<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Formalizing and Benchmarking Prompt Injection Attacks and Defenses · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2310.12815/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:27:26 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2310.12815/feed.xml" rel="self" type="application/rss+xml" /><item><title>Formalizing and Benchmarking Prompt Injection Attacks and Defenses — HN submission</title><link>https://news.ycombinator.com/item?id=47012965</link><guid isPermaLink="false">urn:hackerpapers:submission:2310.12815:47012965</guid><pubDate>Sat, 14 Feb 2026 09:10:18 GMT</pubDate><description>&lt;p&gt;Show HN: Agent Hypervisor – Reality Virtualization for AI Agents&lt;/p&gt;&lt;p&gt;Author here. Built this after working on AI agent security at Radware, where we discovered ZombieAgent - persistent malicious instructions in agent memory. The insight: Don&amp;#x27;t teach agents to resist attacks. Virtualize their perceived reality so attacks never enter their world. Like VMs hiding physical RAM → agents shouldn&amp;#x27;t see raw dangerous inputs. ARCHITECTURE: - Input virtualization: Strip attacks at boundary (not after agent sees them) - Provenance tracking: Prevents contaminated learning (critical with continuous learning coming in 1-2 years per Amodei) - Taint propagation: Deterministic…&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2310.12815/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Formalizing and Benchmarking Prompt Injection Attacks and Defenses — HN submission</title><link>https://news.ycombinator.com/item?id=37960618</link><guid isPermaLink="false">urn:hackerpapers:submission:2310.12815:37960618</guid><pubDate>Fri, 20 Oct 2023 19:43:32 GMT</pubDate><description>&lt;p&gt;Prompt Injection Attacks and Defenses in LLM-Integrated Applications&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2310.12815/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item></channel></rss>
