4 ms·
There was another post on Thursday related to this [1]. If the LLMs can communicate, then you can use that fact to prompt one to talk to the other and do kind
by efitz 3y ago
There was another post on Thursday related to this [1].
If the LLMs can communicate, then you can use that fact to prompt one to talk to the other and do kind of an indirect injection attack.
[1] https://news.ycombinator.com/item?id=35905876 https://news.ycombinator.com/item?id=35905876
- kyleyeats 3y agoYou need a second secret LLM supervisor that's really pulling the strings, rewriting the inputs of the other two.