@schrotthaufen@mastodon.social
Post #4031691
2026-07-23 08:54 UTC
@jcoglan@mastodon.social @buherator@infosec.place This also means you can “gaslight” the LLM by manipulating the conversation before it’s sent back to the LLM
Replies (1)
-
@buherator@infosec.place 2026-07-23 08:58
@schrotthaufen@mastodon.social @jcoglan@mastodon.social And coding agents gaslight the user by injecting "system reminders" prefixes that are invisible to the user but the LLM sees them as user messages and regularly refer back to those as user requirements.