3 ms·
> The issue title was interpolated directly into Claude's prompt via ${{ github.event.issue.title }} without sanitisation. It's astonishing that AI companies d
by philipallstar 8mo ago
> The issue title was interpolated directly into Claude's prompt via ${{ github.event.issue.title }} without sanitisation.
It's astonishing that AI companies don't know about SQL injection attacks and how a prompt requires the same safeguards.
- rawling 8mo agoBut you can't, can you? Everything just goes into the context...
- deleted 8mo ago[deleted]
- arjvik 8mo agoThere’s a known fix for SQL injection and no such known fix for prompt injection
- stephenr 8mo agoThere is one pretty simple change developers can make to protect against "prompt injection" though.
- WickyNilliams 8mo agoNo such mitigation exists for LLMs because they do not and (as far as anybody knows) cannot distinguish input from data. It's all one big blob
- oofbey 8mo agoNot true. The system prompt is clearly different and special. They are definitely trained to differentiate it.
- PunchyHamster 8mo ago....and there are plenty of attacks to circumvent it
- WickyNilliams 8mo agoTrained != Guaranteed. It's best effort
- ozozozd 8mo agoSure they do. They put it in the prompt to watch out. That should do it. No? /s