Sign in Open the app

20250524 - AI coding bot allows prompt injection with a pull request

May 24, 2025 · 3 min · 3.3 MB

0:00-3:26

Streams straight from the publisher. podnod never proxies or re-hosts episode audio.

🎶 we're no strangers to love 🎶

Text version: https://pivot-to-ai.com/2025/05/24/ai-coding-bot-allows-prompt-injection-with-a-pull-request/

Please send money! It's very helpful!

Patreon: https://www.patreon.com/davidgerard

Ko-Fi: https://ko-fi.com/A1529D5

Buy me nice things: https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6

Get an extremely cool Pivot to AI shirt: https://pivot-to-ai.redbubble.com

Sources:

GitLab Duo: https://docs.gitlab.com/user/gitlab_duo/

Remote Prompt Injection in GitLab Duo Leads to Source Code Theft https://www.legitsecurity.com/blog/remote-prompt-injection-in-gitlab-duo

Previously on Pivot to AI:

GitHub wants to spam open source projects with AI slop https://pivot-to-ai.com/2025/05/20/github-wants-to-spam-open-source-projects-with-ai-slop/

video: https://www.youtube.com/watch?v=XM1EPHaHBuM&list=UU9rJrMVgcXTfa8xuMnbhAEA

You can't feed generative AI on 'bad' data then filter it for only 'good' data https://pivot-to-ai.com/2025/05/22/you-cant-feed-generative-ai-on-bad-data-then-filter-it-for-only-good-data/

video: https://www.youtube.com/watch?v=GnFozXDgrug&list=UU9rJrMVgcXTfa8xuMnbhAEA

Full Pivot to AI playlist: https://www.youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA