3 ms·
Wondering if the ability to use hidden (HTML comment) content in PRs would not remain a nasty issue: especially for open source repos?! Was that fixed?
by xstof 1y ago
Wondering if the ability to use hidden (HTML comment) content in PRs would not remain a nasty issue: especially for open source repos?! Was that fixed?
- PufPufPuf 1y agoIt's used widely for issue/PR templates, to tell the submitter what info to include. But they could definitely strip it from the Copilot input... at least until they figure out this "prompt injection" thing that I thought modern LLMs were supposed to be immune to.
- fn-mote 1y ago> that I thought modern LLMs were supposed to be immune to What gave you this idea? I thought it was always going to be a feature of LLMs, and the only thing that changes is that it gets harder to do (more circumventions needed), much like exploits in the context of ASLR.
- PufPufPuf 1y agoPR releases. Yeah, it was an exaggeration, I know that the mitigations can only go so far.