xmhatx

5 ms·

1. 1.▲
   by xmhatx 5mo ago

   VoiceGoat is our take on a DVWA\WebGoat\HackMeBank for voice-based AI agents. Most LLM security training is text-only, but voice agents are showing up in banking, healthcare, and customer service — and the attack surface behaves differently
2. 2.▲
   Show HN: VoiceGoat – A vulnerable voice agent for practicing LLM attacks(github.com)

   14 points by xmhatx 5mo ago|1 comments
3. 3.▲
   by xmhatx 8mo ago

   Definitely agree about it being counter-intuitive. The recency bias is very real! We have learned that prompt engineering can be quite nuanced! The other important item we have learned for prompts is delimiting into clear sections to give t
4. 4.▲
   by xmhatx 8mo ago

   Nifty and schwifty, ftw!
5. 5.▲
   by xmhatx 8mo ago

   We were surprised by this, as well! We ended up making our own tooling to test a speech-to-speech system because of this gap. Voice AI is becoming more and more prevalent with real security implications. ElevenLabs just started offering ins
6. 6.▲
   by xmhatx 8mo ago

   Thanks! We will be updating this regularly. We have a discord channel to join to keep up with updates as well! Cheers! https://discord.gg/Cv3sB6xgtt
7. 7.▲
   by xmhatx 8mo ago

   Great question! It makes it more interesting! New attack angles are presented when dealing with the speech-to-speech models. Prosody, which are the intonation patterns that convey meaning, emotion, and emphasis beyond the literal words, com
8. 8.▲
   Show HN: Teapot – A methodology for pen testing voice AI agents(redcaller.com)

   7 points by xmhatx 8mo ago|10 comments