I think this is a bigger issue than many imagine. If you think SQL injections are bad, imagine LLM injections where the LLM is connected to a system that can perform tasks such as emailing people.
Worse, mitigations for this are not at all obvious or guaranteed to work thanks to the probabillistic nature of LLMs.
LLM injections are probably more insidious than Spectre: there are probably a great many non-obvious ways to inject that we have only begun discovering.
Worse, mitigations for this are not at all obvious or guaranteed to work thanks to the probabillistic nature of LLMs.
LLM injections are probably more insidious than Spectre: there are probably a great many non-obvious ways to inject that we have only begun discovering.