Comment by xstof

Comment by xstof 2 days ago

3 replies

Wondering if the ability to use hidden (HTML comment) content in PRs would not remain a nasty issue: especially for open source repos?! Was that fixed?

PufPufPuf a day ago

It's used widely for issue/PR templates, to tell the submitter what info to include. But they could definitely strip it from the Copilot input... at least until they figure out this "prompt injection" thing that I thought modern LLMs were supposed to be immune to.

  • fn-mote a day ago

    > that I thought modern LLMs were supposed to be immune to

    What gave you this idea?

    I thought it was always going to be a feature of LLMs, and the only thing that changes is that it gets harder to do (more circumventions needed), much like exploits in the context of ASLR.

    • PufPufPuf a day ago

      PR releases. Yeah, it was an exaggeration, I know that the mitigations can only go so far.