napping_penguin
napping_penguin on Hacker News
With this design, there were too many repeat introductions, particularly, people who moved together. It turns out there is better way to conduct this. Here's a short writeup of it.
- M(Q) is nearly the same as M(P)
- P is hard to reverse engineer from Q
As a applied crypto researcher, this feels like an "ML-based homomorphic encryption". Works with any model (that supports prompt_embeds) without changing anything on the model side. Very cool indeed.
Credit note: This method was invented by Protopia Labs and I don't have any affiliation there.
Prompt Privacy from LLMs
The interesting bit is to come up with a strategy to make 5 adaptive queries that will guarantee you know all the 4 cards no matter what the response you got to the queries.
As a simple example: Suppose I do the following (static) set of 5 questions:
- Is the first card Red?
- Is the first card King?
- Is the second card Red?
- Is the second card King?
- Is the third card Red?
You can see that there might be a situation where these 5 questions are not enough to uniquely determine the arrangement (for instance, in case you got answers Yes, Yes, Yes, No, No respectively).
More succinctly, 5 is the information theoretic lower bound but that does not mean it is achievable and that is precisely what the post is about. Is the information theoretic lower bound achievable?
- Adversarial engine: Will always respond with an answer to your query such that it maximizes the number of remaining permutations (used in the first simulator)
- Honest engine: This one will actually have one random hidden permutation that will be uncovered by your queries (this is used in the second simulator)
The reason why the adversarial engine is used up there is because if the user does not play optimally, they will be forced into 6 queries or more (and hence will appreciate the difficulty of the problem better). If you do self-play on the lower simulator (which has the 4,8,16 card variants) you will have the experience you expect.
Can LLMs identify 16 cards in 45 bit-queries?
Show HN: Privacy-first work journal with no backend
Hi HN! I built Scribe Notes to solve a problem I kept having: to get organized with my daily work and solve the "explain what you did today and why you should still be employed" problem.It's a 5-minute daily work journal that runs entirely in your browser. Zero backend, zero tracking, zero data leaving your machine. Everything is stored locally using IndexedDB and local storage.Key features: -...