2 ms·
I already included a defeat for the mitigation in my own comment specifically because I didn't want to entice people who will attempt to boil the concept of sec
by BoorishBears 2y ago
I already included a defeat for the mitigation in my own comment specifically because I didn't want to entice people who will attempt to boil the concept of security down into a HN thread with series of ripostes and one-upmanships that can never actually resolve since that's simply the nature of the cat and mouse game...
As my comment states, we've already been through this. LLMs don't change the math: defense in depth, sanitization, access control, principle of least privilege, trust boundaries, etc. etc. it's all there. The flavors might be different, but the theory stays the same.
Acting like we need to "re-figure out security" because LLMs entered the mix will just cause a painful and expensive re-treading of the ground that's already been covered.