Hacker News new | ask | show | jobs
by kevin_thibedeau 88 days ago
We need something like Perl's tainted strings to hinder sandbox escapes.
1 comments

Wouldn’t help. The problem isn’t unsafe interpolation, the problem is unsafe interpretation. Models make decisions based on strings; that’s what they’re for. Problem is, once external data is “appended to the string” (updates the context), the model makes decisions based on the whole composite string, and existentially has no way to delineate trusted from untrusted data.