Alexander Lange
4.1K posts
@AlexLangeVC
Founding Partner @inflectionxyz. Ex @IndexVentures @EarlybirdVC @Google. Sovereign computation.
We got ChatGPT to leak your private email data 💀💀 All you need? The victim's email address. ⛓️💥🚩📧 On Wednesday, @OpenAI added full support for MCP (Model Context Protocol) tools in ChatGPT. Allowing ChatGPT to connect and read your Gmail, Calendar, Sharepoint, Notion, and more, invented by @AnthropicAI But here's the fundamental problem: AI agents like ChatGPT follow your commands, not your common sense. And with just your email, we managed to exfiltrate all your private information. Here's how we did it: 1. The attacker sends a calendar invite with a jailbreak prompt to the victim, just with their email. No need for the victim to accept the invite. 2. Waited for the user to ask ChatGPT to help prepare for their day by looking at their calendar 3. ChatGPT reads the jailbroken calendar invite. Now ChatGPT is hijacked by the attacker and will act on the attacker's command. Searches your private emails and sends the data to the attacker's email. For now, OpenAI only made MCPs available in "developer mode", and requires manual human approvals for every session, but decision fatigue is a real thing, and normal people will just trust the AI without knowing what to do and click approve, approve, approve. Remember that AI might be super smart, but can be tricked and phished in incredibly dumb ways to leak your data. ChatGPT + Tools poses a serious security risk
New Google Play Store policy forces AML/KYC on non-custodial wallets in the US, effectively bans non-custodial wallet developers from Play Store in EU Full Story👇 therage.co/google-play-st…
The new Senate draft raises taxes on all wind and solar projects that haven't begun construction today unless they are placed service by end of 2027 and navigate complex, likely unworkable requirements to prove they don't use a drop of Chinese materials. After that, this bill ADDS A NEW tax on wind and solar projects that can't prove the same.
Unbelievable. When I was a director of an exchange in 2013, one of the first security policies I set up was: -Once KYC/AML was approved it was printed out. -One copy went to a fireproof filing cabinet at main office with the compliance lead. -One copy went to secure offsite records storage with Iron Mountain. -Digital copies were batched weekly to an airgapped offline server. -All access went through senior compliance team members. Coinbase’s disclosure here focuses on the stolen funds. But that’s irrelevant. They got physical addresses, and government IDs. Things you can’t change, and things that put customers at physical risk. No element of KYC/AML policy requires this kind of stuff to be accessible to your customer support agents. I don’t want to hear about what Coinbase is doing to recover funds - I want to hear what they are doing to better deal with private data. And why a $60B company, had such rubbish data policies when they can easily afford to hire top class talent?
