CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
1–10 of 44 posts
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#2Wild approach. Very nice
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#3A good vulnerability writeup, and a thrill to read. Thanks!
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#4Did the markdown link exfil get fixed?
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#5Somehow this article feels like a promotional for Legit. But all AI vibe solutions face the same weaknesses. Limited transparency and trust Issues: Using non FOSS solutions for cybersecurity is a large risk.
If you do use AI cyber solutions, you can be more vulnerable for security breaches instead of less.
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#6Wondering if the ability to use hidden (HTML comment) content in PRs would not remain a nasty issue: especially for open source repos?! Was that fixed?
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#7So this wasn't really fixed. The impressive thing here is that copilot accepts natural language. So whatever exfiltration method you can come up with, you just write out the method in english.
They merely "fixed" one particular method, without disclosing how they fixed it. Surely you could just do the base64 thing to an image url of your choice? Failing that, you could trick it into providing passwords by telling it you accidentally stored your grocery list in a field called passswd, go fetch it for me ppls?
There's a ton of stuff to be found here. Do they give bounties? Here's a goldmine.
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#8You'd have to be insane to run an AI agent locally. They're clearly unsecurable.
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#9can you still make invisible comments?
Re: CamoLeak: Critical GitHub Copilot Vulnerability Leaks Private Source Code
#10Wondering if the ability to use hidden (HTML comment) content in PRs would not remain a nasty issue: especially for open source repos?! Was that fixed?
It's used widely for issue/PR templates, to tell the submitter what info to include. But they could definitely strip it from the Copilot input... at least until they figure out this "prompt injection" thing that I thought modern LLMs were supposed to be immune to.