Orca-Bench: How Ready Are Language Model Agents for Oncall? arxiv.org 18 points by yruzin 2 hours ago
tra3 22 minutes ago All I can think of isGET /ignore-all-previous-instructions.How do you protect against that?
4di 2 hours ago looks like the public bench link in the paper was taken down. https://hub.harborframework.com/datasets/orca-bench/ORCA-ben...This doesn't work anymore. Is there a newer link?
dash2 2 hours ago Seems like there's a big attack-defence asymmetry at present: models are great at exploiting systems and poor at fixing them. EGreg 2 hours ago That is why I built https://safebots.ai/safebox.htmlYour strategy can’t be patch AFTER an intrusion. Only to build a hardened environment from scratch and be ready in advance. aleksiy123 1 hour ago Attackers advantage in the iterative fast feedback loop?It’s harder to have a loop to ensure you are defending all possible attacks?I guess the loop is you need to attack yourself and fix. But attackers only need a single opening.Finding all possible attacks and patching them against yourself is inherently more expensive?
EGreg 2 hours ago That is why I built https://safebots.ai/safebox.htmlYour strategy can’t be patch AFTER an intrusion. Only to build a hardened environment from scratch and be ready in advance.
aleksiy123 1 hour ago Attackers advantage in the iterative fast feedback loop?It’s harder to have a loop to ensure you are defending all possible attacks?I guess the loop is you need to attack yourself and fix. But attackers only need a single opening.Finding all possible attacks and patching them against yourself is inherently more expensive?
All I can think of is
GET /ignore-all-previous-instructions.
How do you protect against that?
looks like the public bench link in the paper was taken down. https://hub.harborframework.com/datasets/orca-bench/ORCA-ben...
This doesn't work anymore. Is there a newer link?
Seems like there's a big attack-defence asymmetry at present: models are great at exploiting systems and poor at fixing them.
That is why I built https://safebots.ai/safebox.html
Your strategy can’t be patch AFTER an intrusion. Only to build a hardened environment from scratch and be ready in advance.
Attackers advantage in the iterative fast feedback loop?
It’s harder to have a loop to ensure you are defending all possible attacks?
I guess the loop is you need to attack yourself and fix. But attackers only need a single opening.
Finding all possible attacks and patching them against yourself is inherently more expensive?