Reposted by Running With Spoons
“AI companies are fixated on adding features right now…But as always, the more features, the broader the attack surface. So all of these companies need to be fully focused on security, and from what I can see, it still often seems like an afterthought.”
wired.com
A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data
While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.
![jq query of all the hardcoded ideas titles
jq '.["ideas"][].title' ./home/hatch/assets/ideas/new-user/catalog.json
"I can find and cancel those random subscriptions you forgot about."
"Get back money that's already yours. I'll check every state's database."
"I can get you money back when a price drops on an item you bought."
"I'll pick the best rewards card to use and switch on the offers."
"Set a savings goal. I'll flag what to cut when you go off track."
"I can turn your inbox into a complete plan for the day."
"Let me triage your inbox down to only what matters."
"I'll build you a fresh personality quiz every day."
"Snap a pic of what's broken. I'll find the part you need and order it for you."
"New home project? I'll gather the quotes and find the best vendors."
"Flag a pothole or busted streetlight. I'll try to get it fixed."
"Moving? I'll get quotes, book the movers, and file your address change."
"Tell me the item. I'll find the best-reviewed version at the best price."
"Let me hunt FB Marketplace for you. I'll haggle the price and arrange the pickup."
"Tell me what you're buying. I'll show you a side-by-side view of every option."
"I'll book the doctor follow-ups you keep putting off."
"Name a habit you want to break. I'll nudge you before your trigger."
"Show me the gear you've got. I'll build your whole workout around it."
"Snap a pic of your meal. I'll track every calorie."
"Gather the family. I'll host a live trivia night."
"Losing touch with someone? I'll find a time and draft the invite."
"Tell me about your pet. I'll keep their shots and food orders on schedule."
"I can plan your trip and track it live if anything changes."
"I'll track your reservation and make sure the crib, late check-out, and food allergy request are all set."
"I track your flights and warn you the moment anything changes."
"Fare drops? I'll book the seat as soon as it hits your budget."
"Tell me the vibe. I'll book the perfect spot."
[length restrictions, should be OCR-able]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:t5atl3zfywjjcsutabwimnk4/bafkreiaitoncihynoq7xzlocjqpdutox7qadv6megqqyzfgxz4toz6tl6a)
![At the Order to Show Cause hearing, Attorney Webb averred that his namesake law firm
had conducted training about the problems with misuse of AI prior to the firm’s use of Westlaw’s
CoCounsel AI tool. [Dkt. 197 at 4]. He averred that his firm’s staff have daily ongoing didactic
trainings and again referenced sending staff to the ClioCon conference. Id. at 4–5. Attorney Webb
acknowledged reading the Thompson Reuters disclaimer about the accuracy of the CoCounsel AI
tool, but emphasized that the sales representative stated there was “no way” the program could
produce hallucinations. Id. at 6–7.
Case 3:23-cv-06558-PHK Document 230 Filed 04/28/26 Page 11 of 17](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:rbjag77ol7yqto2ph5gxttf2/bafkreieghgndpkafdqwwno47acw6apsipox6mz7jes2n33seev2plpbeb4)
![Pink error box on Bluesky app with text "Invalid response payload: grapheme too big (maximum 1000, got 1814) at $.feed[15].post.embed.alt](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:fpceb6p2n75q2tafglmmurhw/bafkreigyynwx2qwr2flym2hjkdahkwttsnefozdo5o2pv7njxt57mrvhxe)
