ChatGPT just gave Free users a powerful defense against prompt injection attacks
… When enabled, it prevents ChatGPT from making live outbound network requests. …
Tracked topic
… When enabled, it prevents ChatGPT from making live outbound network requests. …
… I didn’t notice the change immediately because outbound traffic still worked normally through CGNAT. …
… A small agent called cloudflared runs next to your service and dials outbound to Cloudflare's edge. That outbound connection is persistent, and once someone visits your hostname, Cloudflare accepts that request at its edge and relays it down the tunnel your server has opened. …
… It allows outbound connections but blocks unknown inbound connections that don’t match the existing outbound session. …
… On top of that, it lets me check the throughput and data exchanged between my local systems and external devices/websites as well as the protocol stack that my inbound and outbound traffic uses. …
… To block devices attempting to bypass this via encrypted DoH or DoT, you can block outbound port 853 and sinkhole known DOH provider IP blocks. …
… But at the same time, I did lose the outbound encryption layer. …
… That way, you remove any cloud dependency, block outbound traffic, and record video feeds locally. …
… Instead of forwarding inbound traffic, I full-tunneled my gaming PC's outbound traffic through the VPS, so to the rest of the internet my machine now appears at the VPS's clean public IP rather than my ISP's shared one. …
… All I needed to do was block outbound requests on that port, and every device that was using DoT failed over to the plain DNS settings, which sends everything right to Pi-hole. …