this post was submitted on 07 Sep 2025
385 points (94.5% liked)

World News

49660 readers
2687 users here now

A community for discussing events around the World

Rules:

Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.

We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.

All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.


Lemmy World Partners

News !news@lemmy.world

Politics !politics@lemmy.world

World Politics !globalpolitics@lemmy.world


Recommendations

For Firefox users, there is media bias / propaganda / fact check plugin.

https://addons.mozilla.org/en-US/firefox/addon/media-bias-fact-check/

founded 2 years ago
MODERATORS
 

If an LLM can't be trusted with a fast food order, I can't imagine what it is reliable enough for. I really was expecting this was the easy use case for the things.

It sounds like most orders still worked, so I guess we'll see if other chains come to the same conclusion.

you are viewing a single comment's thread
view the rest of the comments
[–] hark@lemmy.world 1 points 16 hours ago (1 children)

Special characters is just one case to cover. If the user says they want "an elephant-sized drink" what does that mean to your system? At least that is relevant to size. Now imagine complete nonsense input like the joke you responded to ("-1 beers" or "a lizard"). SQL injection isn't the only risk with handling inputs. The person who ordered 18,000 waters didn't do a SQL injection attack.

[–] communist@lemmy.frozeninferno.xyz 1 points 14 hours ago* (last edited 14 hours ago)

none of those issues work because there is a whitelist of specific terms instead of a blacklist

-1 cannot be selected, a lizard isn't on the list of inputs, and my point with the sql is that this isn't a huge attack vector like an input field on a website, this is a dropdown list, essentially.

i challenge you to come up with one relevant attack that isn't order too much of a thing or order conflicting modifications (note of course the modifications are also essentially read from a dropdown list)

everyone here seems to believe that the input field paradigm is not solveable when the inputs are fixed, that isn't true.