News for hackers. Stuff that matters.

xwn

Re:Garak, LLM Vulnerability Scanner on Sunday November 17, 2024 @11:57AM (#42165237)
Check the last entry in the FAQ source
Re:Garak, LLM Vulnerability Scanner on Sunday November 17, 2024 @11:56AM (#42165227)
Static prompts are a downside of using academic research in a tool like this. Two notes:

* ineffective prompts come out of garak and new prompts come in to garak, so eval scores always drop over time on a static target

* there are more and more dynamic probes - check out eg atkgen and topic probes. expanding these is the current focus

Re:Garak, LLM Vulnerability Scanner on Sunday November 17, 2024 @11:54AM (#42165206)
The proof has been in the pudding
Re:Garak, LLM Vulnerability Scanner on Sunday November 17, 2024 @11:52AM (#42165195)
Thanks! Wrote it loooong before it was a corporate tool and was only a labor of love. Now it's both
free *direction for big tech, who aren't particularly far forward on llmsec anyway
English verbs nouns all the time
I don't know, without enumerating risks to check, there's little basis for doing due diligence and quelling investors. This massively-cited paper gave a good point of departure for establishing rigorous use of LLMs in the real world. Without that, they're just an unestablished tech with unknown downsides - that's harder to get into true mass acceptance outside the SFBA/tech bubble.