I ran 200 attacks against a prompt-injection guard. It caught 44% and flagged none of 200 random sentences.
This story is from 2026-10-22. It is preserved in the archive; the latest stories are on the live feed.
A few days ago a commenter on my last post gave me two falsifiable tests and said: with 200 attacks and 200 benign sentences you can report both rates with Wilson intervals. This is that run. The target is the heuristic detector shipped in Rebuff 0.1.1, at its own default threshold of 0.75. Not a s…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-10-22 18:41 · DEV Community — AI
I ran 200 attacks against a prompt-injection guard. It caught 44% and flagged none of 200 random sentences.