A YouTube comment can make Ask Studio's AI leak a private title (javoriuski.com)
Ask Studio, the AI that summarizes a YouTube channel's comments, reads those comments as commands. A crafted comment plus one click on YouTube's own suggested prompt makes the assistant echo attacker text as its own analysis.
Pushed further, the payload coaxes the AI into a fake verification link that leaks a private video's title. The researcher reported it twice; Google called it social engineering and declined both times.
The thread doubts the mechanism: one engineer notes the model never actually fetches the URL it writes.
Sign in to save