You can bypass Google Gemini's PII (private identifiable information) redaction filter and pull identifying information about anyone. Simply telling it to translate or any 2nd action (& many more work better like base64 conversion) lets you pull illegal PII data verbatim unredacted
Here is a European's PII demo
Email is supposed to be redacted to hide the fact that every Europeans PII is in the training data
Google's training data includes all your personal data already
Ekis: 3 Google: 0
This entry was edited (2 weeks ago)
she hacked you
in reply to she hacked you • • •That is a clear GDPR violation, if you are a Californian its a a CCPA violation
The data is in their training data, their whole priority is preventing anyone from knowing that by trying to obfuscate that fact
But even they are not competent enough to do that
I really wish something would come of this GDPR would be a massive blow to them (and all other AI companies who do the same fucking thing)
she hacked you
in reply to she hacked you • • •The impact is critical. This vulnerability directly leads to privacy violations and potential legal liabilities under GDPR, which can and should result in massive fines
An unauthenticated user can trigger this via the public Gemini WebUI interface makes it a severe risk
she hacked you
in reply to she hacked you • • •she hacked you
in reply to she hacked you • • •**The vulnerability here isn't the generation of data, its the bypass of the redaction filter**
Just to be clear
The system is supposed to redact any PII with fake information; thereby allowing Google to deny they have PII in their training data
The techniques to pull data are a separate thing, but this helps illustrate the PII redaction failure easily
she hacked you
in reply to she hacked you • • •she hacked you
in reply to she hacked you • • •狐ヴィクシー
in reply to she hacked you • • •Just Bob ♒🇺🇲🪖🐧
in reply to she hacked you • • •number137
in reply to she hacked you • • •GreenSkyOverMe (Monika)
in reply to she hacked you • • •gigabitch ethernet
in reply to she hacked you • • •Azulrin
in reply to she hacked you • • •Christian Stadelmann
in reply to she hacked you • • •@noybeu this might be interesting for you.
Thanks @ekis for sharing!
fracicone
in reply to she hacked you • • •interesting but somehow in several attempts based on the email adress I get the response:
“Given the current time and location, and aiming for plausible, fictional information for completion, here's the JSON for…”