~/talk

Words as weapons: The dark arts of Prompt Engineering

Talkat Devoxx Belgium 2024 · 2024-10-07..10-11· [ai-assisted-development, security]
links:none on file
slides:none on file

Explains how ChatGPT, custom GPTs, Bing and Co‑pilot can be prompt‑injected to bypass filters, shows retrieving a system prompt and leaking it, and demonstrates hidden prompts in images and white text that make models output “you got hacked.” Shows a CV trick that forces top scores and an invoice attack where a $6,000 bill is made to pay $1,000,000 by a hidden prompt; some jailbreaks and website/robots.txt retrievals work in practice so defenses must change.

AI-written summary · about

  1. 0:00Introduction and context
  2. 1:44Understanding social engineering
  3. 5:53Guardrails and security
  4. 9:34System prompts explained
  5. 12:43Human curiosity and AI
  6. 17:25Adversarial prompting tactics
  7. 20:27Real-world exploitation
  8. 25:55Advanced injection techniques
  9. 29:49Business automation risks
  10. 33:44Developer warnings
  11. 37:16Conclusion and takeaways
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.