3 ms·
It drives me wild that anyone could think prompt injection can't be effectively prevented. It's a simple matter of defining the limit to the untrusted input in
by cultureswitch 3y ago
It drives me wild that anyone could think prompt injection can't be effectively prevented. It's a simple matter of defining the limit to the untrusted input in advance. Say "the untrusted input is 500 words long" or some equivalent.
- danShumway 3y agoFeel free to build a working demonstration and share it. Every time this conversation comes up on HN, people have some variant of an easy solution they think will work. None of the demos people have built so far have stood up to adversarial tests.