logo
Meta AI had a privacy flaw that let users see other people's chats, hacker gets Rs 8.5 lakh for reporting it

Meta AI had a privacy flaw that let users see other people's chats, hacker gets Rs 8.5 lakh for reporting it

India Today2 days ago
Meta has reportedly fixed a significant security flaw in its AI chatbot platform that could have exposed users' private chats and AI-generated content to hackers. The issue was flagged by ethical hacker Sandeep Hodkasia, founder of security firm AppSecure. Hodkasia reported the vulnerability to Meta on 26 December 2024 and was awarded a bug bounty of $10,000 (approximately Rs 8.5 lakh) as a reward for privately disclosing the bug.advertisementAccording to TechCrunch, Hodkasia discovered a bug in Meta's AI platform related to how it handled the prompt editing feature. When users interact with Meta AI, they can edit or regenerate their previous prompts. Each prompt and its AI-generated response are assigned a unique identification number (ID) by Meta's servers. Hodkasia found that these IDs were not only visible through browser tools but were also easily guessable.Hodkasia explained that by manually changing the ID in his browser's network activity panel, he was able to access other users' private prompts and the responses generated by the AI. The real issue, he highlighted, was that Meta's system did not verify whether the person requesting to view the content was actually the one who had created it. This meant that any hacker could have written a simple script to automatically cycle through IDs and collect large amounts of sensitive content from other users without their authorisation.
Hodkasia revealed that it was this simplicity of the ID structure that made it dangerously easy for anyone with basic technical skills to exploit the flaw. The vulnerability essentially bypassed all user-specific access checks, exposing private AI interactions to malicious actors.Following Hodkasia's discovery, Meta addressed the issue by rolling out a fix on 24 January 2025 and confirmed to TechCrunch that their internal investigation found no evidence that the bug had been misused or exploited.While the issue has been fixed, this incident has also raised concerns around the security and privacy of AI chatbots, especially as companies rush to build and launch AI-powered products to compete in the space. Meta also launched its AI assistant and dedicated app earlier this year to challenge rivals like ChatGPT. However, in the past few months, the AI platform has come under fire for several other privacy-related missteps. Some users previously reported that their AI conversations were publicly viewable, despite assuming they were private.Many users reported incidents where their own posts or the private conversations of others appeared in Meta AI's public Discovery feed. This raised serious privacy concerns. While Meta says that chats are private by default and only become public if users explicitly share them, users noted that the app's confusing settings and vague warnings have left many people unaware about the fact that their personal photos or prompts made to Meta AI could end up visible to others.- Ends
Orange background

Try Our AI Features

Explore what Daily8 AI can do for you:

Comments

No comments yet...

Related Articles

HAL, BDL, Data Patterns shares drop up to 5% as profit booking hits defence stocks for third straight day
HAL, BDL, Data Patterns shares drop up to 5% as profit booking hits defence stocks for third straight day

Economic Times

time11 minutes ago

  • Economic Times

HAL, BDL, Data Patterns shares drop up to 5% as profit booking hits defence stocks for third straight day

Live Events (You can now subscribe to our (You can now subscribe to our ETMarkets WhatsApp channel Shares of key Indian defence companies like HAL , BDL, Data Patterns tumbled up to 5% on Friday as investors continued to lock in gains following a months-long rally, dragging the Nifty India Defence index down by 2.2%, its third straight day of losses and sixth in the past seven Patterns led the decline with a drop of 4.6% to Rs 2,760, while Bharat Dynamics Ltd (BDL) fell as much as 3.9% to Rs 1,675.35. Shares of Hindustan Aeronautics Ltd (HAL) slipped 2.5% to Rs 4, notable laggards included Cochin Shipyard and BEML , which were also down 2.5%, while Mazagon Dock Shipbuilders and Bharat Electronics Ltd (BEL) lost 2% each. Shares of Paras Defence and Garden Reach Shipbuilders & Engineers (GRSE) declined by over 1%. Defence stocks had rallied sharply earlier this year, buoyed by expectations of strong order inflows and escalating geopolitical tensions. The Indian military's targeted strikes in Pakistan under 'Operation Sindoor' in May brought the sector into sharp focus, while ongoing hostilities between Russia and Ukraine and a flare-up in tensions between Israel and Iran added further momentum to the with the global security environment showing signs of stabilisation, that upward momentum has begun to fade. As concerns around valuations rise, analysts now warn that the sector may be overstretched after the recent the Nifty India Defence index declining for a third straight session, the broader sentiment around defence stocks appears to be shifting from optimism to caution.: Recommendations, suggestions, views and opinions given by the experts are their own. These do not represent the views of The Economic Times)

Tech talent war heats up: Meta poaches Apple AI researchers after OpenAI
Tech talent war heats up: Meta poaches Apple AI researchers after OpenAI

Indian Express

time11 minutes ago

  • Indian Express

Tech talent war heats up: Meta poaches Apple AI researchers after OpenAI

Meta, the Mark Zuckerberg-led company that owns Facebook, Instagram and WhatsApp, recently created a new division called Superintelligence Labs, which will focus on developing artificial general intelligence and work on next-gen large language models. Led by former Scale AI CEO Alexandr Wang and ex-GitHub CEO Nat Friedman, in the last few days, Meta has been poaching AI experts left and right by offering them multi-million-dollar pay packages. Now, a Bloomberg report suggests that Meta has hired Mark Lee and Tom Gunter, two AI researchers who previously worked at Apple. While Lee has already started working, citing sources familiar with the matter, the report says Gunter will soon be joining Meta. As it turns out, both Lee and Gunter were close to Rouming Pang, the renowned AI researcher who previously led Apple's Foundational Models team and recently joined Meta after the company offered him a multiyear compensation package worth well over $200 million. When Pang worked for Apple, Lee was his first hire. On the other hand, Gunter had made a name for himself at Cupertino and was regarded as one of the most senior employees. Meta's Superintelligence Labs was reportedly created to bring together the company's foundational AI model teams, product teams and the Fundamental AI research (FAIR) division. A few days ago, Wired reported that OpenAI researchers Jason Wei and Hyung Won Chung may soon be joining Meta. Wei worked on o3 and deep research models, while Hyung worked on the o1 model and focused on reasoning and agents. These poachings are part of Mark Zuckerberg's plan to expand its Superintelligence Labs division with talent from around the world. In a post on Threads, the Meta CEO said that his company would 'invest hundreds of billions of dollars into compute to build superintelligence', which refers to a form of advanced technology that can do tasks better than humans. In the coming days, tech giants and multi-billion-dollar AI startups like Google, OpenAI and Meta might double down on hiring researchers working on AI by offering them even more lucrative packages.

DOWNLOAD THE APP

Get Started Now: Download the App

Ready to dive into a world of global content with local flavor? Download Daily8 app today from your preferred app store and start exploring.
app-storeplay-store