Notion AI: Unpatched data exfiltration
promptarmor.com
Notion AI: Unpatched data exfiltration
1–10 of 42 posts
Re: Notion AI: Unpatched data exfiltration
#2Unfortunate that Notion does not seem to be taking AI security more seriously, even after they got flak for other data exfil vulns in the 3.0 agents release in September
Re: Notion AI: Unpatched data exfiltration
#3[deleted]
Re: Notion AI: Unpatched data exfiltration
#4IMHO the problem really comes from the browser accessing the URL without explicit user permission.
Bring back desktop software.
Re: Notion AI: Unpatched data exfiltration
#5Securing LLMs is just structurally different. The attack space is "the entirety of the human written language" which is effectively infinite. Wrapping your head around this is something we're only now starting to appreciate.
In general, treating LLM outputs (no matter where) as untrusted, and ensuring classic cybersecurity guardrails (sandboxing, data permissioning, logging) is the current SOTA on mitigation. It'll be interesting to see how approaches evolve as we figure out more.
Re: Notion AI: Unpatched data exfiltration
#6People have learnt a little while back that you need to use the white hidden text in a resume to make the AI recommend you, There are also resume collecting services which let you buy a set of resumes belonging to your general competition era and you can compare your ai results with them. Its an arms race to get called up for a job interview at the moment.
Re: Notion AI: Unpatched data exfiltration
#7Sloppy coding to know a link could be a problem and render it anyway. But even worse to ignore the person who tells you you did that.
Re: Notion AI: Unpatched data exfiltration
#8Public disclosure date is Jan 2025, but should be Jan 2026.
Re: Notion AI: Unpatched data exfiltration
#9One more reason not to use Notion.
I wonder when there will be awakening to not use SaaS for everything you do. And the sad thing is that this is the behavior of supposedly tech-savvy people in places like the bay area.
I think the next wave is going to be native apps, with a single purchase model - the way things used to be. AI is going to enable devs, even indie devs, to make such products.
Re: Notion AI: Unpatched data exfiltration
#10This, of course, more yelling into the void from decades ago, but companies who promise or imply "safety around your data" and fail should be proportionally punished, and we as a society have not yet effectively figured out how to do that yet. Not sure what it will take.