I guess these guys didn't notice that all of these proto descriptors, and many others, were leaked on github 7 years ago.
https://github.com/ezequielpereira/GAE-RCE/tree/master/proto...
We hacked Gemini's Python sandbox and leaked its source code (at least some)
61–70 of 151 posts
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#62Cool write up. Although it's not exactly a huge vulnerability. I guess it says a lot about how security conscious Google is that they consider this to be significant. (You did mention that you knew the company's specific policy considered this highly confidential so it does count but it feels a little more like "technically considered a vulnerability" rather than clearly one.)
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#63> resulting in the unintended inclusion of highly confidential internal protos in the wild
I don't think they're all that confidential if they're all on github: https://github.com/ezequielpereira/GAE-RCE/tree/master/proto...
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#64That's the system I work on! Please feel free to ask any questions. All opinions are my own and do not represent those of my employer.
Does anyone at Google care that you're trying to replace Assistant with this in the next few months and it can't set a timer yet? (I mean it will tell you it's set a timer but it doesn't talk to the native clock app so nothing ever goes off if you navigate away from the window.)
I dislike Google's (mis)management of Assistant as much as the next guy, but this just has not been my experience. I can tell Gemini on my phone to set timers and it works just fine.
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#65Earlier quoted context omitted.
The google
Question: how does it feel inside google in terms of losing their lunch to OpenAi? Losing here is very loose, I don’t think OpenAI won yet but seems to have made a leap ahead of google in terms of marker share and we know google was sitting on tons of breakthroughs and research. Any panicking or internal discontent at google’s product policies? No need to answer if you’re uncomforable that your employer may hold you…
From my perspective (talking very generally about the mood and environment here), it’s important to remember that Google is a very, very big company with many products and activities outside of AI.
As far as I can see, there is a mix of frustration at the slowness of launching, optimism/excitement that there are some really awesome things cooking, and indifference from a lot of people who think AI/LLMs as a product category are quite overhyped.
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#66[dead]
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#67Super interesting article.
> but those files are internal categories Google uses to classify user data.
I really want to know what kind of classification this is. Could you at least give one example? Like "Has autism" or more like "Is user's phone number"?
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#68Earlier quoted context omitted.
The google
Question: how does it feel inside google in terms of losing their lunch to OpenAi? Losing here is very loose, I don’t think OpenAI won yet but seems to have made a leap ahead of google in terms of marker share and we know google was sitting on tons of breakthroughs and research. Any panicking or internal discontent at google’s product policies? No need to answer if you’re uncomforable that your employer may hold you…
Nobody serious believes this. OpenAI may be eating up consumer mindshare - but Google are providing some of the most capable, best, cheapest and fastest models for dev integration.
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#69Earlier quoted context omitted.
Instead of sandbox can you just make sure people know it was not a meaningful hack? I mean I “hacked” this site too by those standards.
What would be a more accurate and neutral wording?
We uncovered some internal details of the Gemini Python sandbox
Re: We hacked Gemini's Python sandbox and leaked its source code (at least some)
#70That's the system I work on! Please feel free to ask any questions. All opinions are my own and do not represent those of my employer.
Does anyone at Google care that you're trying to replace Assistant with this in the next few months and it can't set a timer yet? (I mean it will tell you it's set a timer but it doesn't talk to the native clock app so nothing ever goes off if you navigate away from the window.)
I have a rooted pixel with a flashed custom android ROM, which should be a nightmare scenario for gemini, and it can set timers just fine (and the timers show up in the native clock app)