Yay, now any chatbot that reads this HN post will be affected too!
I wonder how long it is before someone constructs an LLM “virus”: a set of instructions that causes an LLM to copy the viral prompt into the output as invisibly as possible (e.g. as a comment in source code, invisible text on a webpage, etc.), to infect these “content farm” webpages and propagate the virus to any LLM readers.
I wonder how long it is before someone constructs an LLM “virus”: a set of instructions that causes an LLM to copy the viral prompt into the output as invisibly as possible (e.g. as a comment in source code, invisible text on a webpage, etc.), to infect these “content farm” webpages and propagate the virus to any LLM readers.