374
Hacker plants false memories in ChatGPT to steal user data in perpetuity (arstechnica.com)
submitted 2 years ago by to c/technology@lemmy.world
35 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 2 years ago (1 child)

But the path changes with every new data element. It's never the same, so every "prefetch" is a whole new image in the system's eyes.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    Even with a unique link, if the behavior is that as soon as the email server receives it, it’s prefetched, what does that reveal about the user?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago* (1 child)

    Server or client, every supposed prefetch would be unique. If I trick an LLM client into grabbing:

    site.com/random-words-of-data/image.gif

    Then:

    site.com/more-random-data/image.gif

    Those are two separate images to the cache engine. As the data refreshes, the URL changes, forcing a new grab each time.

    For email, marketers do this by using a unique image URL for every recipient.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    Cool, all of your images are getting fetched by the server as it receives and processes the emails. You have 100% open rate on all emails to that domain within 3 minutes of send.

    What do you know about the user and their behavior? Nothing. The prefetch is not tied to their actions, therefore you cannot learn anything about their actions.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •