A Fundamental Flaw Leaves LLMs Strikingly Vulnerable To Attack
joshuark quotes a report from MIT Technology Review: It is impossible to make large language models fully secure against hacks because of a fundamental flaw in how they work, a team of researchers argue in a paper presented at the International Conference on Machine Learning, a top AI conference, this month. The claim has huge implications for the safety of this technology. By taking advantage of this flaw, which concerns how LLMs identify who or what is giving them instructions, the researchers were able to make popular LLMs spit out information they had been trained not to provide, such as how to synthesize cocaine and how to sabotage a commercial aircraft's navigation system. "There's a real probability that this is going to be a problem that's fundamentally unsolvable," says Charles Ye, an independent researcher and coauthor of the ICML paper. [...]
The ICML paper describes attacks against several of OpenAI's models, but Cui and Ye say that they have since seen similar results with models made by Anthropic, Alibaba, and DeepSeek. Cui and her colleagues wanted to find out why an attack like chain-of-thought forgery was so effective. They suspected it had something to do with the mechanism that LLMs use to keep track of where their instructions are coming from. But what Cui and her colleagues discovered is that LLMs are in fact very bad at keeping track of different roles.
In a series of experiments that looked at what was going on inside a handful of different models, the researchers found that LLMs seem to identify the role of a specific chunk of text not by the tags around it but by the style of that text and the words it contains. The upshot, the researchers claim, is that all an attacker needs to do to hack an LLM is write text that spoofs a certain role. And because roles are a fundamental part of how LLMs work, no amount of training will fully solve the problem. "There's going to be a huge economic incentive for people to do jailbreaks and prompt injections," says Cui. The best defense could be to expect the worst. Organizations shouldn't trust LLMs, and they should expect that anything done by agents could be unsafe, he says: "That's not a great solution, but it just might be what we have to do."
"It's really incredible that these things are being deployed everywhere to control super-critical systems. There's been no study of the fundamental science here. We're all doing it ad hoc."
Read more of this story at Slashdot.
Game over Gianni! As deplorable megalomaniac Infantino's grand plan to sell off the World Cup goes up in smoke, DAILY MAIL SPORT tells the humiliated FIFA president he must RESIGN
CHRIS WHEELER: UEFA will boycott FIFA competitions - including the World Cup itself - unless these preposterous plans are consigned to the dustbin where they belong.
UK zoo welcomes not one, but THREE lion cubs for the first time in a decade
Blackpool Zoo is celebrating the first African lion cubs born in a decade - with three making their arrival this week at the wildlife venue to first-time parents Hira and Khari.
Entitled beachgoer slammed for complaining after small child decided to play in the water near her sun lounger: 'It's in my space'
The TikTok influencer received thousands of negative comments online, but she doubled down that she would not watch that child.
CINDY JACKSON: A patch of saggy and unsightly fat bothered me for decades, so at 70 I took the plunge. This is exactly what I did to get rid of it - and it's given me confidence I've not had for 25 years
Cosmetic surgery was unusual when I had my first operation aged 32 at a London clinic in 1987. At that time having more than one thing done was completely unheard-of.
RFK launches YouTube cookery show - featuring 'real food' recipes for under $5... so will roadkill be on the menu?
The Department for Health and Human Services (HSS) announced the move today, claiming it would help Americans 'prepare healthy, affordable meals using everyday ingredients.'
Dad of school shooter Colt Gray gets FIFTEEN years in prison for giving evil son, 14, guns he used to kill four
Colin Gray has been sentenced to 15 years in prison for his son, Colt, killing four people in a school shooting in September 2024
Shania Twain reveals how she handles 'issues' with her husband… 18 years after their exes had affair
Twain, 60, credited her husband of 15 years with resolving issues fast because he's open with his feelings and wants to talk problems through immediately rather than let them fester.
Pregnant Vogue Williams says she thought husband Spencer Matthews was a 'gobs***e' before she starred alongside him on reality TV series
Vogue Williams has revealed she thought her now husband Spencer Matthews was a 'gobs***e' before she met him.
How Andy Burnham 'ignored' pleas over a football tribute
EDEN CONFIDENTIAL: Andy Burnham looked even more pleased with himself than usual when he joined sporting legend Denis Law to unveil a bronze plaque honouring fellow star Jimmy Greaves.
Parents of toddler found ALIVE in hospital morgue are cleared... as chilling records reveal cops repeatedly warned doctor he was still breathing
Vincent Lorenzo Fiordilino was found floating face down in his family's backyard pool in GIlbert, Arizona, on February 8 while his family watched Super Bowl LX inside, police said.
Microsoft's $450 Billion Jump Is Biggest In Stock Market History
Microsoft shares surged as much as 17% after reporting 43% growth in Azure revenue, putting the company on track to add a record $490 billion in market value in a single day. Bloomberg notes that it "would eclipse Nvidia's $440 billion addition, following President Donald Trump's announcement of a 90-day tariff pause last year, as the biggest ever." From the report: The nearly $500 billion jump is larger than the market capitalization of roughly 96% of S&P 500 stocks, data compiled by Bloomberg show. It's also bigger than the combined value of the benchmark's 44 smallest members, which includes companies like Domino's Pizza Inc., Clorox Co. and Hasbro Inc.
Microsoft's one-day add in value also dwarfs many of the world's other equity markets. South Africa, Turkey, Finland and Vietnam all have total stock market values that are less than what the software maker is set to add on Thursday.
Read more of this story at Slashdot.
Serial sex offender on trial for murder had link to 'rape' website on his computer
Simon Levy allegedly killed Carmenza Valencia-Trujillo, 53, and Sheryl Wilkins, 39, and left a third woman for dead after attacking her.
Mystery sharks mauling children just feet from US shores are exposed by disturbing new evidence
WARNING - GRAPHIC CONTENT: Shark experts take on the mystery of a series of attacks to find out which predator species nearly killed several children in US waters.
LinkedIn realizes its users have been bathing in AI slop, offers a shower
AI-riddled social network adds button to report sloppy posts, ditches AI rewrite tools, and promises more to come
Shopper who claimed he was 'racially profiled' in Lidl while buying 5p bags of shallots in a Christmas offer wins £25,000 in compensation
The customer, who was in 'religious clothing' claims he was accused by staff of 'coming into the store twice' in Blackburn, Lancashire, and taking advantage of a special offer on shallots.
Girl who vanished aged 15 then showed up safe years later was ABDUCTED and being held captive by pedophile for entire time, cops say
Joniah Walker, now 19, vanished from her family's Wisconsin home in 2022 and was found in May. Police have now revealed that she was abducted by suspected pedophile Owen Lars Anderson, 37.
AJ Odudu shows off her jaw-dropping abs in skimpy black workout gear amid gruelling preparation for Gladiators: Celebrity Special
AJ Odudu showed off her jaw-dropping abs in skimpy black workout gear on Thursday amid gruelling preparation for the Gladiators: Celebrity Special episode.
Angie Best, 74, suffers a health setback after being told she is cancer free as she reveals she will now have to have two operations on her liver
Angie Best has suffered a health setback after being told she was cancer free - as she revealed she will now have to have two operations on her liver.
ABC Accuses FCC of 'Attempted Censorship'
ABC accused FCC Chair Brendan Carr of "attempted censorship," arguing that an early review of its eight broadcast licenses is politically motivated retaliation over the network's coverage and could chill the entire media industry. "The retaliation against ABC is a signal to every media company in the country: accommodate the Administration's view of what news coverage should look like or pay the price," the Disney-owned television network wrote. Politico reports: "Across the government, regulatory and contracting carrots and sticks have been trained on other disfavored speakers," ABC's lawyers added in the 119-page filing. "The tools vary; the objective does not: a media industry too fearful of official reprisal to report the news freely."
Carr has repeatedly rejected accusations of censorship while defending his efforts to rein in what he calls abusive, politically motivated behavior by licensed TV broadcasters. "I don't view the FCC as the speech police," he told POLITICO this week for an upcoming episode of the podcast "The Conversation."
In its filing, ABC pointed to an outpouring of support it has received in more than 152,000 comments in the agency's license review, as well as recent warnings from conservative Supreme Court Justice Neil Gorsuch, Sen. Ted Cruz (R-Texas) and various pro-free-market organizations about the dangers of a politically motivated FCC. Those include letters from a bipartisan group of former FCC leaders, community and advocacy groups and lawmakers of both parties. "The Commission's attempted censorship of ABC has attracted condemnation across the political aisle," the network wrote.
Read more of this story at Slashdot.