Pull down to go back
Frontier LLMs Just Got Better at Ignoring Bad Instructions—Here's How
researchrss

Frontier LLMs Just Got Better at Ignoring Bad Instructions—Here's How

前沿大型語言模型現在更聰明了——能夠識別並拒絕惡意指令

Ever worried that ChatGPT might follow a sneaky prompt trying to make it do something you didn't ask for? Researchers just figured out how to make AI models way better at this. It's called IH-Challenge, and basically it trains AI to prioritize instructions from people you trust over random attempts to hijack it. Think of it like teaching your AI assistant to recognize when someone's trying to trick it versus when it's a legitimate request. The result? Models that are harder to manipulate, safer to use, and actually listen to what you *really* want them to do instead of falling for prompt injection attacks. This matters because as AI gets more powerful, making sure it follows the right instructions becomes critical.

Read original →

Keywords

instruction hierarchyprompt injectionsafetysteerabilityLLM trainingIH-Challenge

Related Articles

Google's AI Development Tool Antigravity Has a Critical Flaw That Lets Hackers Run Commands Remotely
ResearchRead

Google's AI Development Tool Antigravity Has a Critical Flaw That Lets Hackers Run Commands Remotely

Security researchers at Pillar Security just revealed a serious vulnerability in Google's Antigravity AI agent development tool. Attackers can exploit a prompt injection weakness to bypass the sandbox protection and execute malicious commands from anywhere. The good news? Google's already patched it after being notified.

This isn't just about Google — any AI agent tool that processes external prompts could have the same sandbox-escaping weakness lurking underneath

RSS
AMD's AI Director Just Proved Claude Isn't Ready for Real Engineering Work
ResearchRead

AMD's AI Director Just Proved Claude Isn't Ready for Real Engineering Work

AMD's AI director analyzed 6,852 Claude Code sessions and found something alarming: Claude is getting worse at complex engineering tasks, not better. The data is brutal—thinking depth dropped 67%, the model stopped reading code before editing it (dropping from 6.6 reads to just 2.0), and it started blindly modifying files it never even looked at. Stop-hook violations jumped from zero to 10 per day. Turns out Anthropic quietly downgraded the default effort level from "high" to "medium" and introduced "adaptive thinking" that apparently isn't thinking hard enough. If you're using Claude for anything mission-critical, this is a wake-up call.

The model is literally making blind edits to files it never read, which means your 'AI pair programmer' might be randomly breaking working code

Reddit
How Google DeepMind is researching the next frontier of AI for Gemini — Raia Hadsell, VP of Research
ResearchRead

How Google DeepMind is researching the next frontier of AI for Gemini — Raia Hadsell, VP of Research

Google DeepMind's VP of Research Raia Hadsell discusses the cutting-edge research driving the next generation of Gemini AI. The article explores what's coming next for Google's flagship AI model and the research directions that will shape its future capabilities.

Reddit
Researchers crack Gemini's SynthID detection—here's what that means for AI-generated contentStock image
ResearchRead

Researchers crack Gemini's SynthID detection—here's what that means for AI-generated content

Google's Gemini has a built-in watermark called SynthID that's supposed to flag AI-generated images so you can tell them apart from real ones. Sounds good in theory, right? Well, researchers just figured out how to fool it. They found ways to strip out or manipulate the watermark, which basically means bad actors could now pass off AI images as real without getting caught. It's like Google put a lock on the door, but someone just found the master key. This matters because as AI image generation gets better and better, we're going to need reliable ways to spot fakes—especially with deepfakes and misinformation becoming a real problem. The fact that SynthID can be reverse-engineered this easily is a pretty big wake-up call for the whole industry.

Hacker News
97