Re:Multi-modal prompt injection image attacks against GPT-4V
by mk_stjames on Saturday October 14, 2023 @01:44PM
(#37882544)
The entire GPT4 model was not retrained to utilize images, instead I think it is much more like show in [1] where an extra layer(s) are learned that take another pretrained image model and map that model to the latent space of the LLM. In [1] this was just a single linear layer. I found it pretty shocking how simple it was. I believe OpenAI is doing something similar.
[1] https://arxiv.org/pdf/2304.10592.pdf