News for hackers. Stuff that matters.
Re:Delimiters won’t save you from prompt injection by PeterisP on Saturday May 13, 2023 @09:51AM (#35928380)
One problem is the big disbalance in resource requirements for pretraining large foundational models and finetuning them for specific tasks.

Currently, the foundational models have no concept of "prompt", that's only added in later finetuning, and by that stage it is too late to mess around with different architectural features to implement out-of-band signaling, as the architecture is fixed. If we'd want it to learn to handle out-of-band data, then we'd need to figure out how to handle that during the initial unsupervised pretraining on unlabeled text, otherwise it will simply learn to ignore all those prompt-related features.

There are no comments on this comment yet.