3 ms·
Have you managed to break recent versions of Bing Chat? I've tried some of the notable injection prompts and my own variants. Sometimes I can get it to begin wi
by squeaky-clean 3y ago
Have you managed to break recent versions of Bing Chat? I've tried some of the notable injection prompts and my own variants. Sometimes I can get it to begin with the jailbreak, but after 10-20 words it will erase the previous text and say something along the lines of "I cannot talk about that"
- codeflo 3y agoMy reading of these events is that the jailbreak is successful, but some other, slower system detects it after the fact and deletes the message. Given the delay, I've seen speculation that there's a manual step involved.
- simonw 3y agoJailbreaking and prompt injection are related but they aren't quite the same problem. That thing where Bing redacts text after the point isn't going to protect your application against problems like those I describe in https://simonwillison.net/2023/Apr/14/worst-that-can-happen/ https://simonwillison.net/2023/Apr/14/worst-that-can-happen/
- squeaky-clean 3y agoGreat point