2026-09-24 07:17 UTC
RE: https://mastodon.sdf.org/@doragasu/117324692065390037
Not only confirming this, its extremely easy. Almost no prompt injection resistance lmao
Replies (1)
-
@dan@toot.d.sb 2026-09-25 05:04
@jonny@neuromatch.social This is intentionally part of the design. You can literally browse the file system directly in the app. There's nothing sensitive on the VM itself.