3 ms·
And yet a prompt injection attack could never work on a customer service assistant. Sure they can be tricked, but prompt injection is about conflating trusted
by iudqnolq 4y ago
And yet a prompt injection attack could never work on a customer service assistant.
Sure they can be tricked, but prompt injection is about conflating trusted instructions and user input. There is no chance you'll convince a CS rep you're secretly the CEO over a web chat UI.
- exizt88 4y agoI imagine a few customer support reps were tricked by support tickets that were filed by attackers. “This is a test from our Security Team, open this link to confirm you have passed it”