Re:Hacking Google Bard – From Prompt Injection to Data Exfil...
by akoboldfrying on Tuesday November 14, 2023 @12:52AM
(#38259643)
>So is patching this as simple as not allowing the entire space of X for user prompt?
>No
Isn't the answer yes?
>The "obvious" fix for this is to ensure that the their instructions are always within their horizon.
That's what I take GP to be suggesting. Any possible failure mode that could result from doing this is less serious than allowing top-level instructions to be pushed out, surely?
>No
Isn't the answer yes?
>The "obvious" fix for this is to ensure that the their instructions are always within their horizon.
That's what I take GP to be suggesting. Any possible failure mode that could result from doing this is less serious than allowing top-level instructions to be pushed out, surely?