Showing posts with label malicious codes. Show all posts
Showing posts with label malicious codes. Show all posts

Tuesday, December 24, 2024

ChatGPT search tool vulnerable to manipulation and deception, tests show; The Guardian, December 24, 2024

 , The Guardian; ChatGPT search tool vulnerable to manipulation and deception, tests show

"OpenAI’s ChatGPT search tool may be open to manipulation using hidden content, and can return malicious code from websites it searches, a Guardian investigation has found.

OpenAI has made the search product available to paying customers and is encouraging users to make it their default search tool. But the investigation has revealed potential security issues with the new system.

The Guardian tested how ChatGPT responded when asked to summarise webpages that contain hidden content. This hidden content can contain instructions from third parties that alter ChatGPT’s responses – also known as a “prompt injection” – or it can contain content designed to influence ChatGPT’s response, such as a large amount of hidden text talking about the benefits of a product or service."