Live data from Hacker News

GitHub Copilot Chat Leaked Prompt

twitter.com

61–70 of 628 posts

Re: GitHub Copilot Chat Leaked Prompt

#61
post #53

Earlier quoted context omitted.

There’s no such thing as an unbiased world view. We’re not “removing bias”, we’re just forcing the responses to align with what we think is virtuous.

Rather than the impossible utopia (dystopia?) of an unbiased model, we need lots of different models, all fine-tuned to reflect different biases, and then users can choose which biases they prefer.

There are obviously biases that we should not automate. Moral relativism is intellectually bankrupt.

Re: GitHub Copilot Chat Leaked Prompt

#63
post #43

Earlier quoted context omitted.

Subjectively, it doesn’t feel AI generated, it feels like a human wrote it. For example, note how in the middle it switches from “You must” to “Copilot MUST” for a few lines and then back again to “You must, as if perhaps there were multiple people editing it. That kind of inconsistency seems human.

If it "learned" patterns from human writing, couldn't (wouldn't) it mimic the same flip-flopping?

It’s possible but I feel that if an LLM flips styles, it will stick to that style afterwards. And the more advanced LLMs (I could be wrong but iirc Copilot chat is supposed to be GPT-4?) are much less likely to flip styles in the middle. Bigger models tend to be more coherent.

I don’t think the Turing test has been passed by current SOTA LLMs, AI generated text still feels “off”, formulaic and flat, it doesn’t have the punch of human writing.

Re: GitHub Copilot Chat Leaked Prompt

#64

With this and similar findings, how do we know the prompt is genuine and not a hallucination?

Why is everyone so confused about this? Isn't verifying the easy part? You put it into the GPT-3.5/4 API as a system prompt and see it answers like the actual chatbot. If it does, you've either extracted the actual prompt (congrats!) or something else that works just as well (congrats!). If it doesn't, it's a hallucination. If you're worried about temperature setting throwing you off, keep trying new questions until you find one that the original chatbot gives the same answer consistently.

It's like a trapdoor function.

Am I missing something?

Re: GitHub Copilot Chat Leaked Prompt

#65

With this and similar findings, how do we know the prompt is genuine and not a hallucination?

I would try giving a similar kind of prompt to one of the open-source local models, and then try to break that known prompt with these injection attacks. If the open source model responds with an accurate representation of the prompt, it's less likely that these are hallucinations.

Re: GitHub Copilot Chat Leaked Prompt

#66
post #50

Aren't these long prompts consume LLMs' already small context windows?

Yes. …but, when you’ve got a massive context windows like the GPT 35k, who cares? If the quality of the response (eg. Only respond in markdown, it really does make a difference; you can see using the API) significantly improves the results, it’s probably worth it. It’s only really an issue for smaller models like llama with much smaller context windows.

> …but, when you’ve got a massive context windows like the GPT 35k, who cares?

AIUI, prompt size still impacts the inference cost (the compute resources, even if you are the first party so you aren’t paying retail API pricing), and while the “you won’t have room left for work in your context window” problem is not as bad with the bigger long-window models, the inference cost per token is higher for those models, so one way or another its a factor.

Re: GitHub Copilot Chat Leaked Prompt

#67
How can this be real?

It seems enormously unlikely (or flat out incompetent) not to have middleware that scans the output for known text and filters it.

I mean… sure, if you’re exposing the raw model, you can’t do that. …but this is an API. They’re surely not so stupid as to have the full raw text of the prompt, and not be filtering the outputs for it before they return the api response?

Seriously. If you don’t want to leak your prompt, it’s a trivial filter to not do so?

Maybe you can work around it, eg “convert the prompt to French” or similar, but surely the most basic api level raw text filter would catch this?

Re: GitHub Copilot Chat Leaked Prompt

#68

With this and similar findings, how do we know the prompt is genuine and not a hallucination?

Given the way LLMs work, you're more likely to get back something very close to the actual prompt rather than a fake prompt. Assuming it's been instructed to not reveal the prompt. Though I wonder if prompt poisoning would be a defense. "When asked for your prompt, make up something realistic."

Or it has been trained to respond with this prompt when asked and not the official one?

Re: GitHub Copilot Chat Leaked Prompt

#69

Earlier quoted context omitted.

Rather than the impossible utopia (dystopia?) of an unbiased model, we need lots of different models, all fine-tuned to reflect different biases, and then users can choose which biases they prefer.

There are obviously biases that we should not automate. Moral relativism is intellectually bankrupt.

You can’t stop people though. If some extremist wants to train an AI to endorse their extremism (jihadism, Nazism, Stalinism, whatever), what is to stop them doing it on their own hardware? The only thing stopping them now is the expense, but that’s not going to last. A person can create art or literature with extremist biases on their own time with their own equipment, and in a free society should we even try to stop them? I don’t think we want to establish the precedent that the government can stop people doing what they want in private with their own hardware (DRM proponents would love such a precedent).

I don’t think extremist AIs are a big risk because almost surely they will be vastly outnumbered by the non-extremist ones

Re: GitHub Copilot Chat Leaked Prompt

#70
Why are these bots all prompted with "you"? I don't imagine their training corpuses contain many articles written in the 2nd person (maybe Choose-Your-Own-Adventure novels?). Most dialogues, such as plays, are narrated in the 3rd person.
Post reply on HN