I know I should ditch gmail and I’m working on it.

  • pinball_wizard@lemmy.zip
    link
    fedilink
    arrow-up
    0
    ·
    17 days ago

    Agreed. Architecturally, there’s no reason to have a prompt injection risk, of any kind, here.

    But, that was true about Log4J, as well - until we learned otherwise.

    I tend toward extra caution in this modern era of libraries stacked on libraries.

    • nandeEbisu@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      16 days ago

      Sure, it’s important to be aware of future potential issues, but there’s a huge difference between I get the wrong answer when I ask a chatbot about my email vs remote code execution.

      Also, one is a general security vulnerability with email as a whole, like phishing you can get scammed regardless of your email client, vs improperly implemented features in a specific library. I don’t think this is a reason to leave Gmail.