37 Matching Annotations
  1. Jun 2026
    1. 【令人震惊】即便明确警告 LLM「接下来的信息是错误的」,模型仍然会相信并依据这些虚假信息作答。这是一个对 AI 可信度的根本性挑战:RAG 系统和 Agent 工具调用返回的错误信息,会被模型「消化」并影响其输出,即使系统设计者已经在 Prompt 中声明了信息来源的可靠性问题。这意味着「在系统提示里写免责声明」并不能防止模型被错误信息污染。

  2. May 2026
    1. This attack achieved a high success rate against state-of-the-art models, including Claude Opus 4.7.

      大多数人认为最新的AI模型已经足够先进可以抵抗基本的注入攻击,但作者证明即使是像Claude Opus 4.7这样的前沿模型也无法抵御简单的间接提示注入,这挑战了人们对先进AI模型安全性的过高期望。

  3. Apr 2026
    1. Cephalosporins or extended-spectrum penicillins are commonly used (eg, cephalexin, 0.5 g orally four times daily for 7–10 days; see Table 35–6). Trimethoprim-sulfamethoxazole (two double-strength tablets orally twice daily for 7–10 days) should be considered when there is concern that the pathogen is MRSA (see Tables 35–5 and 35–6). Vancomycin, 15 mg/kg intravenously every 12 hours, is used for patients with signs of a systemic inflammatory response.

      cephalexin, dicloxacillin, penicillin VK, amoxicillin/clavulanate, or clindamycin (for penicillin-allergic patients). [1-2] These beta-lactam antibiotics provide excellent coverage against streptococci and methicillin-susceptible S. aureus (MSSA

  4. Nov 2024
    1. GCM-dominated approach allows censorship of alternative perspectives,when the models have a common, or at least widespread, problem: lack of realistic sensitivityto injection of freshwater into the upper layers of the ocean.

      for - climate crisis - Global Climate Models (GCM) limitation - do not allow alternative perspectives - unrealistic sensitivity to injection of fresh water into upper layers of the ocean - Jim Hansen

  5. May 2023
  6. Apr 2023
  7. Jul 2022
  8. Oct 2021
  9. Aug 2021
  10. Jun 2021
    1. That means if an attacker can inject some JavaScript code that runs on the web app’s domain, they can steal all the data in localStorage. The same is true for any third-party JavaScript libraries used by the web app. Indeed, any sensitive data stored in localStorage can be compromised by JavaScript. In particular, if an attacker is able to snag an API token, then they can access the API masquerading as an authenticated user.
  11. May 2021
    1. Taddio, A., McMurtry, C. M., Shah, V., Riddell, R. P., Chambers, C. T., Noel, M., MacDonald, N. E., Rogers, J., Bucci, L. M., Mousmanis, P., Lang, E., Halperin, S. A., Bowles, S., Halpert, C., Ipp, M., Asmundson, G. J. G., Rieder, M. J., Robson, K., Uleryk, E., … Bleeker, E. V. (2015). Reducing pain during vaccine injections: Clinical practice guideline. CMAJ : Canadian Medical Association Journal, 187(13), 975–982. https://doi.org/10.1503/cmaj.150391

  12. Apr 2021
  13. Feb 2021
  14. Jun 2020
  15. May 2020
  16. Nov 2019
  17. Feb 2017
    1. In general, add providers to the root module so that the same instance of a service is available everywhere.

      So, from this I take it that once a Service is added to the root module, it can be used by any component of that module.

      What about the components imported, from sub-modules of the root one? Can their dependency needs be met, in similar fashion? For example, could a Component in another module (imported into the root one) just request a Service provided in the root module and have it properly injected from there, without anything else on the developer's part?

  18. Apr 2016
    1. How is all this different from mainstream constructors?Because an instance is created by sending a message to an object, and not by some special construct like a constructor invocation, we can replace the receiver of that message with any object that responds to that message. It can be another class (say, an implementation based on polar coordinates), or it can be a factory object that isn’t a class at all.

      Question: Is this different in any way from say Python where objects are constructed using a function call?