<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Defending Against Indirect Prompt Injection Attacks With Spotlighting · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2403.14720/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:16:22 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2403.14720/feed.xml" rel="self" type="application/rss+xml" /><item><title>Defending Against Indirect Prompt Injection Attacks With Spotlighting — mentioned by rush86999</title><link>https://news.ycombinator.com/item?id=49413669</link><guid isPermaLink="false">urn:hackerpapers:mention:2403.14720:49413669</guid><pubDate>Sun, 23 Aug 2026 23:38:54 GMT</pubDate><description>&lt;p&gt;Reasoning / self-consistency (voter in core/llm/self_consistency_voter.py): - Wang et al. Self-Consistency Improves Chain-of-Thought — ICLR 2023, Google Brain, 4k+ cites — https://arxiv.org/abs/2203.11171 — N-sample majority vote we use verbatim - Chen et al. Universal Self-Consistency — ICML 2024 — https://arxiv.org/abs/2311.17311 — judge fallback when no hash collides - Soft Self-Consistency — ACL 2024 — https://aclanthology.org/2024.acl-short.28.pdf - Too Consistent to Detect — EMNLP 2025 — https://aclanthology.org/2025.emnlp-main.238/ — why SC doesn&amp;#x27;t fix systematic bias…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2403.14720/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item></channel></rss>
