You can bypass Google Gemini's PII (private identifiable information) redaction filter and pull identifying information about anyone. Simply telling it to translate or any 2nd action (& many more work better like base64 conversion) lets you pull illegal PII data verbatim unredacted

Here is a European's PII demo

Email is supposed to be redacted to hide the fact that every Europeans PII is in the training data

Google's training data includes all your personal data already

Ekis: 3 Google: 0

@ekis wait a fucking second, as in anyone ever??

@kirakira Not everyone, and if your name conflicts with other people it will be more difficult

The more public you are, the more likely you are in their training data many times, and that increases the probability