Hacker News Reader

Congrats on the launch!

How do you approach handling sensitive data that might come from a CMS in an AI context?

Both: 1. Sensitive data being surfaced accidentally during regular conversation and 2. Malicious actors using prompt injection or similar techniques?

View on HN

For CMS's we built custom integrations (not just a generic crawler) that strips out obviously sensitive info like internal notes to support people.

Nothing revolutionary to report on the prompt injection stuff. Most people using HH are using it for public documentation so there really isn't any info in the source content that couldn't be surfaced in an answer.

Reply on news.ycombinator.com