Very true. LLMs are not likely to perform any more admirably in the Milgram experiments than people do. Although, with a bit of appropriate pre-prompting, you might regulate LLM output to better comply with regulations. I think people are even more easily intimidated to “do what they are told” both directly and implied.
If you ask LLMs about cybersecurity implementation decisions, and keep the prompts straightforward like: “is this adequately secure for the target environments?” they are coming out on the highly conservative / secure side of things lately. Of course you can prompt and reprompt them with ever more detailed expectations until they agree with whatever you say, but out of the gate a clean context will generally bring you every “best practice” and then some and point out a big list of things your legacy system isn’t doing.
Very true. LLMs are not likely to perform any more admirably in the Milgram experiments than people do. Although, with a bit of appropriate pre-prompting, you might regulate LLM output to better comply with regulations. I think people are even more easily intimidated to “do what they are told” both directly and implied.
If you ask LLMs about cybersecurity implementation decisions, and keep the prompts straightforward like: “is this adequately secure for the target environments?” they are coming out on the highly conservative / secure side of things lately. Of course you can prompt and reprompt them with ever more detailed expectations until they agree with whatever you say, but out of the gate a clean context will generally bring you every “best practice” and then some and point out a big list of things your legacy system isn’t doing.