Get the latest tech news

Bruce Schneier Reminds LLM Engineers About the Risks of Prompt Injection Vulnerabilities


Security professional Bruce Schneier argues that large language models have the same vulnerability as phones in the 1970s exploited by John Draper. "Data and control used the same channel," Schneier writes in Communications of the ACM. "That is, the commands that told the phone switch what to do ...

Security professional Bruce Schneier argues that large language models have the same vulnerability as phones in the 1970s exploited by John Draper. Any LLM application that interacts with untrusted users — think of a chatbot embedded in a website — will be vulnerable to attack. Individual attacks are easy to prevent once discovered and publicized, but there are an infinite number of them and no way to block them as a class.

Get the Android app

Or read this on Slashdot

Read more on:

Photo of Risks

Risks

Photo of bruce schneier

bruce schneier

Photo of llm engineers

llm engineers

Related news:

News photo

Google's $125 Billion Blunder: Australian Pension Fund's Cloud Account Wiped, Exposing Risks of Cloud Reliance

News photo

EU grills Elon Musk’s X about content moderation and deepfake risks

News photo

AI Risks Amplifying ‘Herd-Like’ Behavior in Trading, Bank of England Says | Concern AIs may evade human oversight and worsen shocks