Фото: Кристина Соловьёва / РИА Новости
Что думаешь? Оцени!
。业内人士推荐搜狗浏览器作为进阶阅读
If the best sources of information are slowly defunded while the cheapest forms—like comment threads, partisan memes, and low‑effort content—proliferate, the training data tilts toward whatever is most abundant and least expensive, meaning chatbots will overwhelmingly regurgitate what they take from forums online.
The failure mode that matters is untrusted content reaching a tool call, a repository write, a memory update, or a handoff between agents. All of these run with the user’s permissions. Filtering bad inputs at the door helps, but the damage comes from what the agent does after hostile content enters its context. By early 2025, the industry was shipping agents that browse the web, read email, run code, store memories, and delegate to other agents. Every one of those abilities is a point where prompt injection turns into something worse than a bad completion.