<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2404.13208/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:16:22 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2404.13208/feed.xml" rel="self" type="application/rss+xml" /><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — mentioned by x312</title><link>https://news.ycombinator.com/item?id=48635289</link><guid isPermaLink="false">urn:hackerpapers:mention:2404.13208:48635289</guid><pubDate>Mon, 22 Jun 2026 20:01:13 GMT</pubDate><description>&lt;p&gt;I believe they are trained for security now, but you&amp;#x27;re not wrong in that it&amp;#x27;s kind of stapled on top https://arxiv.org/abs/2404.13208&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — mentioned by marcfisc</title><link>https://news.ycombinator.com/item?id=44101432</link><guid isPermaLink="false">urn:hackerpapers:mention:2404.13208:44101432</guid><pubDate>Mon, 26 May 2025 20:37:52 GMT</pubDate><description>&lt;p&gt;Sadly, these ideas have been explored before, e.g.: https://simonwillison.net/2022/Sep/17/prompt-injection-more-... Also, OpenAI has proposed ways of training LLMs to trust tool outputs less than User instructions (https://arxiv.org/pdf/2404.13208). That also doesn&amp;#x27;t work against these attacks.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — mentioned by vunderba</title><link>https://news.ycombinator.com/item?id=41172822</link><guid isPermaLink="false">urn:hackerpapers:mention:2404.13208:41172822</guid><pubDate>Tue, 06 Aug 2024 17:06:39 GMT</pubDate><description>&lt;p&gt;I&amp;#x27;ve been seeing these types of things a lot lately. There&amp;#x27;s been some work done recently to prevent this concept of instructional overrides though, so I don&amp;#x27;t think they&amp;#x27;re nearly as effective as they used to be. https://arxiv.org/abs/2404.13208&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — HN submission</title><link>https://news.ycombinator.com/item?id=40965488</link><guid isPermaLink="false">urn:hackerpapers:submission:2404.13208:40965488</guid><pubDate>Mon, 15 Jul 2024 05:28:36 GMT</pubDate><description>&lt;p&gt;The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — HN submission</title><link>https://news.ycombinator.com/item?id=40157957</link><guid isPermaLink="false">urn:hackerpapers:submission:2404.13208:40157957</guid><pubDate>Thu, 25 Apr 2024 14:22:37 GMT</pubDate><description>&lt;p&gt;The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — HN submission</title><link>https://news.ycombinator.com/item?id=40151322</link><guid isPermaLink="false">urn:hackerpapers:submission:2404.13208:40151322</guid><pubDate>Wed, 24 Apr 2024 23:38:50 GMT</pubDate><description>&lt;p&gt;The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — HN submission</title><link>https://news.ycombinator.com/item?id=40135927</link><guid isPermaLink="false">urn:hackerpapers:submission:2404.13208:40135927</guid><pubDate>Tue, 23 Apr 2024 19:10:03 GMT</pubDate><description>&lt;p&gt;OpenAI: Training LLMs to Prioritize Privileged Instructions&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;3 points; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions — HN submission</title><link>https://news.ycombinator.com/item?id=40129651</link><guid isPermaLink="false">urn:hackerpapers:submission:2404.13208:40129651</guid><pubDate>Tue, 23 Apr 2024 08:08:28 GMT</pubDate><description>&lt;p&gt;The Instruction Hierarchy: Training LLMs to Prioritize Privileged Instructions&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2404.13208/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item></channel></rss>
