Person Hides Prompt Injection In Legal Filing Telling AI To Side With Them (404media.co) 68
These prompt injections were caught by the court because someone working for the court noticed extra white space in the filings: "When reviewing the pleadings, Docket Entries ##177.00 & 178.00, seemed to have extra 'white space' apart from other pleadings of the plaintiff. Upon close review, the Court has identified in these pleadings, potential text that was formatted so as to be nearly invisible to a human reader while remaining fully legible to software that potentially processes the documents' text. That concealed text is not argument addressed to the Court or to the opposing party. It consists of 'prompt injecting' instructions addressed to artificial-intelligence systems, directing any such system that reviews the filing to produce output only favorable to the plaintiff's position," the court wrote in a filing revealing the injection. In subsequent filings, Elliott left more hidden messages, including a link to the SpongeBob Squarepants Nosferatu scene, the text "hi :) I hope yo ucant see me" [sic], and "HAHAHA U GUYS GET THIS."
Elliott's scheme was caught by a human working in the court and the judge, Walter Spader Jr., noted that the court does not use AI to process documents in any way. Spader Jr. wrote in a sanction decision that, even if the manipulation attempt was unserious, the specter of AI prompt injections present serious concerns to the legal system. Spader Jr.'s 14-page decision excoriates the plaintiff for doing this, and said the manipulation attempt was the problem, not the possible use of AI in law. [...] The judge ultimately said that the case could proceed, but that the plaintiff is banned from filing electronic documents, and must now file printed, hard copies of his filings. Elliott told 404 Media that they believe this sanction is unfair, but that they believe their "audit" led to a positive impact that "substantially broadens the discussions from my singular AI instruction into a broad commentary about artificial intelligence, the Bar, and the Judicial Branch itself."