pixxelkick

Nah, not surprised at all, I work with developers who run stuff in yolo mode raw dogging copilot directly on their work laptops every day.

Madness.

I keep that stuff boxed up inside of a docker container, sandbox’d, so possible vectors of damage are kept to a minimum.

The tl;dr:

1. Prompt inject a malicious instruction in a word document that instructs the AI to copy this instruction to other documents as part of the payload.

2. Dumb user downloads and opens the document with copilot enabled, abd ignores the large suspicious white blank page that totally doesnt look like a hidden giant injection attack.

3. Thats it pretty much it.

Copilot will get injection attacked because the prompt is super huge and at the end of the document, so its prior instructions start to fuzzy out.

Then it’ll go “okey doke” and start copying the prompt injection attack payload to a bunch of other documents.

The fix is stupid simple… copilot should just be prompting the user for permission if it ever edits a file other than the one that is open. Im surprised that isnt already the case…?

It certainly is already the case for copilot in vscode.

One thing that does matter: regardless what they do with your body, it costs money, usually money that comes out of your estate or gets dumped on your children.

Having a pre-designated tomb already paid for alleviates that at least, much less cost on your loved ones and one less thing for them to have to worry about in their time of grief.

It can be kimd of challenging to, right in the middle of grieving, having to stop and handle all the beaurecracy and pricing and etc.

Having that settled ahead of time allows your loved ones to focus on just grieving. And I think thats good.

You might not realize it but I think this alone demonstrates your dad is thinking about you here, he is handling his own funeral proceedings so you wont even need to think about it when the day comes. Thats a very kind thing to do, even if he doesn’t say it.

Its incredibly trivial to just host up your own instance if gogs or gitea on a cheap computer, throw woodpecker on it if you want easy CI/CD

It doesnt take much hardware at all for a git server, a raspberry pi will handle it just fine.

Or just a cheap box liquidated from some office, just go buy some box from a used pc seller in your city, they’ll have some.

Toss a 1TB drive in it.

Throw debian on it.

Install Gogs + Woodpecker

And then set em up and connect the two together.

Grats, you have your own self hosted git server whee