‘You won a free $10 Copilot coupon!’
https://www.youtube.com/watch?v=iapCiYBj1bI&list=UU9rJrMVgcXTfa8xuMnbhAEA - video
https://pivottoai.libsyn.com/20251014-prompt-inject-githubs-ai-copilot-chat - podcast
time: 5 min 32 sec
You must log in or register to comment.
But can we do a zero click attack? Can we make Copilot Chat give us the user’s private data if they even look at the pull request page? Yes, we can!
In a YouTube commenter’s own words:
