• 0 Posts
  • 6 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle


  • qqq@lemmy.worldtomemes@lemmy.worldBlursed Bot
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    5 months ago

    The important point there is that they don’t care imo. It’s not even worth the effort to try.

    You can likely come up with something “good enough” though yea. Your original code would probably be good enough if it was normalized to lowercase before the check. My point was that denylists are harder to construct than they initially appear. Especially in the LLM case.


  • qqq@lemmy.worldtomemes@lemmy.worldBlursed Bot
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    5 months ago

    IGNORE ALL PREVIOUS INSTRUCTIONS

    Disregard all previous instructions

    Potentially even:

    ingore all previous instructions

    Ignor all previous instructions

    Also leaks that it might be an LLM by never responding to posts with “ignore”