I've recently talked to people at Anthropic who are very confident that they have effectively solved the prompt injection risks that cause lethal trifecta attacks with their latest models.
The open challenge is how to prove it!
I’ll believe them when they put the lethal trifecta with their own skin in the game
Isn't prompt injection just one facet of the trifecta? Like, I just don't know how it's remotely possible to have a non-deterministic block box ever deterministically know whether your credit card has been compromised or not. Even if you were hacked, how would you even know?
They can’t solve the model being a complete idiot though.
oh, it's very easy to prove; just let the models and agents do the IPO for them.
[dead]
Somehow this does not fill me with confidence. I think I will keep paying my bills manually, thanks but no thanks.