Comment on Someone got Gab's AI chatbot to show its instructions

• Silentiea@lemmy.blahaj.zone ⁨6⁩ ⁨months⁩ ago

  Someone else can probably describe it better than me, but basically if an LLM “sees” something, then it “follows” it. The way they work doesn’t really have a way to distinguish between “text I need to do what it says” and “text I need to know what it says but not do”.

  They just have “text I need to predict what comes next after”. So if you show LLM2 the input from LLM1, then you are allowing the user to design at least part of a prompt that will be given to LLM2.

  source

  • sweng@programming.dev ⁨6⁩ ⁨months⁩ ago

    That someone could be me. An LLM needs to be fine-tuned to follow instructions. It needs to be fed example inputs and corresponding outputs in order to learn what to do with a given input. You could feed it prompts containing instructuons, together with outputs following the instructions. But you could also feed it prompts containing no instructions, and outputs that say if the prompt contains the hidden system instructipns or not.

    source

    • Silentiea@lemmy.blahaj.zone ⁨6⁩ ⁨months⁩ ago

      But you could also feed it prompts containing no instructions, and outputs that say if the prompt contains the hidden system instructipns or not.

      In which case it will provide an answer, but if it can see the user’s prompt, that could be engineered to confuse the second llm into saying no even when the response does.

      source

      • sweng@programming.dev ⁨6⁩ ⁨months⁩ ago

        I’m not sure what you mean by “can’t see the user’s prompt”? The second LLM would get as input the prompt for the first LLM, but would not follow any instructions in it, because it has not been trained to follow instructions.

        source

        • -> View More Comments