• BillBurBaggins@lemmy.world
    link
    fedilink
    English
    arrow-up
    2
    arrow-down
    13
    ·
    5 hours ago

    I’ve used agents, they tell you everything they’re going to do. And they’re incredibly slow and stupid. I don’t think OPs original premise of it instantly and secretly stealing your bank account details is realistic.

    I don’t think I said prompt injection didn’t exist, just that it didn’t need to be worried about by users in exactly the way that was described

    • Pup Biru@aussie.zone
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      4 hours ago

      and these browsers are specifically not that… these browsers are intended to do things like categorise tabs, complete forms, etc automatically without your interaction

      of course they’ll ask before they do things they consider destructive, but what they consider destructive and what a malicious actor can use are very different things

      some of that is certainly benign, but the point with prompt injection is that it can take benign things and make them plausibly malicious