Re:Prompt injection explained, with video, slides, and a tra...
by andrelaszlo on Saturday May 13, 2023 @09:04PM
(#35934375)
@charrondev
>I’m not worried about prompt Injection because if the user was actually malicious they could just used the interface or the API to do the same thing.
I think you might have missed that the injected prompt might not come from the end user.
There was an example of someone adding a prompt injection to their LinkedIn profile to override a recruiter's prompt and generate an embarrassing email instead. Not sure if it's fake, but it demonstrates the point either way.
>I’m not worried about prompt Injection because if the user was actually malicious they could just used the interface or the API to do the same thing.
I think you might have missed that the injected prompt might not come from the end user.
There was an example of someone adding a prompt injection to their LinkedIn profile to override a recruiter's prompt and generate an embarrassing email instead. Not sure if it's fake, but it demonstrates the point either way.