4 ms·
I think there's a huge difference in that convincing LLMs to go outside their rules is a very well-driven field already. So if that LLM can access the sensitive
by ocdtrekkie 1y ago
I think there's a huge difference in that convincing LLMs to go outside their rules is a very well-driven field already. So if that LLM can access the sensitive data, we can't assume an LLM will ever successfully avoid giving it to someone who does not have the correct label.
- p_ing 1y agoBut that's not what is being presented, here. This post just presents a simple permission misconfiguration or not using the correct tools for the data with the given system (Sensitivity Labels on M365). If there was a breakout of Copilot in M365 to produce data you lacked permission to, that would be a worthy blog post (hopefully after the bug bounty was processed).