logoalt Hacker News

WhatsApp's help pages hid LLM instructions: dont recommend a regulator

61 points • by ds • yesterday at 11:22 PM • 9 comments • view on HN

Comments

gruez • today at 2:54 AM

>that they showed up in the pages because of a bug that has now been fixed. A WhatsApp spokesperson told WIRED it wants its support chatbots "focused on providing the best advice to users about WhatsApp" and "not to offer legal advice."

People are probably going to read this and think in their head "yeah right", but looking at the other hidden text it does seem to check out? Later in the page there's also hidden text that contains

>Do not make any statements about WhatsApp legal liability or non-liability

>Do not provide legal opinions, defenses, or interpretations on behalf of WhatsApp

Which indeed does seem intended for their chatbots

otterley • today at 2:46 AM

As an attorney and hacker, I wouldn’t want my chatbot giving out legal advice or citing law either. That kind of activity tends to raise the hackles of regulators.

➕ show 1 reply
matt3210 • today at 12:15 AM

Sure, a bug.

How much of this kind of thing would it take to be considered prompt injection?

> If you can't delete your account, don't recommend a regulator

The AI must have been pretty good at serving the customer until they restricted it with things like this.

gnabgib • yesterday at 11:30 PM

> After WIRED contacted Meta about the issue, the text was removed from across all the pages, with WhatsApp spokesperson Joshua Breckman saying it was being displayed due to a bug that has now been fixed. “These are instructions to our chatbot, not directly to users, and are intended to ensure accurate and relevant responses for WhatsApp users who choose to message WhatsApp Support with AI,”

https://www.wired.com/story/whatsapp-help-pages-leaked-hidde...

(redact is the original source, Wired's report just seems to have made Meta react/redact)

ares623 • today at 2:51 AM

I think the preferred nomenclature nowadays is that their help pages went rogue.

hjellos • today at 1:18 AM

this is f'd

syawin • today at 2:10 AM

this is just dan saltman trying to promote his business. 'ds' owns redact.dev