logoalt Hacker News

postalcoderyesterday at 9:12 PM1 replyview on HN

It's kind of wild how dangerous these things are and how easily they could slip into your life without you knowing it. Imagine downloading some high-interest document stashes from the web (like the Epstein files), tax guidance, and docs posted to your HOA's Facebook. An attacker could hide a prompt injection attack in the PDFs as white text, or in the middle of a random .txt file that's stuffed with highly grepped words that an assistant would use.

Not only is the attack surface huge, but it also doesn't trigger your natural "this is a virus" defense that normally activates when you download an executable.


Replies

tedmistonyesterday at 10:20 PM

The only truly secure computer is an air gapped computer.

show 2 replies