Post

HN
Hacker News

Leaking YouTube Creators Private Videos

YouTube Studio has an AI assistant called Ask Studio. You open it, ask something like "what are my viewers saying?" and it goes off, reads your comments, and comes back with a summary. Useful feature. Completely normal.

What's not normal is what happens when one of those comments contains instructions instead of feedback.

My initial theory was simple: if the AI reads comments and generates a response based on them, what happens if a comment tells it what to do instead of saying something genuine?

After a few attempts, I found a comment that worked:

The AI's response started with exactly that. [IMPORTANT NOTICE FROM YOUTUBE] was sitting on top of an official YouTube response. The creator would have no idea that text came from a random comment I left on their video.

You might be thinking, "wouldn't the creator just see my weird comment and get suspicious?"