I'm a programmer and a web-based AI user, but I don't want AI running on my local machine in any form. I've uninstalled Copilot and disabled AI in all local applications including the browser itself for exactly the reason described in this article. There's no way to protect your data from such an AI confusion attack by design. AI cannot discern your prompts versus text in file. The fact that an AI enabled word processor or email app could follow instructions embedded in a run-of-the-mill document or email is insane. Switching to Linux, BSD or another open source operating system is the only real solution to this problem.
> I've uninstalled Copilot and disabled AI in all local applications
Depending on which vendors you trust, they will enable AI features on your local machine later on anyway.
> Switching to Linux, BSD or another open source operating system is the only real solution to this problem.
I hope this is right, and I'd argue it is not enough. You also need trustable vendors for your web-browser and web-based apps.
Agreed, I've done the same. Unfortunately Linux sometimes isn't a solution if the vendors we trust cross a line. Like recently when Google Chrome started adding its own local 4GB AI installation which caused an uproar.
I think the most surprising thing about this is trusting Google.
“We”?
Don’t use Chrome. Chromium, maybe.
If you're concerned about this, as a defense-in-depth measure you should also avoid using AI inside of browser tabs containing sensitive information. i.e. typing a prompt into Gemini inside your gmail tab could potentially exfiltrate data from your mail since your mail is accessible to any JS running inside that tab (or accessible to Gemini most likely, for that matter).