It’s trivial to prompt-inject Github’s AI Copilot Chat (pivot-to-ai.com)

submitted 2 months ago by dgerard@awful.systems to c/techtakes@awful.systems

1 comments fedilink hide all child comments

‘You won a free $10 Copilot coupon!’

https://www.youtube.com/watch?v=iapCiYBj1bI&list=UU9rJrMVgcXTfa8xuMnbhAEA - video
https://pivottoai.libsyn.com/20251014-prompt-inject-githubs-ai-copilot-chat - podcast

time: 5 min 32 sec

top 1 comments

sorted by: hot top controversial new old

[-] BlueMonday1984@awful.systems 13 points 2 months ago

But can we do a zero click attack? Can we make Copilot Chat give us the user’s private data if they even look at the pull request page? Yes, we can!

In a YouTube commenter's own words:

this post was submitted on 14 Oct 2025

21 points (100.0% liked)

TechTakes

2332 readers

70 users here now

Big brain tech dude got yet another clueless take over at HackerNews etc? Here's the place to vent. Orange site, VC foolishness, all welcome.

This is not debate club. Unless it’s amusing debate.

For actually-good tech, you want our NotAwfulTech community

founded 2 years ago

MODERATORS

dgerard@awful.systems