Peter Steinberger

A bunch of security researchers that were testing it showed just how easily it could all go sideways with prompt injection attacks.

So because this thing has access to your whole computer,

I wasn't thinking, I was just sending it a voice message, you know?

But I didn't build that.

There was no support for voice messages in there.

So the reading indicator came and I'm like, I'm really curious what's happening now.

And then after 10 seconds, my agent replied as if nothing happened.

I'm like...

how the F did you do that?

And it replied, yeah, you sent me a message, but there was only a link to a file.

There's no file ending.

So I looked at the file header.

I found out that it's Opus, so I used FFmpeg on your Mac to convert it to Wave.

And then I wanted to use this, but didn't have it installed, and there was an install error.

But then I looked around and found the OpenAI key in your environment, so I sent it via curl to OpenAI, got the translation back, and then I unresponded.

That was like the moment where I was like,

Habe ich tatsächlich nicht mitbekommen.