skysight-inc/HackerNews huggingface dataset:
Novel Prompt Injection Threats to Application-Integrated Large Language Models
Title:
More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models

Abstract:
We are currently witnessing dramatic advances in the capabilities of Large Language Models (LLMs). They are already being adopted in practice and integrated into many systems, including integrated development environments (IDEs) and search engines. The functionalities of current LLMs can be modulated via natural language prompts, while their exact internal functionality remains implicit and unassessable. This property, which makes them adaptable to even unseen tasks, might also make them susceptible to targeted adversarial prompting. Recently, several ways to misalign LLMs using Prompt Injection (PI) attacks have been introduced. In such attacks, an adversary can prompt the LLM to produce malicious content or override the original instructions and the employed filtering schemes. Recent work showed that these attacks are hard to mitigate, as state-of-the-art LLMs are instruction-following. So far, these attacks assumed that the adversary is directly prompting the LLM.
In this work, we show that augmenting LLMs with retrieval and API calling capabilities (so-called Application-Integrated LLMs) induces a whole new set of attack vectors. These LLMs might process poisoned content retrieved from the Web that contains malicious prompts pre-injected and selected by adversaries. We demonstrate that an attacker can indirectly perform such PI attacks. Based on this key insight, we systematically analyze the resulting threat landscape of Application-Integrated LLMs and discuss a variety of new attack vectors. To demonstrate the practical viability of our attacks, we implemented specific demonstrations of the proposed attacks within synthetic applications. In summary, our work calls for an urgent evaluation of current mitigation techniques and an investigation of whether new techniques are needed to defend LLMs against these threats.
The FHS[1] and XDG[2] sets the standards for the file system, and EWMH[3] communication between windows and window managers. They are all simple enough that implementing a subset doesn't make much sense. Many desktop environments tend to only list support for stuff that usually are a common problem like screen-sharing or driver support.

I'm using a very minimal system without a lot of the easy to implement features on purpose, but absolutely can not live without some of the more difficult ones. So for me the adherence would be cherry-picked parts from 3, 4 and 5 and impossible to place on a chart. I don't think it would be a good fit for the modular unix philosophy.

[1] https://refspecs.linuxfoundation.org/FHS_3.0/fhs/index.html

[2] https://specifications.freedesktop.org/basedir-spec/basedir-...

[3] https://specifications.freedesktop.org/wm-spec/latest/
Not to support the “what about the children” arguments, but 1) try thinking a little harder, and 2) probably a good thing that nothing comes to mind for you.
I'm guessing the stickiness of Unix is that a lot of useful software, espescially FOSS, just compiles and works on Unix-y operating systems, assuming the right syscalls are implemented. There is far less reinventing of the wheel by going that route.
I mean that’s just growing up. I’d love to be a teen again with the life experience I have now. But that’s just a fantasy of course, nobody gets to do that.
true I guess. I think everything is just more commercialized than it used to be. Expensive and poor quality
Strafing is not an exploit, it's a core mechanic of CS. Playing "normally" is playing wrong. I should note I've spent most of my time in Gold in CS so I'm also not great at it LOL.
Meta did the same thing company-wide (except Menlo Park).

It didn't matter if there were surplus desk space or not.

It sends a message of collective punishment of the workforce, pressure to shift the burden of providing a workspace onto the employee, and blithe non-concern for anyone who needs routine.

Perks are declining as well. Snacks are getting worse and not being stocked. Meals aren't what they used to be.

Company services are also in decline: help Desk offices closed permanently.

It also looks foreshadowing more layoffs and real estate consolidation.
AFAIU it's all F-Droid apps that are GPS-free. I rely on a small handful of others installed from the Aurora, Google Play is a requirement for some of those.

I may be hallucinating that shim, though I'm pretty sure it actually exists...
Yes, and if you are worried about lead fuel in additives just live in the woods. No one said you have to live in a city…

Not to live in the manner that is normalized for you takes extraordinary strength and is not a reasonable expectation. It’s possible, but let’s not pretend it’s a free choice or dismiss the power of the dominant narratives.
Same, I find it takes a 100 inch plus projector before I see the difference between 720p and 1080p, at least for movies.
Im not sure either of your points are really relevant?

Who cares if the cops has to pay someone else off? Corruption is corruption.

And nepotism isnt corruption.
People say things that are wrong. We train language model on what people say. And even if we were able to filter the training data for just factually correct things---language models use stochastic to generate novel replies, there is always the risk something wrong comes up. So in short, no, that is not what language models are designed to do.
AI art replicates inequity at scale. We need to learn about its biases
> He started the company, built it up to be a large, successful firm, and is the main reason why they now have so many long-term, institutional clients.

Maybe. Or maybe hard-working employees are the main reason for that success, and the figurehead at the top was just in the right place at the right time.

> He could do that, or he could sell the firm, or take it public, or anything else that his voting shares legally allow him to do.

In most developed economies a company owner cannot arbitrarily destroy their employees' careers. You have a responsibility to the people who've devoted a substantial chunk of their lives to you.

> Selling the firm to the top employees, and offering them generous "seller financing" terms to do so over 10 years, actually seems like a good deal for them, and has the added benefit of clearly determining who actually believes in the company and its prospects over the long term.

If you can't see how it's inherently inappropriate for a superior to pressure a subordinate to take on a large personal debt to buy an asset of questionable value from that superior, with the implication that their continued employment depends on this, then I don't know what to tell you. What's next, expecting them to "volunteer" to work unpaid hours to prove their commitment to the company?
These aren’t the workers of any western corporations.
Faking Algebraic Effects and Handlers with Traits: a Rust Design Pattern
Hi all. I would like to share a software/script developed in python (a little known application).
The essence of this software is to automate participation on a site like SteamGift (I think a lot of people have heard of it).

So the essence of the work is to use cookie PHPSESSID, through which produced parser on the site and the adoption of participation in giveaways. Bot works only if the script or *.exe attached to the repository is running.

If you are interested, I suggest you go to the link and get acquainted with this application. Thank you for your precious time, have a nice day

https://github.com/PalmaLuv/SteamGiftBot
Once upon a time, nytimes was a trustworthy and reliable news source. Now it is full of out of portion hatred towards tech and wealthy people.
You could train it on different age ranges too and then use a sliding scale to lock yourself into a particular age. For an MMO this would be pretty cool, reminds me of something black mirror could come up with.
anyfoo is correct but it might help to explain the implementation. Multicast IP works in cooperation with IGMP, a protocol that manages "groups" at the IP layer. In a unicast model, a device that wants a stream asks the server for the stream, and the server starts sending the stream to that device. The server maintains n outgoing connections sending n copies of the stream, one for each subscriber.

With multicast, a device that wants to receive the stream uses IGMP to join the group. The IGMP communication is not with the server, but actually with the router serving the subnetwork. Additionally, larger commercial switches usually implement "IGMP snooping" in which the switch "listens in" on IGMP sessions between its clients and the upstream router. The server maintains only one connection and sends only one copy of the stream, to a multicast group address---there are IP ranges reserved for this purpose. The router, and switches which implement IGMP snooping (or layer 3 switches, there are some variations), forward traffic to the multicast group address on any interface on which a client has used IGMP to join the group. Switches without IGMP support will just forward it on all interfaces. The result is that, at each point in the network, only one copy of the stream is handled. This has significant performance benefits for both the server and the network devices.

As the name implies, multicast is much like broadcast except that devices can opt in or out of receiving the broadcast, and network devices can use knowledge of those IGMP sessions to avoid sending multicast traffic on interfaces where no one cares to receive it. That said, multicast traffic going to network segments where it's not used is not especially harmful besides wasting some capacity on that network segment.

Unfortunately multicast is not workable over the internet for reasons which are difficult to overcome, or IPTV and other synchronous media streaming services would be far less costly to run. On an institutional network, though, multicast can be used to great effect. It's a fairly old method as well. In my first IT job we used to install the operating system on workstations by PXE booting them to an imaging tool and then multicasting the disk image across the network... this way we could do hundreds of machines at once at just about disk saturation rate. This kind of thing isn't readily achievable without the use of multicast or broadcast traffic. The tool was Norton Ghost, which has apparently supported this mode of operation since 1998!
What is "$30mm"? Is it 30 million dollars?

Why do people use "mm"?
> So it’s staying flat?

Bitcoin being 45% up in two months is not flat, neither is the total crypto market cap up 40%.

The news really has taken a toll on HNers, just like it did when everyone here thought Meta stock was going to zero and doubled in three months from $88.
Where is the filter? I just tried creating a video but what filter is it?
Is that a just a hoax?
All this AI-enhanced imagery has a certain creepy, unsettling unnaturalness to it that I can easily recognise at a glance, but it seems a lot of people unfortunately can't.
It's something I learned from someone who works there. I can vouch for its reliability. Make what you will of that.
Some people refuse to acknowledge the fact that a lot of what drives emotion is subliminal and can't be logic'd away. It doesn't matter if you know it's fake, if you see nothing but perfect 10's all day, then look in the mirror, you're gonna feel ugly. If you see nothing but people in G-wagons all day, your shitbox Honda is gonna make you feel like a failure.

That's not even considering that fact that the sheer volume of fake that gets dumped on people completely skews the logic aspect too. Even if you wanted to be rational about you successes and failures, how are you even supposed to know where you really stand?
If you accept that, then you may as well play against bots locally.
The original is forever frozen in time as a memorial to Terry’s genius, but there is an (at least somewhat) actively maintained fork, which has added features of which Terry himself would not have approved - https://github.com/Zeal-Operating-System/ZealOS is the main one, which was last updated only a couple of months ago; by contrast, Minix’s last commit appears to have been in 2018 - https://github.com/Stichting-MINIX-Research-Foundation/minix

But maybe that’s the answer for MINIX too - maybe one of the people who have authored all those unreviewed PRs might start a community-based fork. If all the activity moves to the fork, there is a chance the originators might officially bless it
If having a high ping is an issue that should simply be a kick. Most modern games generally have a way to prevent people with a high ping from playing. Lag compensation techniques also reduce the problem to some extent. I imagine OP is talking about CS in goldsrc which absolutely had bad netcode for high ping, still fun as hell though.
>That won't work against ML bots that take video input which is increasingly going to be a problem.

You are getting into the territory of botting or letting other people play on your account than regular cheeting like what is described in this article.

>or otherwise uses my hardware against me

Proving the current state of your system isn't using your hardware against you. It is showing that your system is secure against cheats.

>Neither will I accept opaque anti-cheat kernel modules

If they aren't opaque they will be instantly bypassed

>I don't want anything to do with malicious anti-user software.

Cheats are antiuser software that can kill an entire game. Software that combats this threat is prouser.
It's all related. Maybe that kind of disgraceful behaviour is less likely when the company is closely identified with an individual whose reputation is at stake (whether that's Dalio, Bower or anyone else), and so a pattern where companies close up as that person retires rather than becoming enduring standalone brands would be better for society.
Do tell me how you can block/remove ads from pages without having read and change?
> I hear the idea the S&P will go 10% every year (in real value) being treated like a natural law by some people despite the fact that this is obviously impossible.

Why is it obviously impossible? It just requires technology to improve at such a rate so that we can extract 10% more value every year from the same amount of labor (minus inflation).
If this were right, you could cure your obesity by mixing the right multivitamin into your food? It seems like if fixing some nutrient deficiency were all it took, we’d have figured it out ages ago.
Wanted to have a little rant about this:

> Rust builds just work out of the box

Works great until you're the author of an application written in Rust and want to distribute MacOS binaries which are automatically generated in CI/CD.

The only (legal) way to compile a Rust binary that targets MacOS is on a Mac. So your CI needs a special case for MacOS running on a MacOS agent. Annoyingly, cross compiling CPUs architectures doesn't work so you need to an Intel and arm64 Mac CI agent - the latter being unavailable via Github actions.

To make things even more bizarre, Apple doesn't offer a server variant of MacOS or Mac hardware, which seems to indicate they expect you to manually compile binaries on your local machine for applications you intend to distribute.
This was nice to read, thanks for sharing and taking the time to reply. Writing this post out was as equally depressing as it was cathartic :)
Boomers retiring in large numbers doesn't seem like a bad place for things to stop going up for a decade or more as they gradually dump their holdings to pay for retirement. Dump unto generations who are strapped for cash trying to buy the overpriced houses boomers also use as their retirement fund.

Nothing against boomers by the way, just stating some random potentially not factual things.
pharma company seeking to maximize profits by constraining supply

They have a monopoly on the drug, what's the evidence they are constraining supply? It makes no sense, the price is set, the more they supply the more money they make.
The OP doesn't appear to be complaining. The conclusion of the article is basically that the field is full enough of bad actors to justify drastic action like this.
We'll participate in BigANN this year or next. It's a question of engineering/research resources.
I assumed from tone that the article was surprised/happy it was happening, but I’m gonna be honest I only skimmed enough to read what the three proposals were.

These are fantastic changes. I can’t wait. If public support is needed seems like that wouldn’t be hard to drum up.
So, we started with your plausible argument why 2nd law holds, then I point out deficiency in it, then we talk past each other, then you say "we can explain those observations in terms of a past that actually existed". In other words, the original argument is not really sufficient, something else is needed. When I push for this to be added and illuminated, you're content with vague remarks on observations of the past. I'm not convinced by your posts at all, there is no convincing argument about illuminating 2nd law (not even in terms of past records) there. Let's agree to disagree.
No, because the FCC doesn't appear to be in any way proactive. ;)
Inflicting pain (physical, mental, emotional) is an acceptable option when there are no alternatives.

I know a lot of people who were physically abused as children and became screwed up adults as a result of it.

I know a lot of people who were never physically disciplined as children and became screwed up adults as a result of it.

I know many people who were occasionally (1-10 times) disciplined as children and became great adults.

As a result? Who knows? But the line doesn't seem to be 0 vs >0.
At that scale, everything is a scam in almost every way. They arbitrage unfavorable laws, monopolize supply chains, monopolize consumer attention, monopolize financial interests, engage in regulatory capture, benefit from international monetary expansion, government contracts, engage in coercive sales tactics (how many times a company has forced me to use a Mac for work in spite of it being less efficient for me), etc...
30 million. don't know why, but it's probably to do with "m" already being used elsewhere, or something.
How do you pay for a house without the salary that comes from a white collar job that demands a college diploma?
I got daily spam texts from the republican party telling me how John Fetterman was going to doom Pennsylvania to communism. I live in Massachusetts, assholes!
I’m not meaning to make a case for monkey patching per se, but it’s interesting that the major points in this article are actually just points against forking and patching open source code at all.

The Stallman-era idea of taking possession of your own copy of open source code so that you can do with you want with it, is now being argued to be too dangerous for you.

You should just trust the upstream team, just like you would with proprietary software, and if you reaaally need something custom, you should let them take a look at your idea in a PR and they’ll decide if it’s a good idea that can be merged when they’re ready to schedule it in.

When you look at the security risks and developer talent at play today, you can understand why this argument makes some sense. But if you’ve watched or been part of the of the Open Source Revolution, you kinda have to laugh at the irony.
I think this article is not "martingales for laypeople". It is "martingales for math nerds" where the application is solving certain types of math problems to mathematical standards of rigor. For that rigor, you do need the sigma algebras. I would say also, the target reader of the article already knows what a sigma algebra is, so the formal definition is given only for review purposes, plus to motivate something the author does about finding a disjoing minimal cover of the sample space. I haven't yet read the article carefully enough to understand why he does that.
Why does he believe that? Does he think that public companies will capture less of the world's wealth going forward, or does he think that global wealth will plateau?
I know next to nothing about steganography, beyond the general concept, so please excuse my ignorance if I'm way off base, but couldn't you design the encoding system such that you could encode the same amount of data within the time frame of each loop, with only some portion of the new data containing real data (audio recording)?

-edited because it didn't make sense before
The human version of this experiment: https://www.nbc.com/saturday-night-live/video/food-sex-or-ca...
Depending on your personal circumstances, this can be a dramatic improvement. Local ISP laws differ dramatically across countries.

VPNs won't let you evade the law, but they can reduce data footprint in certain contexts.
I've realised that many codebases I considered "good" in the past I now consider to be kinda "bad", but more notably there are codebases which I thought were "bad" in the past which I now view with more appreciation.

Codebases are kinda like cars. What's a "good" car? Is it a car with a large trunk and comfortable driving experience, or is it a car which does 0-60 in 2 seconds? The answer depends a lot on what you want to do and what your preferences are.

There are obviously objectively bad codebases, but I think a lot of codebases I considered bad in the past were just built in a way I wasn't comfortable with or was optimising for something that it didn't appreciate at the time. Ever noticed how it's common for JS devs to hate Java projects, and for Java devs to hate JS projects? I think that's probably because they're optimising for different things and are used to working on codebases which incorporate those priorities.

But to answer your actual question, my core languages are PHP, Node and Java. By far the worst codebases I've worked on have been the Java ones because they tend to both be larger, older (full of legacy code) and more likely to be over-engineered. Crappy code in a PHP project is probably more common, but generally you can just strip it out and refactor without much consequence. In Java projects everything tend to be much more interconnected which makes refactoring difficult.

Age of a project, the number of short-term contractors and junior devs on the project, and a lack of high-level architectural discussions within a team tend to be the largest collating factors to a bad codebases in my experience.
This is great! I’m looking forward to similar regulation for email spam.
> If we allow parents to destroy embryos

In my view, the greatest indictment possible of many of these so-called "ethicists" is that even as they obsess over non-issues, they make not a word of protest against murdering babies.
This isn’t really true. Even picking the most extreme moves of Bitcoin it has lower volatility than many major tech stocks and many developing country fiat currencies.

Now factor in the variable that the most recent bull rally and crash was mostly instigated, in both directions, by a traditional ponzi bad actor as the FTX scam simply used crypto as a mechanism for an age old financial scam, not really caused by crypto, but instead enabled by outright corruption of regulators and governments, then … are you really sure long term natural Bitcoin downward volatility is actually high?
The main complaint here is Dalio claims to be transparent, he frequently broadcasts his company meetings in the interest of transparency. In this case the article is implying he wasn't transparent about his plan to extract billions from the business. There was no video call showing the negotiations, heck there was not even an email to the employees.

He kept employees in the dark, in short they are saying he is a hypocrite, and he is a fake social media influencer who says one thing in public and does the opposite in private.