4 ms·
One of the examples in the paper was someone saying "I lived in Glendale and was finishing University during the Left Shark incident" and the authors hid the wo
by hermannj314 3y ago
One of the examples in the paper was someone saying "I lived in Glendale and was finishing University during the Left Shark incident" and the authors hid the word Glendale and GPT4 still knew what Left Shark incident means and could guess the person's age and location based on where the Super Bowl was that year.
The person that wrote the original text clearly knew they were leaking their age and location when they wrote that statement. Why are we flabbergasted that GPT can still infer that info with mild obfuscation?
I asked GPT4 to obfuscate the original text and it was smart enough to remove the mention of the Left Shark incident. So maybe using an LLM to sanitize all your posts online is a good defense to an adversarial LLM doxing you. I don't think I see the authors mention doing that at all in their paper (I may have overlooked it)
- noobermin 3y ago> Why are we flabbergasted that GPT can still infer that info with mild obfuscation? May be this was "obvious," but like a lot of research there's a bit of hindsight bias in that sentiment. The issue now is that while you can easily do this yourself in terms of inference, the problem is GPT4 allows this inference to be automated.