News for hackers. Stuff that matters.
Re:A framework to securely use LLMs in companies – Part 1: O... by joj123 on Wednesday July 19, 2023 @11:14PM (#36796507)
Agree that the ownership of using a vulnerable 3rd party is on you. I would just categorize that as supply chain risk and not prompt injection.
Re:A framework to securely use LLMs in companies – Part 1: O... by kristiandupont on Thursday July 20, 2023 @07:02AM (#36798909)
I don't follow. If using a third party LLM, there is a risk of prompt injection and unless there are advances I haven't heard of, it's not something they can fix?
Re:A framework to securely use LLMs in companies – Part 1: O... by joj123 on Friday July 21, 2023 @03:39AM (#36811074)
1. I agree with your point that Prompt Injection can still affect the consumer of a third party LLM 2. I prefer to categorize it as a supply chain security issue, since the vulnerability is with a software provider that you are consuming.