|
|
|
|
|
by SiempreViernes
17 days ago
|
|
> This leads to LLMs refusing to do security work for anyone, because it can’t tell if it’s being done for good or evil purposes. Oh no, of only we had some sort of ideas about automated authentication and authorisation! (If big AI actually make a model that would reliably reject dangerous queries in the first place, they can just use auth tech to serve the current ones to vetted customers) |
|
Not happening, for two reasons
1) LLMs mix attacker-controlled data into their instruction stream, and it doesn't look at all like the big LLM providers consider making that impossible to be an actual priority.
2) Intent is what distinguishes "dangerous" queries from prosocial ones. Reliably determining intent is so complex that not even humans can do it.