TLDR Web Dev · MISCELLANEOUS

RABBIT DATA BREACH: ALL R1 RESPONSES EVER GIVEN CAN BE DOWNLOADED

rabbitu.de2 min read

Summary from the TLDR Web Dev newsletter

On May 16, 2024, the rabbitude team discovered several hardcoded API keys in the Rabbit r1 codebase, allowing them to access and manipulate user data. Rabbit Inc. has been aware of this security breach for a month but has not taken any action to mitigate the risk. The Rabbit r1 is a ChatGPT-based personal assistant device.