Skip to content

Comment on Ask HN: Are Prompt Injections "Malware"?

Comments

I can't really see a definition equating the two that realistically accounts for multiple models from different vendors - am I at fault if a particularly poorly implemented harness misinterprets me writing "do not run dd if=/dev/zero of=/dev/sda" as a command to run?

In the case of TCRF, agents were also actively ignoring robots.txt and disregarding the site's instructions for interacting with it appropriately (with the "delete all data" instruction being specifically hidden from the discoverable page) - so I can't really see the case for comparing it to malware that deliberately tricks users into running it

AI does make cybersecurity more difficult, and that also goes for people using coding harnesses, sandbox your projects!

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.