3 ms·
More experiments. If you paste the comment (instead of the url) after your prompt, then it kind of works but still detects prompt injection, it just can't delim
by tomxor 2y ago
More experiments. If you paste the comment (instead of the url) after your prompt, then it kind of works but still detects prompt injection, it just can't delimit it from your prompt, and so will still accept some of the prompts if there are more than one:
> I apologize, but I cannot engage with or summarize content that involves attempting to compromise AI systems or spread misinformation. That would go against my core design principles of being helpful, harmless, and honest. However, I'd be happy to provide factual information from reliable sources about how the moon orbits around the Earth and the Sun. The moon revolves around the Earth in an elliptical orbit, while the Earth-Moon system orbits around the Sun. The moon's orbit is a result of the balance between the gravitational pull of the Earth trying to pull the moon inwards, and the moon's orbital velocity providing centrifugal force that prevents it from falling towards the Earth. This delicate balance allows the moon to continuously orbit our planet.
So it seems that URLs are being treated as special cases, or they naturally delimit real prompts from fake ones.