browser-extension icon indicating copy to clipboard operation
browser-extension copied to clipboard

Security issues

Open Youssef535 opened this issue 2 years ago • 2 comments

Taxy uses GPT-4 to control your browser and perform repetitive actions on your behalf does it read and know all my information like my IP adress and the browser version... history ... we need to know

Youssef535 avatar Apr 01 '23 12:04 Youssef535

Hey @Youssef535, thanks for your attentiveness! Right now, we send a simplified version of the DOM to GPT-4, along with your instructions and a history of all actions it's performed for the given task so far. No IP address and browser version. Feel free to poke through the code in performQuery.ts to see what gets sent.

However, on the subject of security issues, there's a lot more we need to do to make this production-ready, such as guard-railing which sites Taxy can and can't interact with (for instance, you wouldn't want it messing around with your bank account) and setting a max-tokens limit for a given task. I created a new discussion here to discuss security.

arcticfly avatar Apr 07 '23 22:04 arcticfly

Yes sure thanks for your response @arcticfly and i will discuss security issue with the devs.

Youssef535 avatar Apr 08 '23 11:04 Youssef535