Re:GitLost: We Tricked GitHub's AI Agent into Leaking Privat...
by Dylan16807 on Wednesday July 08, 2026 @12:59PM
(#48834361)
> There was a time when some languages / platforms only addressed SQL injection with escaping. That’s basically where we’re at with prompt injection now
No, we're in a far worse place. Escaping SQL is 100% reliable when you apply it to every field (and you don't mix up encodings, see mysql_real_escape_string). Prepared statements 'just' keep you from forgetting. The state of the art for separation in an LLM is a loose advisory at best.
No, we're in a far worse place. Escaping SQL is 100% reliable when you apply it to every field (and you don't mix up encodings, see mysql_real_escape_string). Prepared statements 'just' keep you from forgetting. The state of the art for separation in an LLM is a loose advisory at best.