TLDR Web Dev · MISCELLANEOUS
RABBIT DATA BREACH: ALL R1 RESPONSES EVER GIVEN CAN BE DOWNLOADED
Summary from the TLDR Web Dev newsletter
On May 16, 2024, the rabbitude team discovered several hardcoded API keys in the Rabbit r1 codebase, allowing them to access and manipulate user data. Rabbit Inc. has been aware of this security breach for a month but has not taken any action to mitigate the risk. The Rabbit r1 is a ChatGPT-based personal assistant device.