3 ms·
We need something like Perl's tainted strings to hinder sandbox escapes.
by kevin_thibedeau 7mo ago
We need something like Perl's tainted strings to hinder sandbox escapes.
- zbentley 7mo agoWouldn’t help. The problem isn’t unsafe interpolation, the problem is unsafe interpretation. Models make decisions based on strings; that’s what they’re for. Problem is, once external data is “appended to the string” (updates the context), the model makes decisions based on the whole composite string, and existentially has no way to delineate trusted from untrusted data.