This week in "we're in the wild west era" of LLMs.
- This week in "we're in the wild west era" of LLMs.
- A benign flan recipe injection in a LinkedIn profile went viral.
- Even The Economist is talking about prompt injection and The Lethal Trifecta!
- They published another piece with a "solution" that is less well-considered.
- They framed the problem like building a bridge, where the solution is over-engineering.
- But bridges don't have adversaries deliberately trying to attack them and find their weaknesses.
- I agree with Simon that structural approaches require cutting off one of the legs of the stool.
- Notion's response to the prompt injection attack vulnerability is to spam the user with security dialogs.
- Security dialogs like this are a form of "responsibility laundering."
- They move the responsibility to the user, who almost certainly is not paying attention or equipped to decide properly.
- The service washes their hands without actually minimizing harm that much.
- This one isn't a prompt injection attack, just a good old supply chain attack.
- Meanwhile, Apple is planning to integrate MCP into the OS.
- What could possibly go wrong?