Hacker News Reader

Or more directly:

When you share a Gadget, we verify that anyone you share with also has direct permission to access each of the resources it is connected to (via the Gatekeeper system). Hence, no security bug in the Gadget itself could accidentally grant people access to things they don't already have.

View on HN

But that is a problem. I have access to something deeply secret, I run a gadget, it reads that and sends it to whoever made it

No, a Gadget does not just get automatic access to your data. It only gets access to the things you grant it explicitly.

Just like phishing websites, which are still a problem. I’m sure I’m being overly cautious, but this sounds like a recipe for data leaks with the low barrier to entry.

And if you want real life examples, every single LLM provider has gotten insane amounts of data shared to them, even if you have to approve.

Reply on news.ycombinator.com