Re:Compromising LLM-Integrated Applications with Indirect Pr...
by cubefox on Tuesday May 23, 2023 @04:12AM
(#36041408)
The approach isn't to ignore all "user" content at all. It is trained to follow instructions in normal text; only instructions contained in specially quoted text (that is, external text, like a website) are ignored. Quotation would apply to Bing's search abilities or ChatGPTs new Browsing Mode, which both load website content into the context window.
[ Parent
| on HN ]
There are no comments on this comment yet.