4 ms·
In my opinion, the trifecta can be reduced further to a simple statement: an attacker who can input into your LLM can control all its resources.
by matusp 1y ago
In my opinion, the trifecta can be reduced further to a simple statement: an attacker who can input into your LLM can control all its resources.
- furyofantares 1y agoIt can, but it doesn't really help someone spot the danger.
- kragen 1y agoThat isn't a helpful statement, and it also isn't correct.
- jondwillis 1y ago“An LLM with a tool that READS untrusted content, is inherently also WRITING it into the context window.” Is a slightly more useful flattening/reduction of the problem that I’m still wordsmithing and evangelizing.