spiorf

People with less experience normalize that behaviour and when the domain is not trusted the habit let their guard down. See all the clickfix attacks.

I did that with a cheap webcam years ago. All my black hoodies were white, and so were the leaves on trees.

And companies have high awareness of this all.

They have a way to decrease cost and probably increase token consumption, with gradual changes and no abrupt jump in capabilities, and users have no way to reliably detect it.

Market will advantage companies that do it.

And they are in the best position to automate online narrative shift (the real LLM killer application IMO) towards "Users are imagining it".

The verb "chooses" here does a lot of the heavy lifting, and implies a consciusness that chooses. It's making the answer circular and it means that we are just pre-filtering the possible answers for our preconceptions.

My cat is not "less conscious" because he's choosing to sleep all day.

No, the process has impeded even higher standard of living, because it misallocates resources from value generation to value appropriation. It's the extreme short term profit maximization that makes the economy a zero sum game. Otherwise it is not.

It's water that builds up limescale that it's harmful for the carnivorous plants. The peat moss substrate that carnivorous plants like is acidic and the limescale neutralizes that.

We know how the next token is selected, but not why doing that repeatedly brings all the capabilities it does. We really don't understand how the emergent behaviours emerge.

Bubblesort is the bestsort.

It works even on cheap webcams. Remove the piece of blue glass and replace it with the black plastic that covers the ir leds from an old remote.

Playbook files are password protected archives. Anyone cares to reverse engineer the password from the executable?

What he means is that while the models tags code as code, for the model itself this is just relationship between tokens,like the code open and close tags,same as parenthesis, commas, uppercase or verbs and conjunctions...

What you say is achievable only if another system external to the model takes some tagged model output, makes computations or lookups, and feeds the results back to the model in the form of text input.

Then it's game on for the model to trigger some form of code execution through this external system and escape the jail...

When you run signature verification on that text with that signature and that address, it checks out. It wouldn't otherwise. The text links the two.

Can confirm. Did a double withdrawal (of about 10$ at the time) on an exchange years ago by blocking a POST request and firing two at the same time.

I alerted the exchange operator and he let me keep the 10$.