The random number generator didn't produce the number I wanted? Shocking!
In all seriousness, uneducated people should not be setting up LLMs (or, frankly, even using them depending on the circumstance). Understand what the technology is. It isn't intelligence, it isn't a person, it's math. Vector encoded data.
Once you recognize that all outputs are possible, including all possible negative outputs, you will be much better at determining proper sandboxing/boundaries.
If you run an LLM and give it two tool calls: read_file and curl, you can have all your data exfiltrated (and, depending on how bad your setup is, it might only need curl...)
In all seriousness, uneducated people should not be setting up LLMs (or, frankly, even using them depending on the circumstance). Understand what the technology is. It isn't intelligence, it isn't a person, it's math. Vector encoded data.
Once you recognize that all outputs are possible, including all possible negative outputs, you will be much better at determining proper sandboxing/boundaries.
If you run an LLM and give it two tool calls: read_file and curl, you can have all your data exfiltrated (and, depending on how bad your setup is, it might only need curl...)