3 ms·
No such mitigation exists for LLMs because they do not and (as far as anybody knows) cannot distinguish input from data. It's all one big blob
by WickyNilliams 7mo ago
No such mitigation exists for LLMs because they do not and (as far as anybody knows) cannot distinguish input from data. It's all one big blob
- oofbey 7mo agoNot true. The system prompt is clearly different and special. They are definitely trained to differentiate it.
- PunchyHamster 7mo ago....and there are plenty of attacks to circumvent it
- WickyNilliams 7mo agoTrained != Guaranteed. It's best effort