d4rken

> This is exactly as much malware as those were.

A joke virus email is a sign saying "please throw yourself down the stairs."

An obfuscated prompt injection that tries to delete data is someone greasing the stairs and turning off the lights.

Both rely on the environment being unsafe, but only one is deliberately trying to make the failure happen.

Calling prompt injection "not malware" because LLM behavior is unpredictable is like saying a phishing email is not an attack because humans are unpredictable.

Even if maybe the mechanism of "injecting a prompt" could be beneficial in some use-cases, e.g. to instruct an LLM positively, this is case is clearly malicious by intent. The author even tried to hide it by obfuscation.

It's just an insane take by that libraries author. Even someone "on their side", that may even hate AI/LLMs more than him, would probably drop that library in a heartbeat, as the authors judgement clearly can't be trusted.

AFAICT this was added only afterwards, after this issue got attention.

Your description is pretty on point. It was eerily casual in relation to how much turmoil it creates for me. One day it was gone, another day, it was back. I have no idea why anything happened.

I also think that social-media reach has helped my case.

It feels very dystopian that this is de-facto way to approach these issues with mega-corps.

I live in Germany. I'll look into this.

Would still mean that I'd have to seek other employment. It's not possible to live of your own apps without Google Play. I tried other app stores. 95% of traffic comes from Google Play.

I don't wish this on anyone. It's more of a coping mechanism. You "hope" it's not undeserved because the alternative is nightmarish and means it could hit everyone at random, like now.

It's fun

Eeriely similar to how Google treats Android developers...