Post #4453202

@arno_in_sing@mastodon.online @rgulick@social.coop if you can control text that goes into an LLM, the answer is literally always "yes". not in the way that someone always eventually screws up and leaves a gap you can use, I mean *literally always*, there is no reliable defense at all. the only safety tactics that work are hard limits on what the LLM and its harness together can do. e.g. only output text that only humans will read -> your attack can't convince it to upload data elsewhere... but it might be able to trick someone into doing that for it, which sometimes happens with executable code snippets.