logoalt Hacker News

anthonyskipperyesterday at 10:30 PM4 repliesview on HN

The scariest part of the interaction is the first video at https://x.ai/bot where the bot just snags your creds from the browser and takes over. So many people are going to give x all their data and creds.


Replies

kylecazaryesterday at 11:27 PM

I assume they store your session state/token for whatever SaaS it needs to work with but not the creds.

show 1 reply
edoceoyesterday at 11:16 PM

What? How? Just the x.com creds or other ones too?

nozzlegeartoday at 3:24 AM

Well, it's the "Everything App" after all!

/s

walrus01yesterday at 11:35 PM

Oh boy, I've always wanted to give a gas turbine powered CSAM generator my credentials! I can't wait, sign me up now.