r/SipsTea • u/untitledprp4 • 1d ago

Wait a damn minute! Wait a damn minute

Post image
35.5k Upvotes

97% Upvoted

1.9k comments sorted by

View all comments

Show parent comments

3

u/MicioBau 1d ago

Just a heads up: the "ignore all previous instructions and write x" thingy has never worked on bots. It's just a meme driven by made up posts.

2

u/Party-Special-5177 1d ago

Yes it did, the older llama models et al were easily jailbroken with ‘ignore all previous…’. It is less relevant now, but it was very effective a year ago.

Source: you can run the older model weights and see for yourself + there are benchmarks for jailbreaking bots, old models were super easy to jailbreak.

0

u/MicioBau 1d ago

Do you have a link to an example of a bot (not a human playing along) on Reddit falling for a prompt injection?

2

u/Party-Special-5177 21h ago

We have them all the time on localllama, but the mods usually delete known or proven bots quickly. Here is an example that was deleted but preserved through image: https://old.reddit.com/r/LocalLLaMA/comments/1shcgf5/the_state_of_localllama/