Mauve 👁💜 @mauve@mastodon.mauve.moe

The 6th example I've seen of the same prompt injection attack against LLM chatbots: https://embracethered.com/blog/posts/2024/github-copilot-chat-prompt-injection-data-exfiltration/

The attack involves tricking an LLM chatbot with access to both private and untrusted data to embed a Markdown image with a URL to an attacker's server where that URL leaks private data extracted from the session.

We've now seen this same attack in ChatGPT itself, Google Bard, Writer.com, Amazon Q and Google NotebookLM (all now fixed, thankfully).

My collection: https://simonwillison.net/tags/markdownexfiltration/

Have you ever had an experience like, you're walking down the street, there's a piece of litter, and you kind of like, kick it by accident, your foot grazes it, and suddenly you feel a compulsion to pick it up and put it in a trash can? This is litter, it wasn't your problem, but then you accidentally touched it and it Became your problem, somehow the act of touching it tagged it as "yours" and now the superego says you're obligated to deal with it?

That's what open source contribution is like

If you see a new youTube channel with a plain sounding name like "NatureView" or "BrightScience" etc. and there is what looks like a tempting video on a specific education topic "Most Active Volcanoes" or "Incredible Carnivorous Plants"

There is a 50/50 chance it will be a generated voice with stock footage and a script written by GPT.

I am now avoiding videos if I don't recognize the creator, or don't see signs it was made by a person.

So much spam!

Believe it or not, there is still plenty of interesting and exciting work to talk about that doesn't involve LLMs.

Cryptographers contributing to the IETF is working to standardize FROST, a two-round threshold signature algorithm based on Schnorr proofs, which is backwards compatible with Ed25519.

This means it will soon be possible to generate Ed25519 signatures from, for example, 4-of-7 shares held by independent parties. And the verifier doesn't need to do anything different; it's just an Ed25519 signature to them.

That's cool as fuck.

There's little-to-no hype about it.

i swear so many problems in society are just the
#knowledgeProblem over and over again.

like the thing that so much software is designed to be addictive is yet another instance of central planning run amok.

instead of software being created in an exchange between devs and users big tech has big dumb metrics (engagement) to maximize, because that's what you need to rely on if you suffocate bottom-up discovery processes with your big dumb oligopoly.

Pixel art flame tutorial 🔥

#PixelArt #art #MastoArt

you can play golf on a sharp pocket calculator from the 80s

but i cannot edit video and have a web browser open at the same time on a system with 8G RAM

we need to start over again. everything has gone wrong.

two of the best feelings when programming are:
1. figuring out a really clever way to solve a problem
2. figuring out a really stupid way to solve a problem

🧍🚶

i'm really excited to show https://compost.party to the world! it's a web server running on an old, broken phone, getting energy from the sun using one of those portable solar chargers that you may also have lying around.

it's a real oddity and a real beauty