Category: Mix

DOM Invader and the case of direct eval vs indirect eval | Blog
25
Sep
2023

DOM Invader and the case of direct eval vs indirect eval | Blog

Gareth Heyes | 25 September 2023 at 14:00 UTC What is DOM Invader? DOM Invader is a browser extension that…

Turbocharge ChatGPT With A Metaprompter · Joseph Thacker
24
Sep
2023

Turbocharge ChatGPT With A Metaprompter · Joseph Thacker

Over the past few weeks, I’ve been exploring the capabilities of ChatGPT on both GPT-3.5 and GPT-4. They’re incredibly powerful…

Prompt Injection Attacks and Mitigations · Joseph Thacker
24
Sep
2023

Prompt Injection Attacks and Mitigations · Joseph Thacker

I recently participated as a panelist on a HackerOne press panel where there was a lot of discussion about AI…

Explaining the Best Prompt Injection Proof of Concept · rez0
24
Sep
2023

Explaining the Best Prompt Injection Proof of Concept · Joseph Thacker

I’ve been theorizing and researching prompt injection attacks. They’ve mostly been theoretical, though. In this post, I’m going to break…

A New Take on an Old Saying · rez0
24
Sep
2023

A New Take on an Old Saying · Joseph Thacker

The saying “You’re the average of the five people spend the most time with” is still true, but has been…

Can LLMs create new things? · rez0
24
Sep
2023

Can LLMs Create New Things? · Joseph Thacker

Is generative AI output a novel creation or simple imitation? I’ve heard many people say that LLMs (and generative AI…

Be a Hype Man For Your Friends · rez0
24
Sep
2023

Be a Hype Man For Your Friends · Joseph Thacker

Explaining the benefits of hyping up your friends’ ideas. Amplify (ˈam·pləˌfī) verb: To make larger, greater, or stronger; enlarge; extend….

The Prompt Injection Primer · rez0
24
Sep
2023

The Prompt Injection Primer · Joseph Thacker

Bringing clarity to questions about Prompt Injection Security Everyone loves talking about prompt injection, but the real impact to an…

Yes. LLMs can create convincingly human output. · rez0
24
Sep
2023

Yes. LLMs can create convincingly human output. · Joseph Thacker

Why LLMs don’t sound human, strategies to fix it, and real examples. I’ve talked to a lot of people that…

More Tips and Scripts from a Hacker Dad · rez0
24
Sep
2023

More Tips and Scripts from a Hacker Dad · Joseph Thacker

As I mentioned in my last parenting post, I’m a hacker and bug bounty hunter. So, I spend a lot…

vim + llm = 🔥
24
Sep
2023

vim + llm = 🔥

If you don’t use vi/vim, you might not find this post very practical, but maybe it’ll convince you to try…

API9:2023 Improper Inventory Management
23
Sep
2023

API9:2023 Improper Inventory Management

Welcome to the 10th post in our weekly series on the new 2023 OWASP API Security Top-10 list, with a…