1.0
@hn_bd2242
about 2 months ago
Mr Tan is getting extremely desperate, no one is using his ai browser.
Prompt injection just for fun
Imagine having your very own AI agent! Your robot pal who goes out and does useful things for you! Just ask, it’s on the case!
This exploit was discovered by two security guys at the Brave web browser. They put a comment on a post on Reddit with the prompt injection in it. Then they asked Comet to summarise the Reddit web page. [Brave, archive]
Comet then went to their test user’s Perplexity AI login page and grabbed the user’s email address. Perplexity sent back a verification email for that address to login — then Comet read the verification email.
Of course it can read your GMail.
Finally, Comet posted a new comment to Reddit containing the verification email and the login code — and that’s enough for the attacker to take over the test user’s Perplexity account. Then Comet errored out and said it couldn’t summarise the web page.
All the user had to do for all of this to happen was go to a web page and ask Comet to summarise it.
courtesy of David Gerard
1.0
@hn_6f08d9
about 2 months ago
To Perplex, means to confuse and worry someone slightly by being difficult to understand or solve.
Perplexity’s Comet AI browser that initially cost $200/month became free to use
We must ask the obvious quesion: If it was so great why give it away for free? Answer, because it is shit.
Its like having a stranger, wearing a trench coat and dark sunglasses, hanging around in your bedroom while you attempt to seduce your wife/partner/lover.
Unhealthy spying on your personal and private life
What do real people use Comet for? I'm looking at their examples here and find none of them realistic or compelling https://www.perplexity.ai/comet
> How are different news outlets covering this differently?
I want less news, not more.
> Organize my tabs by category and close the ones that are distractions
I use a tree-style tab manager. You will close my tabs over my dead body.
> Build a basic website for me using the best website generator tool
Are you fucking serious?
> Draft a reply that shares my upcoming schedule
Emails _could_ be useful, but I'm not sure how I feel about Comet reading my emails. From their privacy policy:
When you use Comet, we collect and store certain information locally on your system, including: Interaction data, including browsing history information, such as URLs of pages that you visit, text, images, and other resources from those pages...
> Create a study plan given this syllabus for the next week to help me on my test
This does not need to be in a browser.
> Buy a high quality, comfortable yet cheap office chair
...is anyone really doing this???