Hacker News new | ask | show | jobs
by vkou 2 days ago
Neither my browser nor my brain will just run whatever commands it receives over a socket as root.
1 comments

Browsers (and humans, actually) are subject to bugs that make them execute arbitrary commands from an attacker, and LLMs can be told to ignore undesired commands.
So go tell your LLM to ignore undesired commands, and this ends up a nothingburger that nobody should be upset over.
If you intentionally send me a virus-laden email attachment, I'm going to be justifiably unhappy even if my antivirus catches it.
Unlike sending you an email, nobody's pushing you anything, though. You are actively pulling a program that explicitly says that you should not use it with an AI system.

It's like pulling a bunch of GPL code into your product and then complaining that it 'infected' the rest of your code. You actively chose to do that, nobody forced it upon you.