namanjain24-sudo commented on PR #25527:
URL: https://github.com/apache/datafusion/pull/25527#issuecomment-6451765251

   > > Gauntlet results
   > 
   > That appears to be a prompt injection attack. I will report it
   
   Sorry — this was my mistake, and I can tell you exactly what happened.
   
   I was running a cleanup pass over my open pull requests, closing the ones 
that had gone stale. It writes each closing note to a scratch file and then 
posts that file. For this PR the write failed, and it posted the file anyway 
without checking, so a leftover scratch file from fourteen hours earlier went 
up instead of the two-line note I meant to leave.
   
   That leftover file was a report from a prompt-injection detection benchmark 
I maintain. The attack strings in it are the samples it scores detectors 
against, quoted in its own output. None of it was aimed at this repository or 
at anyone reading the thread — but I understand exactly why it read that way, 
and it had no business on an ASF pull request.
   
   I have left the comment up so you still have the original if you are filing 
something. Say the word and I will delete it. Either way the mistake is on me, 
and I have changed how I do this so a note can no longer be posted from a file 
that was not just written.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to