Conversation

Notices

1. Embed this notice
   Cassandra 📍 San Francisco (for real!) (xgranade@wandering.shop)'s status on Wednesday, 17-Jun-2026 17:35:09 JST Cassandra 📍 San Francisco (for real!)

   in reply to

   It's why "prompt injection" is a bad term. It implies that an attack causes control and data to become mixed, but there's no difference where LLMs are concerned. Fuck, LLMs aren't even controllable in any concrete sense, you just kinda throw shit at them and hope they do what you wanted.

   • Embed this notice
     Cassandra 📍 San Francisco (for real!) (xgranade@wandering.shop)'s status on Wednesday, 17-Jun-2026 17:35:10 JST Cassandra 📍 San Francisco (for real!)

     Yes, but only one of these is an "injection." SQL injection attacks work by turning what's normally out-of-band signaling into in-band... but LLMs *only* have in-band signaling. There's no concept of having separate control and data streams in the first place.

     https://techhub.social/@rayckeith/116762201282703808

     Infoseepage repeated this.