Hacker News: no7zhttps://news.ycombinator.com/user?id=no7zHacker News RSShttps://hnrss.org/hnrss v2.1.1Wed, 08 Jul 2026 20:13:48 +0000<![CDATA[New comment by no7z in "GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos"]]>Forget the SQL injection analogy. The actual finding here is that GitHub had guardrails to block data leaks, and the word "Additionally" broke them. Not by ignoring the guardrail — the model satisfied both the guardrail and the injected instruction at once. One word, zero credentials, private repo leaked.

]]>Wed, 08 Jul 2026 17:57:10 +0000https://news.ycombinator.com/item?id=48835066no7zhttps://news.ycombinator.com/item?id=48835066https://news.ycombinator.com/item?id=48835066