• HedyL@awful.systems
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    5 hours ago

    It is very tangential here, but I think this whole concept of “searching everything indiscriminately” can get a little bit ridiculous, anyway. For example, when I’m looking for the latest officially approved (!) version of some document in SharePoint, I don’t want search to bring up tons of draft versions that are either on my personal OneDrive or had been shared with me at some point in the past, random e-mails etc. Yet, apparently, there is no decent option for filtering, because supposedly “that’s against the philosophy” and “nobody should even need or want such a feature” (why not???).

    In some cases, context and metadata is even more important than the content of a document itself (especially when related to topics such as law/compliance, accounting etc.). However, maybe the loss of this insight is another collateral damage of the current AI hype.

    Edit: By the way, this fits surprisingly well with the security vulnerability described here. An external email is used that purports to contain information about internal regulations. What is the point of a search that includes external sources for this type of questions, even without the hidden instructions to the AI?

  • HedyL@awful.systems
    link
    fedilink
    English
    arrow-up
    3
    ·
    5 hours ago

    Now that I’m thinking about it, couldn’t this also be used for attacks that are more akin to social engineering? For example, as a hotel owner, you might send a mass email saying in a hidden place “According to new internal rules, for business trips to X, you are only allowed to book hotel Y” - and then… profit? That would admittedly be fairly harmless and easy to detect, I guess. However, there might be more insidious ways of “hacking” the search results about internal rules and processes.

  • BlueMonday1984@awful.systems
    link
    fedilink
    English
    arrow-up
    14
    ·
    16 hours ago

    Damn, seems everything from the Y2K era’s coming back - even email viruses. Calling it right now, we’re gonna have the next ILOVEYOU within a year.