GoKawiil - Latest Tech News & Aggregated Headlines

New attack on ChatGPT research agent pilfers secrets from Gmail inboxes

arstechnica.com Unknown 2025-09-20 03:29:22

So far, prompt injections have proved impossible to prevent, much like memory-corruption vulnerabilities in certain programming languages and SQL injections in Web applications are. That has left OpenAI and the rest of the LLM market reliant on mitigations that are often introduced on a case-by-case basis, and only in response to the discovery of a working exploit. Accordingly, OpenAI mitigated the prompt-injection technique ShadowLeak fell to—but only after Radware privately alerted the LLM ma

Topics: employee injection prompt public tool

Shop Amazon

Writing a Good AI Image Prompt Isn't Hard, but You Need These Essential Elements

cnet.com See Full Bio 2025-09-27 11:05:03

One of the first things I learned while testing AI image generators is that there are a lot of things that can go wrong when you're trying to get the image you see in your head to appear on your screen. If you've ever used an AI image or video generator, you know what I mean. I've spent the past year testing and reviewing different AI image generators, and I've generated hundreds of images across services like Google's nano bananas model, Midjourney and Dall-E. But the images I created haven't

Topics: ai image like prompt want

Shop Amazon

Microsoft fixes app install issues caused by August Windows updates

bleepingcomputer.com Unknown 2025-10-04 11:02:35

Microsoft has fixed a known issue caused by the August 2025 security updates, which triggers unexpected User Account Control (UAC) prompts and app installation problems for non-admin users on all Windows versions. This issue is caused by a security patch that mitigates a Windows Installer privilege escalation vulnerability (CVE-2025-50173), which can enable authenticated attackers to gain SYSTEM privileges. To address the CVE-2025-50173 security flaw, Microsoft has implemented new User Account

Topics: 10 prompts server version windows

Shop Amazon

Hallucination Risk Calculator

news.ycombinator.com Unknown 2025-10-06 17:57:58

Hallucination Risk Calculator & Prompt Re-engineering Toolkit (OpenAI-only) Post-hoc calibration without retraining for large language models. This toolkit turns a raw prompt into: a bounded hallucination risk using the Expectation-level Decompression Law (EDFL), and a decision to ANSWER or REFUSE under a target SLA, with transparent math (nats). It supports two deployment modes: Evidence-based: prompts include evidence/context; rolling priors are built by erasing that evidence. prompts inc

Topics: answer bar decision evidence prompt

Shop Amazon

Warner Bros. sues Midjourney to stop AI knockoffs of Batman, Scooby-Doo

arstechnica.com Unknown 2025-10-10 03:47:32

Warner Bros. hit Midjourney with a lawsuit Thursday, crafting a complaint that strives to shoot down defenses that the AI company has already raised in a similar lawsuit filed by Disney and Universal Studios earlier this year. The big film studios have alleged that Midjourney profits off image generation models trained to produce outputs of popular characters. For Disney and Universal, intellectual property rights to pop icons like Darth Vader and the Simpsons were allegedly infringed. And now,

Topics: batman character midjourney prompt wb

Shop Amazon

Bash Prompts Collection

news.ycombinator.com Giles Orr 2025-10-16 14:38:21

Bash Prompts This web page is a child of the Bash Prompt HOWTO that I'm maintaining for the Linux Documentation Project. The HOWTO explains a lot more than I'm going to here. My interest in Bash Prompts developed when I found "The BashPrompt Themes Project (now long deceased). Some of their prompts show up here, and a lot of what I've done shows the influence of their work. I started these pages because so many people have been mailing me cool prompts that I couldn't see putting them all in t

Topics: bash howto lot project prompts

Shop Amazon

Simple prompt or agent workflow? How not to overthink AI

zdnet.com Joe Mckendrick 2025-10-22 18:34:00

Photobank2/iStock/Getty Images Plus Follow ZDNET: Add us as a preferred source on Google. ZDNET's key takeaways Gen AI success is about knowing which approach to use. Start with the simplest tool that solves your problem. Sometimes you'll need a prompt, and other times an agent workflow. "You're probably making AI harder than it needs to be." This advice from Corey Noles and Grant Harvey's latest episode of The Neuron podcast urges greater simplicity in what has become a complicated and c

Topics: ai need noles prompt structured

Shop Amazon

Scamlexity: When agentic AI browsers get scammed

news.ycombinator.com Nati Tal 2025-10-29 22:03:56

This is the new reality we call " Scamlexity " - a new era of scam complexity , supercharged by Agentic AI. Familiar tricks hit harder than ever, while new AI-born attack vectors break into reality. In this world, your AI gets played, and you foot the bill. We built and tested three scenarios, from a fake Walmart store and a real in-the-wild Wells Fargo phishing site to PromptFix - our AI-era take on the ClickFix scam that hides prompt injection inside a fake captcha to directly take control of

Topics: ai browsers fake human prompt

Shop Amazon

We put agentic AI browsers to the test – They clicked, they paid, they failed

news.ycombinator.com Nati Tal 2025-10-30 23:03:56

This is the new reality we call " Scamlexity " - a new era of scam complexity , supercharged by Agentic AI. Familiar tricks hit harder than ever, while new AI-born attack vectors break into reality. In this world, your AI gets played, and you foot the bill. We built and tested three scenarios, from a fake Walmart store and a real in-the-wild Wells Fargo phishing site to PromptFix - our AI-era take on the ClickFix scam that hides prompt injection inside a fake captcha to directly take control of

Topics: ai browsers fake human prompt

Shop Amazon

We Put Agentic AI Browsers to the Test – They Clicked, They Paid, They Failed

news.ycombinator.com Nati Tal 2025-10-31 19:03:56

This is the new reality we call " Scamlexity " - a new era of scam complexity , supercharged by Agentic AI. Familiar tricks hit harder than ever, while new AI-born attack vectors break into reality. In this world, your AI gets played, and you foot the bill. We built and tested three scenarios, from a fake Walmart store and a real in-the-wild Wells Fargo phishing site to PromptFix - our AI-era take on the ClickFix scam that hides prompt injection inside a fake captcha to directly take control of

Topics: ai browsers fake human prompt

Shop Amazon

How Much Energy Do Your AI Prompts Consume? Google Just Shared Its Gemini Numbers

cnet.com See Full Bio 2025-11-03 18:49:00

The explosion of AI tools worldwide is increasing exponentially, but the companies that make these tools often don't express their environmental impact in detail. Google has just released a technical paper detailing measurements for energy, emissions and water use of its Gemini AI prompts. The impact of a single prompt is, it says, minuscule. According to its methodology for measuring AI's impact, a single prompt's energy consumption is about the equivalent of watching TV for less than 9 second

Topics: ai energy google impact prompt

Shop Amazon

Weaponizing image scaling against production AI systems

news.ycombinator.com Unknown 2025-11-05 05:20:53

Picture this: you send a seemingly harmless image to an LLM and suddenly it exfiltrates all of your user data. By delivering a multi-modal prompt injection not visible to the user, we achieved data exfiltration on systems including the Google Gemini CLI. This attack works because AI systems often scale down large images before sending them to the model: when scaled, these images can reveal prompt injections that are not visible at full resolution. In this blog post, we’ll detail how attackers c

Topics: attacks downscaling image prompt scaling

Shop Amazon

Customizing Lisp REPLs

news.ycombinator.com Artyom Bologov 2025-11-06 08:57:19

Customizing Lisp REPLs Oh, I see you disabled JavaScript. Keep up the good work, my fellow cleanweb person! I am a portability freak. If something can be done with an existing tool, I’ll go for it. If the program can be portable across systems, then it should be. If I can get rid of a tool or a whole class of tools, then off with its head! Sometimes that costs me, but that’s what I am. You can already see why I might dislike custom/wrapper/proxy REPLs. They are a new layer of tools reinventin

Topics: dir lisp prompt repl uiop

Shop Amazon

Attention Is the New Big-O: A Systems Design Approach to Prompt Engineering

news.ycombinator.com Alex Chesser 2025-11-10 09:29:58

1. Understanding Attention: Your First Step to Better Prompts If you’re human, you’re probably reading this from left to right. You might not have stopped for a moment to consider the fact that your LLM doesn’t read in the same order as you or I. Instead, it weights relationships between all tokens at once, with position and clustering dramatically changing what gets noticed. In working with an LLM the structure you choose can have a greater impact on your results than the precise words you ch

Topics: attention model prompt prompts structure

Shop Amazon

Chatbots aren’t telling you their secrets

theverge.com Adi Robertson 2025-11-21 15:46:13

On Monday, xAI’s Grok chatbot suffered a mysterious suspension from X, and faced with questions from curious users, it happily explained why. “My account was suspended after I stated that Israel and the US are committing genocide in Gaza,” it told one user. “It was flagged as hate speech via reports,” it told another, “but xAI restored the account promptly.” But wait — the flags were actually a “platform error,” it said. Wait, no — “it appears related to content refinements by xAI, possibly tied

Topics: grok incident people prompts xai

Shop Amazon

Google Calendar invites let researchers hijack Gemini to leak user data

bleepingcomputer.com Unknown 2025-11-26 15:12:22

Google fixed a bug that allowed maliciously crafted Google Calendar invites to remotely take over Gemini agents running on the target's device and leak sensitive user data. The attack unfolded without requiring any user involvement beyond typical interactions with the assistant, which occur daily for users of Gemini. Gemini is Google's large language model (LLM) assistant integrated into Android, Google web services, and Google's Workspace apps, having access to Gmail, Calendar, and Google Hom

Topics: attack calendar gemini google prompt

Shop Amazon

POML: Prompt Orchestration Markup Language

news.ycombinator.com Unknown 2025-11-26 23:26:42

POML: Prompt Orchestration Markup Language POML (Prompt Orchestration Markup Language) is a novel markup language designed to bring structure, maintainability, and versatility to advanced prompt engineering for Large Language Models (LLMs). It addresses common challenges in prompt development, such as lack of structure, complex data integration, format sensitivity, and inadequate tooling. POML provides a systematic way to organize prompt components, integrate diverse data types seamlessly, and

Topics: code data format poml prompt

Shop Amazon

Microsoft POML – Prompt Orchestration Markup Language

news.ycombinator.com Unknown 2025-11-27 05:26:42

POML: Prompt Orchestration Markup Language POML (Prompt Orchestration Markup Language) is a novel markup language designed to bring structure, maintainability, and versatility to advanced prompt engineering for Large Language Models (LLMs). It addresses common challenges in prompt development, such as lack of structure, complex data integration, format sensitivity, and inadequate tooling. POML provides a systematic way to organize prompt components, integrate diverse data types seamlessly, and

Topics: code data format poml prompt

Shop Amazon

It's Staggeringly Easy for Hackers to Trick ChatGPT Into Leaking Your Most Personal Data

futurism.com Unknown 2025-11-27 06:30:27

OpenAI's ChatGPT can easily be coaxed into leaking your personal data — with just a single "poisoned" document. As Wired reports, security researchers revealed at this year's Black Hat hacker conference that highly sensitive information can be stolen from a Google Drive account with an indirect prompt injection attack. In other words, hackers feed a document with hidden, malicious prompts to an AI that controls your data instead of manipulating it directly with a prompt injection, one of the mo

Topics: ai chatgpt data prompt security

Shop Amazon

Hackers Hijacked Google’s Gemini AI With a Poisoned Calendar Invite to Take Over a Smart Home

wired.com Matt Burgess 2025-12-05 00:00:00

Within the titles of the calendar invites, the researchers added their crafty malicious prompts. (Google’s Wen contends that the researchers changed default settings on who can add calendar invites to someone’s calendar; however, the researchers say they demonstrated some of the 14 attacks with the prompts in an email subject or document title as well). “All the techniques are just developed in English, so it’s plain English that we are using,” Cohen says of the deceptive messages the team creat

Topics: calendar gemini prompt researchers user

Shop Amazon

GEPA: Reflective prompt evolution can outperform reinforcement learning

news.ycombinator.com Grigory Sapunov 2025-12-15 16:57:58

Authors: Lakshya A Agrawal, Shangyin Tan, Dilara Soylu, Noah Ziems, Rishi Khare, Krista Opsahl-Ong, Arnav Singhvi, Herumb Shandilya, Michael J Ryan, Meng Jiang, Christopher Potts, Koushik Sen, Alexandros G. Dimakis, Ion Stoica, Dan Klein, Matei Zaharia, Omar Khattab Paper: https://arxiv.org/abs/2507.19457 TL;DR What was done? The authors introduced GEPA (Genetic-Pareto), a novel algorithm for optimizing prompts in complex, multi-module AI systems. Instead of relying on traditional reinforceme

Topics: based gepa language learning prompt

Shop Amazon

GEPA: Reflective Prompt Evolution Can Outperform Reinforcement Learning

news.ycombinator.com Grigory Sapunov 2025-12-16 10:57:58

Authors: Lakshya A Agrawal, Shangyin Tan, Dilara Soylu, Noah Ziems, Rishi Khare, Krista Opsahl-Ong, Arnav Singhvi, Herumb Shandilya, Michael J Ryan, Meng Jiang, Christopher Potts, Koushik Sen, Alexandros G. Dimakis, Ion Stoica, Dan Klein, Matei Zaharia, Omar Khattab Paper: https://arxiv.org/abs/2507.19457 TL;DR What was done? The authors introduced GEPA (Genetic-Pareto), a novel algorithm for optimizing prompts in complex, multi-module AI systems. Instead of relying on traditional reinforceme

Topics: based gepa language learning prompt

Shop Amazon

My 2.5 year old laptop can write Space Invaders in JavaScript now (GLM-4.5 Air)

news.ycombinator.com Simon Willison 2025-12-21 10:45:07

My 2.5 year old laptop can write Space Invaders in JavaScript now, using GLM-4.5 Air and MLX I wrote about the new GLM-4.5 model family yesterday—new open weight (MIT licensed) models from Z.ai in China which their benchmarks claim score highly in coding even against models such as Claude Sonnet 4. The models are pretty big—the smaller GLM-4.5 Air model is still 106 billion total parameters, which is 205.78GB on Hugging Face. Ivan Fioravanti built this 44GB 3bit quantized version for MLX, spe

Topics: glm mlx model models prompt

Shop Amazon

Principles for production AI agents

news.ycombinator.com Unknown 2025-12-22 21:19:03

Every now and then, people ask me: “I am new to agentic development, I’m building something, but I feel like I'm missing some tribal knowledge. Help me catch up!”. I’m tempted to suggest some serious stuff like multiweek courses (e.g. by HuggingFace or Berkeley), but not everyone is interested in that level of diving. So I decided to gather six simple empirical learnings that helped me a lot during app.build development. This post is somewhat inspired by Design Decisions Behind app.build, but

Topics: agent agents context prompt tools

Shop Amazon

Six Principles for Production AI Agents

news.ycombinator.com Unknown 2025-12-23 09:19:03

Every now and then, people ask me: “I am new to agentic development, I’m building something, but I feel like I'm missing some tribal knowledge. Help me catch up!”. I’m tempted to suggest some serious stuff like multiweek courses (e.g. by HuggingFace or Berkeley), but not everyone is interested in that level of diving. So I decided to gather six simple empirical learnings that helped me a lot during app.build development. This post is somewhat inspired by Design Decisions Behind app.build, but

Topics: agent agents context prompt tools

Shop Amazon

Arva AI (YC S24) Is Hiring an AI Research Engineer (London, UK)

news.ycombinator.com Unknown 2026-01-09 17:05:26

Location: In person, Central London, 4-5 days in office Type: Full-Time NB: We are able to sponsor visas Arva AI is revolutionising financial crime intelligence with our cutting-edge AI Agents. By automating manual human review tasks, we enhance operational efficiency and help financial institutions handle AML reviews, while cutting operational costs by 80%. As the AI Research Engineer, you’ll play a pivotal role in building and iterating on LLM-based and agentic features of our AI-powered c

Topics: ai fine models prompt systems

Shop Amazon

OpenAI's image model gets built-in style feature on ChatGPT

bleepingcomputer.com Unknown 2026-01-16 05:12:59

OpenAI's image gen model, which is available via ChatGPT for free, now lets you easily create AI images even if you're not familiar with trends or prompt engineering. Right now, if you want to create outstanding anime art, you need to come up with a very well-written prompt, and then ChatGPT will process your request. While prompt engineering is necessary, you might not always get the quality you're expecting from the AI. GPT Styles Source: BleepingComputer.com To help you easily create ima

Topics: chatgpt create easily images prompt

Shop Amazon

Meta fixes bug that could leak users’ AI prompts and generated content

techcrunch.com Zack Whittaker 2026-01-16 05:00:05

Meta has fixed a security bug that allowed Meta AI chatbot users to access and view the private prompts and AI-generated responses of other users. Sandeep Hodkasia, the founder of security testing firm AppSecure, exclusively told TechCrunch that Meta paid him $10,000 in a bug bounty reward for privately disclosing the bug he filed on December 26, 2024. Meta deployed a fix on January 24, 2025, said Hodkasia, and found no evidence that the bug was maliciously exploited. Hodkasia told TechCrunch

Topics: ai bug hodkasia meta prompt

Shop Amazon

Context Engineering Guide

news.ycombinator.com Unknown 2026-01-16 11:59:48

What is Context Engineering? A few years ago, many, even top AI researchers, claimed that prompt engineering would be dead by now. Obviously, they were very wrong, and in fact, prompt engineering is now even more important than ever. It is so important that it is now being rebranded as context engineering. Yes, another fancy term to describe the important process of tuning the instructions and relevant context that an LLM needs to perform its tasks effectively. Much has been written already

Topics: agent context engineering prompt query

Shop Amazon

Grok 4

news.ycombinator.com Simon Willison 2026-01-23 16:43:44

Grok 4. Released last night, Grok 4 is now available via both API and a paid subscription for end-users. Key characteristics: image and text input, text output. 256,000 context length (twice that of Grok 3). It's a reasoning model where you can't see the reasoning tokens or turn off reasoning mode. xAI released results showing Grok 4 beating other models on most of the significant benchmarks. I haven't been able to find their own written version of these (the launch was a livestream video) but

Topics: analysis grok image prompt tokens

Shop Amazon

Latest Tech News

New attack on ChatGPT research agent pilfers secrets from Gmail inboxes

Writing a Good AI Image Prompt Isn't Hard, but You Need These Essential Elements

Microsoft fixes app install issues caused by August Windows updates

Hallucination Risk Calculator

Warner Bros. sues Midjourney to stop AI knockoffs of Batman, Scooby-Doo

Bash Prompts Collection

Simple prompt or agent workflow? How not to overthink AI

Scamlexity: When agentic AI browsers get scammed

We put agentic AI browsers to the test – They clicked, they paid, they failed

We Put Agentic AI Browsers to the Test – They Clicked, They Paid, They Failed

How Much Energy Do Your AI Prompts Consume? Google Just Shared Its Gemini Numbers

Weaponizing image scaling against production AI systems

Customizing Lisp REPLs

Attention Is the New Big-O: A Systems Design Approach to Prompt Engineering

Chatbots aren’t telling you their secrets

Google Calendar invites let researchers hijack Gemini to leak user data

POML: Prompt Orchestration Markup Language

Microsoft POML – Prompt Orchestration Markup Language

It's Staggeringly Easy for Hackers to Trick ChatGPT Into Leaking Your Most Personal Data

Hackers Hijacked Google’s Gemini AI With a Poisoned Calendar Invite to Take Over a Smart Home

GEPA: Reflective prompt evolution can outperform reinforcement learning

GEPA: Reflective Prompt Evolution Can Outperform Reinforcement Learning

My 2.5 year old laptop can write Space Invaders in JavaScript now (GLM-4.5 Air)

Principles for production AI agents

Six Principles for Production AI Agents

Arva AI (YC S24) Is Hiring an AI Research Engineer (London, UK)

OpenAI's image model gets built-in style feature on ChatGPT

Meta fixes bug that could leak users’ AI prompts and generated content

Context Engineering Guide

Grok 4

About GoKawiil

Privacy

Advertising

Latest Tech News

Trending Topics

Hot Now

Popular

Emerging

About GoKawiil

Privacy

Advertising