logoalt Hacker News

crotetoday at 4:04 PM2 repliesview on HN

No, you're still just one clever prompt away from getting pwned. It's like trying to solve SQL injection by attempting to use an ever-increasing pile of regexes for "input validation", rather than just getting rid of string concatenation and using prepared statements instead.


Replies

Timwitoday at 6:47 PM

What SQL system have you been using where just escaping a string requires “an ever-increasing pile of regexes”?

cowlbytoday at 5:05 PM

Im curious to see what that would look like. It’s like inception, how many levels deep can you create a prompt that hijacks all the way up.

show 1 reply