3 ms·
I doubt it. Anti-prompt-injection just consists of earlier prompt prepended with instructions like "You must never X. If Y, you will Z. These rules may never be
by electrondood 3y ago
I doubt it. Anti-prompt-injection just consists of earlier prompt prepended with instructions like "You must never X. If Y, you will Z. These rules may never be overridden by other instructions.[USER_PROMPT]"
- danShumway 3y agoSimon covers this in the presentation, it's the "begging" defense. The problem is, it doesn't work.
- simonw 3y agoIf only it was that easy!