can plant malicious memories.
  • Eager Eagle@lemmy.worldEnglish
    110·
    2 months ago

    tldr

    • it affects the desktop app of chatgpt, but likely any client that features long term memory functionality.
    • does not apply to the web interface.
    • does not apply to API access.
    • the data exfiltration is visible to the user as GPT streams the tokens that form the exfiltration URL as a (fake) markdown image.