I don't tend to worry too much about prompt exfiltration, agreed. But people are also hooking up LLMs in ways that allow them to trigger API calls and take othe

I don't tend to worry too much about prompt exfiltration, agreed. But people are also hooking up LLMs in ways that allow them to trigger API calls and take other actions, and that can lead to some fun attacks: https://twitter.com/hwchase17/status/1608467493877579777 https://twitter.com/hwchase17/status/1608467493877579777 And of course there was the fun example of how users were able to get a GPT-powered twitter bot intended to promote remote work to threaten the president: https://twitter.com/simonw/status/1570568047618031617 https://twitter.com/simonw/status/1570568047618031617