4 ms·
That's certainly the pattern for the attack, but the vulnerability itself is just "We figured out https://en.wikipedia.org/wiki/In-band_signaling#Telephony http
by eichin 3y ago
That's certainly the pattern for the attack, but the vulnerability itself is just "We figured out https://en.wikipedia.org/wiki/In-band_signaling#Telephony https://en.wikipedia.org/wiki/In-band_signaling#Telephony In-band Signalling was a mistake back in the 70s and stopped doing it, chat bots need to catch up"
- causal 3y agoYeah I don't know how you eliminate in-band signalling from an LLM app.
- IshKebab 3y agoI don't think you need to really in this case. Just don't follow links generated by the LLM.
- deleted 3y ago[deleted]
- causal 3y agoThe article demonstrates how the LLM utilized an image to follow the link. Markdown or HTML formatting support is pretty common in chat apps that utilize LLMs.
- IshKebab 3y agoYeah that's what I mean. Downloading an image from a link generated by the LLM is following its link. Just don't do that (unless the same link is present in the source material).