Presumably the attacker used Google's own LLM and they searched the history of all user chats to find the transcript.

I say this only slightly in jest, as that's about the only thing I can think of which would legitimately give them 'high confidence'.

▲

djeastm 3 hours ago | parent [-]

In the article (AP one, at least) Google explicitly said it does not believe it was Gemini or Mythos.

▲

bmelton 3 hours ago | parent [-]

Clearly that's because they searched the history of all chats and didn't find the perpetrator

▲

HDBaseT 2 hours ago | parent | next [-]

I know we're talking about Google here, but the privacy violations and concerns from this sort of search are massive.

We need local AI ASAP.

	▲	gchamonlive 2 hours ago \| parent \| next [-]
		Don't get me wrong, I'm with you here, but we are back to the days when we had to rent mainframe time for compiling programs. Not because of software limitations, but you just didn't have consumer grade hardware capable of running them. This time, however it's even worse, because it'll be a really long time until either we get consumer GPUs with enough VRAM for full models or LLMs that fit in 16-32GB capable enough to compete with cloud providers. I run locally qwen3.6 27b on my 3090 and it's really impressive for what it is, but it is still generations away from being capable of delivering a level of quality that we can confidently default to solo drive them on a daily basis.
	▲	overfeed an hour ago \| parent \| prev [-]
		> We need local AI ASAP. That is an excellent idea, once we, the GPU-poor mice, figure out who is going to bell the SoTA training cat. Chinese models being banned is well within the realms of lobbied possibilities.

▲

BobbyTables2 2 hours ago | parent | prev [-]

They probably used AI for the search.

The real game would be to put a “nothing of interest here” prompt injection attack in the original series of prompts so a LLM parsing them later would ignore the attackers’ session.