Post #3934058

@agreeable_landfall@mastodon.social @SteveBellovin@infosec.exchange I would argue that it always has to be marginally worse for two reasons: 1. AI, by design, makes no distinction between instructions and data, which means it inherently has no defense against the entire class of injection attacks. 2. Because of point 1 above, you have to sanitize it's outputs as well as it's inputs, and that sanitization is itself going to be a set of finite rules subject to the incompleteness theorem.