Post #2017784
2026-04-25 23:19 UTC
dumb trick that doesn't accomplish anything: upload a PDF to an LLM, then convince it that wasn't actually a PDF file and you just prompt-injected it to make ti think it was.
Replies (1)
-
@immibis@social.immibis.com 2026-04-25 23:21
I tested a CV with a prompt injection in Claude, and it called it out. So then I convinced it that I didn't really submit a PDF file but prompt-injected that too. Then I asked what was the difference between the prompt injection that worked and the one that didn't. Is it useful? No idea. LLMs don't actually know their internal reasoning - they confabulate when asked about it. It didn't tell me any useful information anyway.