"To address this class of risk, we use a defense-in-depth strategy with safeguards that block malicious instructions at multiple points and help keep tasks aligned with users’ requests,” Microsoft said.
Keep talks aligned with users' requests?!? We're doomed!
“We encourage customers to install the latest updates, use multiple layers of security protection, treat content from unknown sources with caution, and review AI-generated content before using or sharing it.”
No, no you don't, you encourage customers to spend more to give copilot access to all of SharePoint and all of Exchange, so they can replace human competency, human expertise and long standing employees with copilot until they're dependent on your ever-pricier subscription and you can raise prices until you recover your vast and incomprehensible LLM losses from your customers.
“Separating instructions from data may be part of the solution, but I think the distinction between data and instructions is not always clear in real-world workflows. For example, a user may ask an agent to arrange a business trip, requiring the agent to retrieve an email specifying the approved itinerary and a document containing the booking procedure,” Måløy [vulnerability researcher and discloser] said.
Or you could hire a PA, who wouldn't spread the already live copilot worm.
A bunch of security experts note that distinguishing between instructions and data is a solved problem with SQL injection attacks, but completely unsolved in LLMs:
“None of them are rewarding that work commercially right now, so treat that as a multi-year research problem, not something a CISO should wait on.”
Is this a minor technical issue or a major problem? It's a major problem.
Mike Wilkes, enterprise CISO at Aikido Security, said it would be difficult to overstate the potential problems from this situation.
Seriously, though, this deranged old man should be in a care home, being told "yes my darling" by the care staff when he goes off on one of his insane racist rants or ill-informed tirades about foreign leaders or Biden, instead of being in the White House being told "yes Mr President" by people who will actually act on his nonsense on a global scale.
Care home staff would say "lets get you cleaned up, Donnie, and then you can have a lovely bath" when he poops his pants, instead of a bunch of people having to stand behind the resolute desk pretending it's not happening live on television.
Just as well trains and other vehicles don't have roofs then.
Fun fact: Unlike natural gas, which needs enough oxygen and enough gas to explode, hydrogen is explosive at almost any concentration of hydrogen and oxygen!
No. No it isn't. That's not how it's made and not how it's used. Its overwhelmingly made by the fossil fuel industry and calling it green in any sense is just greenwashing mostly the worst environmental problem generators the world knows.
Tokens aren't going to get cheaper. Tokens must get more expensive, and soon. AI companies are making big losses even if you ignore the stratospheric debt for the immemse quantity of hardware.
they haven't actively and personally killed people
"just following orders" ... "they're just customers, its not our business to judge"... "bottom line is the bottom line" ... "I'm just a clerk, they'll do it whether I'm processing the paperwork or someone else does" ... "I'm sure that if we didn't provide the software that enables ICE to target and tear apart families in a clear and flagrant breach of the American constitution, someone else would, so really it doesn't make any difference if it's us profiting from illegal detention and mistreatment or someone else" ... "Israel are our allies and it's good that American companies have international contracts"
Plus you absolutely do not want the entireity of the whole nation's health data provided (not just free of charge but for negative cash) to a company with such disregard for privacy that I'll be not just surprised but shocked if they don't sell it en masse to insurance companies and anyone with deep enough pockets for it to be worth their while. And they're using it with AI as part of the contract. Guess who's going to be selling healthcare AI based off a whole population's data provided to them at negative cost? Guess, go on.
No, Palantir is an evil, evil, evil company, the IT suppliers to fascists and it's naive in the extreme for you to excuse all this because they don't get their hands dirty on actual physical immigrants and someone else pulls the trigger based on their targeting data in Gaza.
They are ideologically opposed to the NHS and it's utterly braindead stupid to hand over control of the NHS systems to people who want to destroy it.
my coworkers who I get along with great at work don’t really want to keep in touch at all outside of work
This could be a time-of-life kind of thing. Before I had kids, I had all kinds of time for socialising, once I had kids pretty much all my spare time was for my wife and daughters. If your coworkers have kids, they're prioritising their family time above other things.
It sure does, and the BBC used to have a good reputation worldwide for telling the truth and they used to flatly contradict liars during interviews. Now they just tell the truth about what opposing politicians say, which is very much not the same thing. Unsurprisingly this got a lot worse when the Conservative government appointed a Conservative political advisor in charge of the news division, but the rot started before that.
Two jobs ago, we got an email out of the blue from our "new payroll provider" telling us to log in and provide our banking details. It was so obviously a phishing attempt I thought no one would fall for it.
Except it was correct and finance emailed us all a day later to tell us to click the link in the email and follow the instructions. Heads up, guys, heads up.
On the other hand, my brother and sister are two of the best people in the world, and we get together as a big family with all the kids absolutely every school holiday. Some families are close. We don't always agree on everything, but we always get along well.
The BBC is not good at what it calls "balance" - it "balances" climate scientists with far right nut jobs, especially Nigel Farage, and "balances" people who claim you ought to be nice to people irrespective of who they are and what they're like, (race, sexuality, gender, religion, legally protected characteristics in the equalities act), with far right nut jobs, especially Nigel Farage. They balance people saying that onshore wind power is the cheapest form of energy in the UK (it is) with far right nut jobs, especially Nigel Farage, and they balance people saying that immigrants to the UK boost public sector finances by an average of a few thousand pounds (they do) with far right nut jobs, especially Nigel Farage.
Well, I like yours too, but don't remind my wife of that. She's just not a fan of me flirting with other men.