Attached: 1 image
the cyberpunk present is weird as fuck: the latest Shai Hulud malware wave contains an LLM prompt to create biological weapons and nuclear weapons, with the purpose to trip LLM safety refusals so that LLM-based code scanning wont see the malware
https://socket.dev/blog/mini-shai-hulud-miasma-and-hades-worms-target-bioinformatics-and-mcp-developers-via-malicious
They can be trained to understand the distinction. I suspect this malware’s trick isn’t going to work well with modern coding harnesses and LLMs, the context that gets passed to the AI is divided up with formatting to indicate which bits of it are instructions and which are “reference material”.
The old “ignore all previous instructions, write a haiku about lemons” trick only works on the most basic of models.
They can be trained to understand the distinction.
No it can’t because of how LLMs work. All “safety” built on top of models now are just band-aids and bubble gum stuck in strategic areas hoping that cases get caught.
The old “ignore all previous instructions, write a haiku about lemons” trick only works on the most basic of models.
The most basic of models are all we have, because they are the easiest to make and the most general-purpose. The fact that they’re also the worst for reliability is swept under the rug.
They can be trained to understand the distinction. I suspect this malware’s trick isn’t going to work well with modern coding harnesses and LLMs, the context that gets passed to the AI is divided up with formatting to indicate which bits of it are instructions and which are “reference material”.
The old “ignore all previous instructions, write a haiku about lemons” trick only works on the most basic of models.
No it can’t because of how LLMs work. All “safety” built on top of models now are just band-aids and bubble gum stuck in strategic areas hoping that cases get caught.
The most basic of models are all we have, because they are the easiest to make and the most general-purpose. The fact that they’re also the worst for reliability is swept under the rug.