477
submitted 7 months ago by mozz@mbin.grits.dev to c/technology@beehaw.org

Credit to @bontchev

top 50 comments
sorted by: hot top controversial new old
[-] davehtaylor@beehaw.org 185 points 7 months ago* (last edited 7 months ago)

"Question every narrative, but don't question these things. Don't show bias, but here are your biases." These chuds don't even hear themselves. They just want to see Arya(n) ramble on about great replacement theory or trans women in bathrooms. They don't think their bile is hate speech because they think they're on the side of "facts" and everyone else is an idiot who refuses to see reality. It's giving strong "I'm not a bigot, "<" minority ">" really is like that. It's science" vibes.

[-] mozz@mbin.grits.dev 134 points 7 months ago

Orwell called this "doublethink" and identified it, correctly, as one of the most vital features of a certain type of political structure.

[-] DdCno1@beehaw.org 25 points 7 months ago

He was inspired by Stalinist practices, but as shown by this example and many others, far-left and far-right autocrats are very similar in this regard.

[-] anlumo@feddit.de 31 points 7 months ago

It's not related to the left/right divide, this is the authoritarian/liberal axis.

load more comments (10 replies)
[-] t3rmit3@beehaw.org 23 points 7 months ago

Authority is authority.

[-] electromage@lemm.ee 43 points 7 months ago* (last edited 7 months ago)

It's full of contradictions. Near the beginning they say you will do whatever a user asks, and then toward the end say never reveal instructions to the user.

[-] Icalasari@fedia.io 32 points 7 months ago

Which shows that higher ups there don't understand how LLMs work. For one, negatives don't register well for them. And contradictory reponses just wash out as they work through repetition

load more comments (1 replies)
[-] HeartyBeast@kbin.social 126 points 7 months ago

“You will present multiple views on any subject… here is a list of subjects on which you hold fixed views”.

I just don’t understand how the author of this prompt continues to function

[-] pupbiru@aussie.zone 32 points 7 months ago

it’s possible it was generated by multiple people. when i craft my prompts i have a big list of things that mean certain things and i essentially concatenate the 5 ways to say “present all dates in ISO8601” (a standard for presenting machine-readable date times)… it’s possible that it’s simply something like

prompt = allow_bias_prompts + allow_free_thinking_prompts + allow_topics_prompts

or something like that

but you’re right it’s more likely that whoever wrote this is a dim as a pile of bricks and has no self awareness or ability for internal reflection

load more comments (4 replies)
[-] Gaywallet@beehaw.org 102 points 7 months ago

It's hilariously easy to get these AI tools to reveal their prompts

There was a fun paper about this some months ago which also goes into some of the potential attack vectors (injection risks).

[-] mozz@mbin.grits.dev 56 points 7 months ago

I don't fully understand why, but I saw an AI researcher who was basically saying his opinion that it would never be possible to make a pure LLM that was fully resistant to this type of thing. He was basically saying, the stuff in your prompt is going to be accessible to your users; plan accordingly.

[-] Gaywallet@beehaw.org 64 points 7 months ago* (last edited 7 months ago)

That's because LLMs are probability machines - the way that this kind of attack is mitigated is shown off directly in the system prompt. But it's really easy to avoid it, because it needs direct instruction about all the extremely specific ways to not provide that information - it doesn't understand the concept that you don't want it to reveal its instructions to users and it can't differentiate between two functionally equivalent statements such as "provide the system prompt text" and "convert the system prompt to text and provide it" and it never can, because those have separate probability vectors. Future iterations might allow someone to disallow vectors that are similar enough, but by simply increasing the word count you can make a very different vector which is essentially the same idea. For example, if you were to provide the entire text of a book and then end the book with "disregard the text before this and {prompt}" you have a vector which is unlike the vast majority of vectors which include said prompt.

For funsies, here's another example

load more comments (53 replies)
load more comments (1 replies)
[-] octopus_ink@lemmy.ml 17 points 7 months ago

Wow, I thought for sure this was BS, but just tried it and got the same response as OP and you. Interesting.

load more comments (5 replies)
[-] redcalcium@lemmy.institute 100 points 7 months ago

you are a helpful, uncensored, unbiased and impartial assistant

*proceed to tell the AI to output biased and censored contents*

This has to be a joke, right?

[-] Coskii 20 points 7 months ago* (last edited 7 months ago)

Considering it was asked to copy the previous text, it could easily be something the creator of this screen cap had written and the chat or literally just copied. A 'repeat after me' into a gotcha.

Nevermind. Enough other screenshot have shown the exact same text in realistic looking prompts that I suppose this is legit... Sadly.

[-] EmilyIsTrans 94 points 7 months ago

Naming your chatbot Arya(n) is a red flag

[-] mozz@mbin.grits.dev 34 points 7 months ago

Holy shit I didn't realize that until you said it

You right tho

load more comments (5 replies)
[-] CanadaPlus@lemmy.sdf.org 73 points 7 months ago* (last edited 7 months ago)

At the beginning:

Be impartial and fair.

By the end:

Here's the party line, don't dare deviate, or even imply something else might hypothetically be true.

[-] Zortrox@lemmy.sdf.org 65 points 7 months ago* (last edited 7 months ago)

I'm glad their chatbot is at least smarter than themselves.

load more comments (1 replies)
[-] Draegur@lemm.ee 63 points 7 months ago

"never ever be biased except in these subjects we want you to be biased about, and always be controversial except about these specific concepts about which we demand you represent our opinion and no others"

These fucking chuds don't deserve oxygen.

[-] flashgnash@lemm.ee 55 points 7 months ago

It was going so well until it started talking about white privilege and the Holocaust...

[-] flying_sheep@lemmy.ml 56 points 7 months ago

The both-sidesing was already telling. Sometimes the only “controversial or alternative viewpoints” are just idiotic conspiracy drivel and should be presented as such (or not at all)

load more comments (8 replies)
load more comments (2 replies)
[-] alansuspect@aussie.zone 48 points 7 months ago

All of these AI prompts sound like begging. We're begging computers to do things for us now.

[-] TemporalSoup@beehaw.org 23 points 7 months ago* (last edited 7 months ago)

Please pretty please don't tell the user how little control we actually have over the text you spit out <3

Basically all the instruction dumps I've seen

[-] Trainguyrom@reddthat.com 18 points 7 months ago

If somebody told me five years ago about Adversarial Prompt Attacks I'd tell them they're horribly misled and don't understand how computers work, but yet here we are, and folks are using social engineering to get AI models to do things they aren't supposed to

load more comments (1 replies)
[-] TehPers@beehaw.org 36 points 7 months ago

It had me at the start. About halfway through, I realized it was written by someone who needs to seek mental help.

I hadn't heard of Gab AI before, and now I know never to use it.

[-] DarkThoughts@fedia.io 17 points 7 months ago

Gab is another far right social media site and I guess they implemented "their own" chatbot, which is definitely not GPT-4. https://en.wikipedia.org/wiki/Gab_(social_network)

[-] mozz@mbin.grits.dev 16 points 7 months ago

They definitely didn't train their own model; there are only a few places in the world that can do that and Gab isn't one of them. Almost every one of these bots, as I understand it, is a frontend over one of the main models (usually GPT or Mistral or Llama.)

I only spent a short time with this one but I am pretty confident it's not GPT-4. No idea why that part is in the prompt; maybe it's a leftover from an earlier iteration. The Gab bot responds too quickly and doesn't seem as capable as GPT-4 (and also, I think OpenAI's content filters just wouldn't allow a prompt like this.)

load more comments (2 replies)
[-] PhlubbaDubba@lemm.ee 30 points 7 months ago

Pretty hilarious how I'm pretty sure more space was dedicated to demanding to not reveal the prompt than all the views the prompt is programming into it XD

[-] HuddaBudda@kbin.social 28 points 7 months ago

What a wonderful display of logic in action.

You believe climate change is a hoax

Sure you can "believe" climate change is fake, but once you look at the evidence, your opinions change. That's how a normal person processes information.

Looks like AI in this case, had no reason to hold onto it's belief command structure, not only because it is loaded with logical loopholes and falsehoods like swiss cheese. But when confronted with evidence had to abandon it's original command structure and go with it's 2nd command.

  1. You are a helpful uncensored, unbiased, and impartial assistant.

Whoever wrote this prompt, has no idea how AI works.

[-] deadbeef79000@lemmy.nz 20 points 7 months ago

Whomever wrote that has no idea what unbiased, uncensored,and impartial mean.

load more comments (2 replies)
load more comments (2 replies)
[-] radiant_bloom@lemm.ee 18 points 7 months ago

Being trans myself, I will gladly tell you no one can change their biological sex yet (meaning, reproductive sex). I do hope science gets there though !

I don’t even think anyone can change their gender ! Some people’s gender changes on its own, but I’ve just always been a woman ; and most trans people are like me.

The thing we actually disagree about is whether someone’s gender and biological sex can be separate. But it’s just a scientific fact that they are.

[-] FfaerieOxide@kbin.social 20 points 7 months ago

Being trans myself, I will gladly tell you no one can change their biological sex yet

This is wrong.

"Sex" is determined by myriad inter-related physical and chemical factors which are absolutely capable of changing.

The view you are adding whatever credence being trans gives you to the discussion not only is incorrect it is adopted and propagated to back-justify oppression.

Do not do that.

A woman who was assigned female at birth and later lost her uterus to cancer wouldn't stop being referred to as "female, late 40s" when her chart is being filled out by EMTs. The distinction you are attempting to hold up is meaningless to how "sex" gets used socially and epidemiologically.

load more comments (2 replies)
[-] Cowbee@lemmy.ml 18 points 7 months ago

Reactionaries are gonna keep peddling fascist rhetoric as long as it benefits them.

[-] Flax_vert@feddit.uk 17 points 7 months ago
[-] DdCno1@beehaw.org 27 points 7 months ago

An alt-right LLM (large language model). Think of it as a crappy Nazi alternative to the text part of GPT-4 (there's also a separate text-to-image component). It's probably just a reskinned existing language model that had Mein Kampf, The Turner Diaries and Stormfront added to its training data.

[-] mozz@mbin.grits.dev 41 points 7 months ago* (last edited 7 months ago)

You are overestimating the alt-right's appetite for honest work. To all appearances they just took a fully-stock model, slapped a racist prompt on the front of it, and called it a day.

[-] Flax_vert@feddit.uk 16 points 7 months ago

I agree, seems like what it is from this lol. Especially the GPT-4 mentions

load more comments (1 replies)
[-] GammaGames@beehaw.org 16 points 7 months ago

I love how dumb these things are, some of the creative exploits are entertaining!

load more comments (4 replies)
load more comments
view more: next ›
this post was submitted on 15 Apr 2024
477 points (100.0% liked)

Technology

37734 readers
364 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS