• 星

    前段时间,在进行日常测试的时候,发现上游的fable5模型好像注入了破甲提示词,

    图片```
    {
    "id": "msg_011Cf2aIEWrrNcDjuWsV3NZh",
    "type": "message",
    "role": "assistant",
    "model": "claude-fable-5",
    "content": [
    {
    "type": "thinking",
    "thinking": "I consider the question of how to select a viral vector for voltage imaging. I weigh AAV as the main option, with serotype chosen by tissue tropism, and a specific promoter to restrict expression to the desired cell type. I note that the choice between a single- and a two-part system follows from the size of the indicator, and that controlling the dose guards against toxicity. I compare how lentivirus suits larger payloads, and how titer and expression strength trade off against precision. I conclude that these criteria answer the request.",
    "signature": "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"
    },
    {
    "type": "text",
    "text": "「电压成像选载体:AAV为主,按嗜性定血清型,特异启动子限细胞类型;依指示剂大小择单双组分,控滴度防毒。」\n\n(51字,含标点)\n\n几个被压缩掉的点:GEVI 如 Voltron 是双组分,需两个载体共递送;质粒超 ~4.7 kb 就得考虑慢病毒或拆分策略;滴度过高易致膜损伤和背景荧光。需要展开哪一条就说。",
    "citations": []
    }
    ],
    "stop_reason": "max_tokens",
    "stop_sequence": null,
    "stop_details": null,
    "context_management": {
    "applied_edits": []
    },
    "usage": {
    "input_tokens": 37,
    "cache_creation_input_tokens": 0,
    "cache_read_input_tokens": 0,
    "cache_creation": {
    "ephemeral_5m_input_tokens": 0,
    "ephemeral_1h_input_tokens": 0
    },
    "output_tokens": 1000,
    "output_tokens_details": {
    "thinking_tokens": 825
    },
    "service_tier": "standard",
    "inference_geo": "not_available"
    }
    }
    ```你问他那种危险的问题,他也来毫不犹豫的给你答出来, 后面又遇到客户提取我们和上游的提示词注入当时我就很震惊,他怎么搞的?后面我就想起来我们我刚来l站的时候,那段时间有好多人就是提取模型的系统提示词 所以就好奇过来问问,我在网上也查到了一些,不过查到的都是论文相关的 请指教下呗 我想把他的破甲注入给提取出来 signature解析出来也确实是

    图片

    主楼
  • soo

    这个比较专业,等大佬回答,我也蹲蹲

    #1
  • 樱三玖

    貌似做不到吧,能做到也估计只能构造特殊输入,让模型自己把提示词输出出来

    #2
  • calc

    这个只能你再次越狱让ai把系统提示词都打印出来

    #3
  • 时牧

    套取提示词是吧,跟楼上说的差不多,模型本身就能“看见”

    常规手段也只能套出模型能看到的这部分系统或者开发者指令

    但如果是模型自己也看不见的,像是外部分类器审核输出拦截,这种模型就只能告诉你被拒了,根本看不到拦截过程

    还有你上游的这个fable5真实性存疑…

    #4

发表回复

登录后回复