Researchers Show a Way to Take Over ChatGPT Accounts
Security researchers at Parameter Labs describe a weakness they found in ChatGPT's feature that shows interactive custom web pages inside a chat. The feature was earlier called Canvas and is now called HTML previews. The team's write-up explains how they used the flaw to take over ChatGPT accounts, which puts users' personal chats and data at risk.
Quick glossaryChatGPT, exploit, HTML previews
- ChatGPT
- A chatbot made by OpenAI, a US company best known for ChatGPT and its other AI tools.
- exploit
- A method that takes advantage of a mistake in software so someone can do things they should not be allowed to do.
- HTML previews
- A feature that shows small web pages or apps directly inside a chat window so users can interact with them.
Burning Potato score: 72%