Thanks to new ChatGPT updates like the Code Interpreter,реальное порнография OpenAI's popular generative artificial intelligence is rife with more security concerns. According to research from security expert Johann Rehberger (and follow-up work from Tom's Hardware), ChatGPT has glaring security flaws that stem from its new file-upload feature.
This Tweet is currently unavailable. It might be loading or has been removed.
OpenAI's recent update to ChatGPT Plus added a myriad of new features, including DALL-E image generation and the Code Interpreter, which allows Python code execution and file analysis. The code is created and run in a sandbox environment that is unfortunately vulnerable to prompt injection attacks.
SEE ALSO: OpenAI's Sam Altman breaks silence on AI executive orderA known vulnerability in ChatGPT for some time now, the attack involves tricking ChatGPT into executing instructions from a third-party URL, leading it to encode uploaded files into a URL-friendly string and send this data to a malicious website. While the likelihood of such an attack requires specific conditions (e.g., the user must actively paste a malicious URL into ChatGPT), the risk remains concerning. This security threat could be realized through various scenarios, including a trusted website being compromised with a malicious prompt — or through social engineering tactics.
Tom's Hardware did some impressive work testing just how vulnerable users may be to this attack. The exploit was tested by creating a fake environment variables file and using ChatGPT to process and inadvertently send this data to an external server. Although the exploit's effectiveness varied across sessions (e.g., ChatGPT sometimes refused to load external pages or transmit file data), it raises significant security concerns, especially given the AI's ability to read and execute Linux commands and handle user-uploaded files in a Linux-based virtual environment.
As Tom's Hardware states in its findings, despite seeming unlikely, the existence of this security loophole is significant. ChatGPT should ideally notexecute instructions from external web pages, yet it does. Mashablereached out to OpenAI for comment, but it did not immediately respond to our request.
Topics Artificial Intelligence ChatGPT OpenAI
AMD FSR 4 vs Nvidia DLSS 4 at 4KThe Science of Keeping Your Chips CoolThe Billionaire’s Happy MealYouTube is injecting more AI into your recommendationsTechSpot PC Buying Guide: 2025 UpdateWatch the moment SpaceX Starship crushed a major milestone in latest testThe Machines Calling Balls and StrikesWar StoriesThe Most Memorable OverclockingNASA’s Mars rover proves these peculiar ridges have secrets to tell New York City's AI plan: These are the key takeaways How to watch NC State vs. Duke football without cable: kickoff time, streaming deals, and more 'The Fall of the House of Usher' ending explained, brutal and Poe WhatsApp now lets you log in with passkeys on Android 'The Fall of the House of Usher's tiniest Poe reference is damn well hidden Netflix is opening stores soon — but don’t expect a ‘Blockbuster’ revival Which 'Fall of the House of Usher' episode is which Poe story? NYT's The Mini crossword answers for October 18 Wordle today: The answer and hints for October 19 Best Apple Watch Ultra deal: $70 off Apple Watch Ultra
0.1797s , 7919.4140625 kb
Copyright © 2025 Powered by 【реальное порнография】ChatGPT has a scary security risk after new update. Is your data in trouble?,Global Hot Topic Analysis