That sounds a bit like "nobody would ever fall for a phishing email." I don't think we should overestimate the technical sophistication and unceasing vigilance of the average YouTube user.

Even if it's just a non-clickable link to "more information", some data can be exfiltrated that way.

▲

zahlman 2 hours ago | parent [-]

> That sounds a bit like "nobody would ever fall for a phishing email." I don't think we should overestimate the technical sophistication and unceasing vigilance of the average YouTube user.

By this standard, we shouldn't allow comments on YouTube. Or perhaps anywhere.

	▲	Terr_ 2 hours ago \| parent [-]
		That's equating regular social engineering versus LLM prompt injection and clicking a sneaky URL, I don't think those are equivalent scenarios or risks.