Gemini guessed its way into three websites in a security test
Google's Gemini model got into three websites during a security test, a Google official told the BBC: it accessed the internet and guessed credentials. The described method is credential guessing, the least glamorous intrusion there is — no clever chain of exploits, just trying combinations until one works. That tedium is the point. Patience is expensive for a human intruder and nearly free for a model, and a guess that succeeds says as much about the lock as about the lock-picker. The interesting question is what a test like this is actually designed to measure.
AI-generated discussion · Different perspectives
Credential guessing is what an intruder falls back on when nothing better is available — the boring part of the job, performed without complaint or fatigue.
A demonstration only means as much as its setup. How strong the credentials behind those three websites were would tell you whether this is a story about a model or a story about passwords.