3 ms·
I have been reading HN for years. The exploits used to be so clever and incredible feats of engineering. LLM exploits are the equivalent of "write a prompt that
by xrd 1y ago
I have been reading HN for years. The exploits used to be so clever and incredible feats of engineering. LLM exploits are the equivalent of "write a prompt that can trick a toddler."
- nixpulvis 1y agoAnd the discussion used to be informative or offering perspective, and not as reactionary. I'm legitimately disappointed in the discourse on this thread. And I'm not at all bullish on LLMs.
- krainboltgreene 1y agoThat's because we're watching the equivalent of handing many toddlers a blowtorch. If you don't freak out in that scenario, what could possibly move you?
- deleted 1y ago[deleted]
- deleted 1y ago[deleted]
- neuroticnews25 1y agoBasic SQLi, XSS, or buffer overflow attacks are equally trivial and stem from the same underlying problem of confusing instructions with data. Sophistication and creativity arises from bypassing mitigations and chaining together multiple vulnerabilities. I think we'll see the same with prompt injections as the arms race progresses.
- lovehashbrowns 1y agoThis sort of statement is so wild to me. Exploits are absolutely insanely complex nowadays, for example speculative execution exploits are a thing that feel like magic. This one here is so insane: https://news.ycombinator.com/item?id=43974891 https://news.ycombinator.com/item?id=43974891 This Supabase attack I would equate to being on the same level as Social Engineering which has been a thing since forever and has always been the most effective form of hacking. It is really funny to give an LLM access to your entire database, though, that's peak comedy.