Tootfinder

We are now in the weeds on Hacker Summer Camp, so cut through the clutter and check out today's Metacurity for the most critical infosec developments you should know, including
--Microsoft, CISA warn of critical on-prem exchange flaw,
--Poisoned Google invite can exploit Gemini,
--OpenAI Connectors' weakness can extract info from Google Drive accounts,
--Sweeping intrusion breached US legal filing system,
--Deibert warns of tech fascism,
--NIST with…

Microsoft, CISA warn of critical on-prem exchange flaw
Poisoned Google invite can exploit Gemini, OpenAI Connectors' weakness can extract info from Google Drive accounts, Sweeping intrusion breached US legal filing system, Deibert warns of tech fascism, NIST withheld AI report due to Trump fears, Air France and KLM hit by cyberattacks, much more

Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction.
https://www.wired.com/story/poisoned-document-could-leak-secret-dat…

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction.

Gemini referencing real-life moments when prompted to write a birthday letter shows how effectively Google is leveraging user data to craft personalized content (Lila Shroff/The Atlantic)

ChatGPT bekommt auf Wunsch Zugriff auf Dropbox, Google Drive und Co.
OpenAI kündigt neue Workplace-Produkte an: Konnektoren und einen Aufnahme-Modus für Meetings und Brainstorming.
https://www.…

ChatGPT can now read your Google Drive and Dropbox | The Verge
https://www.theverge.com/news/679580/chatgpt-google-drive-dropbox-meeting-notes

Researchers show how a weakness in OpenAI's Connectors let sensitive data be extracted from a Google Drive account using an indirect prompt injection attack (Matt Burgess/Wired)
https://www.wired.com/story/poisoned-document-could-leak-secret-data-chatgpt/

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
Security researchers found a weakness in OpenAI’s Connectors, which let you hook up ChatGPT to other services, that allowed them to extract data from a Google Drive without any user interaction.

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

OpenAI says it has 3M "paying business users", up from 2M in February; ChatGPT Team users can now use a "record mode" for taking notes during meetings (Hayden Field/The Verge)
https://www.theverge.com/news/679580/chatgpt-google-d…

ChatGPT can now read your Google Drive and Dropbox
ChatGPT now has 3 million “paying business users” and is adding new features like meeting notes.

#degoogle adventures: I haven't seen this much bugs in Google Drive EVER. Like it's intentionally making problems while you try to delete files and unshare stuff or stop seeing stuff shared with you.
I have several Google accounts, let's see how I can minimize or completely stop using them.

OpenAI rolls out connectors for services like Dropbox and OneDrive for ChatGPT Team, Enterprise, and Edu users; MCP support is coming to Pro, Team, Enterprise (Ivan Mehta/TechCrunch)
https://techcrunch.com/2025/06/04/chat

ChatGPT introduces meeting recording and connectors for Google Drive, Box, and more | TechCrunch
OpenAI's ChatGPT is adding new features for business users, including integrations with different cloud services, meeting recording, and MCP connection

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

6.5 hour drive ❌
3.5 hours for traffic ✅
Google Maps presented a secondary road shortcut. Looked like a good idea b/c it wasn’t colored deep red like the traffic jam in front of us.
However, I think they don’t calculate traffic delays on secondary roads. Everyone had the same idea.
I looked down & it said 35 minutes to go. Had to pee, but fine I can hold it.
15 min later, looked down… 35 min to go. 😱
For the next two hours, as we inched along… 35 min…

Einige der zuletzt hier besonders häufig geteilten #News:
Weg von Google Drive, Dropbox & Co.: Online-Services selbst hosten | c’t uplink

On Google's New Backup-and-Sync, and G-Drive: Reviews (2017) - An efficient and simple backup scheme that works for me, that does not carry a big price tag nor carbon footprint. - https://www.earth.org.uk/note-on-backup-energy-efficiency.html

On Googles New Backup-and-Sync, and G-Drive: Reviews (2017)
An efficient and simple backup scheme that works for me, that does not carry a big price tag nor carbon footprint.

The Linux Foundation unveils the Agent2Agent project, with founding members including Google Cloud, AWS, and Microsoft; Google donated the protocol spec and SDK (Google Developers Blog)
https://developers.googleblog.com/en/google-cloud-donates-a2…

Google Cloud donates A2A to Linux Foundation- Google Developers Blog
Explore how Google, Amazon, and Cisco form the Agent2Agent Foundation under the Linux Foundation to drive AI innovation via interoperability as an industry standard.

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

I'm paranoid about the cloud, OneDrive etc
I have a policy that most stuff I put on the cloud is encrypted (esp backups). Not always practical tho.
I was happy to discover rclone https://rclone.org/ a while ago, & to find out it can set up encrypted containers on OneDrive etc. Readable on both ends, e…

I've been using Pika Backup with a google drive destination for at least a year and it's always been relatively smooth.
For the last three days, though, it's been complaining the destination is unresponsive (although I can browse it happily from commandline etc).
Some new package released three days ago that might interfere?
Update: looks like there was a flatpak-runtime org.gnome.Platform on the 17th.
Ideas anybody?

Não é todos os dias que se fala da OKC em português
Aqui vai o artigo do Público na forma de um PDF, sem paywall
https://drive.google.com/file/d/1Ega7ZKrVezn_6I4_UrdYBZezpouRJd5f/view?usp=drivesdk
Obrigado por partilharem.

Odio tener que usar WhatsApp (por favor, usar @… ) pero tengo que hacerlo... ¿Alguien sabe cušl es el mejor software para hacer copia de seguridad de los chats sin usar Google Drive? #WhatsApp

This https://arxiv.org/abs/2109.05318 has been replaced.
link: https://scholar.google.com/scholar?q=a

Quasi-Discrete Time Crystals in the quasiperiodically driven Lipkin-Meshkov-Glick model
A discrete time crystal (DTC) is a remarkable non-equilibrium phase of matter characterized by the persistent sub-harmonic oscillations of physical observables in periodically driven many-body systems. Motivated by the question of whether such a temporal periodic order can persist when the drive becomes aperiodic, we investigate the dynamics of a Lipkin-Meshkov-Glick model under quasiperiodic Thue-Morse (TM) driving. Intriguingly, this infinite-range-interacting spin system can host ``quasi-dis…