Prompt injection explained, with video, slides, and a transcript
regarding the quarantined&#x2F;privileged LLM solution:<p>what happens if I inject a prompt to the quarantined LLM that leads it to provide a summary to the privileged LLM that has a prompt injection in it?<p>of course this is assuming I know that this is the solution the target is using<p>and herein lies the issue: with typical security systems, you may well know that the target is using xyz to stay safe, but unless you have a zero-day, it doesn’t give you a direct route in.<p>I suspect that what will happen is that companies will have to develop their own bespoke systems to deal with this problem - a form of security through obscurity - or as the article suggests, not use an LLM at all