captainkangaroo@discuss.tchncs.de to Technology@lemmy.worldEnglish · 2 days agoHacker plants false memories in ChatGPT to steal user data in perpetuityarstechnica.comexternal-linkmessage-square25fedilinkarrow-up11arrow-down10
arrow-up11arrow-down1external-linkHacker plants false memories in ChatGPT to steal user data in perpetuityarstechnica.comcaptainkangaroo@discuss.tchncs.de to Technology@lemmy.worldEnglish · 2 days agomessage-square25fedilink
minus-squarefmstrat@lemmy.nowsci.comlinkfedilinkEnglisharrow-up0·16 hours agoBut the path changes with every new data element. It’s never the same, so every “prefetch” is a whole new image in the system’s eyes.
minus-squarehedgehog@ttrpg.networklinkfedilinkEnglisharrow-up0·15 hours agoEven with a unique link, if the behavior is that as soon as the email server receives it, it’s prefetched, what does that reveal about the user?
minus-squarefmstrat@lemmy.nowsci.comlinkfedilinkEnglisharrow-up0·edit-214 hours agoServer or client, every supposed prefetch would be unique. If I trick an LLM client into grabbing: site.com/random-words-of-data/image.gif Then: site.com/more-random-data/image.gif Those are two separate images to the cache engine. As the data refreshes, the URL changes, forcing a new grab each time. For email, marketers do this by using a unique image URL for every recipient.
But the path changes with every new data element. It’s never the same, so every “prefetch” is a whole new image in the system’s eyes.
Even with a unique link, if the behavior is that as soon as the email server receives it, it’s prefetched, what does that reveal about the user?
Server or client, every supposed prefetch would be unique. If I trick an LLM client into grabbing:
site.com/random-words-of-data/image.gif
Then:
site.com/more-random-data/image.gif
Those are two separate images to the cache engine. As the data refreshes, the URL changes, forcing a new grab each time.
For email, marketers do this by using a unique image URL for every recipient.