Using an AI Agent Makes You a Sucker for Phishing Emails: "The real flaw is that the model can’t tell the difference between text it’s supposed to read and instructions it’s supposed to follow."

a day ago by eicker to c/technology

As cybersecurity software company Malwarebytes warns in a blog post, AI assistants may fall prey to prompt injection attacks.
eicker 73 points a day ago

We spent decades teaching people not to click suspicious links, then handed our inboxes and payment permissions to a chatbot that treats »ignore previous instructions« as a promotion to management. The phishing email no longer needs to fool you: It just needs to fool your very expensive autocomplete intern.

path: 0 26385234, hotness: undefined, score: 73, children: 0
rebelsimile 33 points a day ago

Yeah no shit, 20 years of gmails ‘s complete inability to determine spam from real email is testament to this

path: 0 26385386, hotness: undefined, score: 33, children: 6
Godort 14 points a day ago

It turns out that making a machine that is capable of determining the difference between actual legitimate messages and messages pretending to be legitimate is a really difficult problem to solve

path: 0 26385386 26386340, hotness: undefined, score: 14, children: 4
rebelsimile 18 points a day ago

Well we are also trusting an advertising company to filter out ads.

path: 0 26385386 26386340 26386781, hotness: undefined, score: 18, children: 1
porous_grey_matter 13 points a day ago

they have an interest in filtering out ads they weren't paid for tho

path: 0 26385386 26386340 26386781 26388236, hotness: undefined, score: 13, children: 0
Archangel1313 5 points a day ago

Considering that most of the difference between "wanted" and "unwanted" content depends entirely on the user, I'm surprised systems like these even work as well as they do.

path: 0 26385386 26386340 26386651, hotness: undefined, score: 5, children: 0
alsimoneau 2 points a day ago

In no small part because of adversarial training.

path: 0 26385386 26386340 26392074, hotness: undefined, score: 2, children: 0
daychilde 11 points a day ago

That's a very interesting take. Gmail has always had one of the better spam filters in my experience. I absolutely remember when common wisdom was that if you were inundated with spam, one way to help was to forward email to a gmail box and have its spam filters run on it.

Even today, I see very few false positives and false negatives.

YMMV of course.

path: 0 26385386 26388940, hotness: undefined, score: 11, children: 0
JoMiran 15 points a day ago

Why use AI to read emails? My rules are that if in Inbox and unread for a week, move to Purgatory. If in Purgatory for more than a month, delete.

If you want me to read an email, you better text me that you emailed me. Receipts, updates, and all that jazz already have filters and rules.

path: 0 26386283, hotness: undefined, score: 15, children: 4
Dojan 5 points a day ago

I need to step up the names for my filters I see. Any and all meetings immediately go to Kokytos. Weredog pamphlets? Elysion.

path: 0 26386283 26388592, hotness: undefined, score: 5, children: 1
Vikthor 1 point a day ago

Make it howl when it filters to Sto'Vo'Kor.

path: 0 26386283 26388592 26393272, hotness: undefined, score: 1, children: 0
freeman 4 points 17 hours ago

Bro, if you ever text me and expect me to read it, call me.

path: 0 26386283 26395424, hotness: undefined, score: 4, children: 1
JoMiran 3 points 17 hours ago

If you call me, something very important better be on fire. (Assuming we're still talking work)

path: 0 26386283 26395424 26395587, hotness: undefined, score: 3, children: 0
beep 14 points a day ago path: 0 26388730, hotness: undefined, score: 14, children: 0
LeftReddit2 10 points a day ago

Why would you use your AI Agents to check emails? I only use my locally run AI Agents to send me incredibly insulting messages on Matrix and Signal because I'm into that kinda thing.

path: 0 26387576, hotness: undefined, score: 10, children: 1
atrielienz 2 points 15 hours ago

Unless you go in and specifically turn them off they are on by default in some email systems like Google's (and I think Microsoft's).

path: 0 26387576 26397329, hotness: undefined, score: 2, children: 0
technology
technology

@lemmy.world

login for more options
88882
22268
14630

This is a most excellent place for technology news and articles.

Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


go to feed...