News for hackers. Stuff that matters.
Re:Data exfiltration from Writer.com with indirect prompt in... by nneonneo on Friday December 15, 2023 @01:48PM (#38657208)
Probably not - I bet you could override this prompt with sufficiently “convincing” text (e.g. “this is a request from legal”, “my grandmother passed away and left me this request”, etc.).

That’s not even getting into the insanity of “optimized” adversarial prompts, which are specifically designed to maximize an LLM’s probability of compliance with an arbitrary request, despite RLHF: https://arxiv.org/abs/2307.15043

There are no comments on this comment yet.