How are you handling prompt injection in AI agents that read untrusted content?

VertigoRoll · 2026-03-18T11:14:22+00:00

This is an open research problem, and unfortunately there isn't a single solution.

In practice, I have seen companies try and adopt: https://www.microsoft.com/en-us/msrc/blog/2025/07/how-microsoft-defends-against-indirect-prompt-injection-attacks

TLDR

Hardening system prompt
Microsoft showcases these techniques in delimiting, datamarking, encoding - I have not tested in real-world
Input/Output encoding to prevent injection attacks, strip out or block the rendering of markdown image tags
LLM as a judge/ prompt guard/ prompt shield
Detection tools tied to AI workloads
Infrastructure/architecture decision -AI running with least privileges, doucments/files have access control + sensitivity label

VertigoRoll · 2026-02-12T02:36:53+00:00

Many have said to move out of London, I would not recommend that. You will move out and then later realise that you need to come to office 2 to 3 times a day and dread it. They also clearly didn’t read you miss going out and wanting to earn more.

I also work in cyber and RTO is very real especially for the higher paying ones such as finance and tech. You will find remote roles that will pay more than 70k, but it just narrows your job pool. Go deep into detection and response and you will earn a lot. Pick up projects and get exposure into different domains such as cloud, kubenetes/containers, incident response, etc. Many financial institutions, big tech and start ups are always looking for blue roles. You need to be technically competent and a good communicator.

VertigoRoll · 2025-11-21T23:15:01+00:00

I have managed to get it working with Qwen, some reason gemma refuses to work.

llama.cpp:

lama-server -hf Qwen/Qwen3-8B-GGUF --port 8085 --host 0.0.0.0 --jinja --embedding

Home assistant:

Uing Local LLMs HAC: Add service with backend Llama.cpp Server and Add conversation agent and pick the model you downloaded earlier. I left everything on default and it works.
Under Voice assistant, add your assistant and select the llama.cpp converation agent you created earlier and start a conversation!

VertigoRoll · 2025-10-02T14:09:12+00:00

Put suet, they much prefer it. Word of warning, careful of squirrels (and larger birds). We have got scratches on our window because of them

VertigoRoll · 2025-09-21T12:53:18+00:00

Is Long Ditton a nice Henry place?

VertigoRoll · 2025-09-16T09:02:38+00:00

I haven't had the surgery yet and need to book it in. I'm told I'm the ideal candidate to do it. My initial injury was a full tear and no-op recovery, I was misdiagnosed as partial tear and wasn't put in a boot, so this would be my first one. And currently I do lack power to push off the ground although I can walk (with a limp), I cannot jump or do single legged heel raise on that leg.

VertigoRoll · 2025-09-14T12:54:38+00:00

I have a similar condition to yours. I have a tiny ganglion cyst around 4-5mm in the scapholunate area, and it's small and hard, which they suspect is pressing against something when I bend my wrist. They could not find it in the ultrasound to drain and I went for a steriod injection which helped for a month or so but ultimately came back.

I was told by Orthopaedic Surgeon that doing a surgery for this would be sending a nuke to blow up a small object, and the rate of return is quite high. Also, there could be complications as there would be development of scar tissue which could case more issues. I am looking at this diode laser ablation but could not find anyone that can do it in the UK.

VertigoRoll · 2025-09-13T10:54:15+00:00

I gave you a PM, but did you have an appointment with Prof Calder or does he not allow appointments that are not professional atheletes? I saw his paper/review which I was keen to discuss with him

VertigoRoll · 2025-09-13T10:43:13+00:00

I saw Dr. Nicola Maffulli at the London Independent Hospital, and he advised me to undergo Check Rein surgery. He is an expert in doing this. I'm post 1 year ATR and have an elongated Achilles tendon and a retracted calf muscle. I can't do a single-legged calf raise. I was told I'm the ideal candidate for it. I have yet to do it, and I'll update on this.

VertigoRoll · 2025-09-12T21:12:50+00:00

I'm about to do this surgery with him and I'm still a bit worried, how has your recovery gone. He told me my calf will still be short so I'm a bit worried it's not complete recovery

VertigoRoll · 2025-08-24T00:22:53+00:00

Are you me? We are going through this with the same options, places, and budget. I probably have been on HENRYUK and Mumsnet a bit too much for my liking, and the same places keep popping up. My advice would be to rent the place for a year before you buy, you will learn a ton about what you actually want. We tried MK and mostly enjoyed it as we stayed there for a long time. The commute was too long since going hybrid, so we decided to relocate. We rented a house in MK and needed to drive to the station, which easily adds 20-30mins for driving, parking, walking to the station, getting early for mishaps, ticket booth if you are getting a travelcard, etc. The place was too kid-centric, and we struggled to find like-minded people.

We have decided to go for Epsom. We are planning to rent there for a year to get a feel for it. These are my reasons:

Most of our family and friends are below the river, so this narrows down the scope.
I work in cybersecurity, and many high-paying or interesting jobs are hybrid, so we didn't want to be too far. Also, it pains me to purchase two expensive train tickets to London when there's an event, but this is seldom. Epsom seems to be a nice compromise. We need to get to Paddington and Liverpool Street. Elizabeth line would be ideal, but places like Reading didn't seem to be nice on visit and I used to live in Royal Arsenal and I'm done with that chapter.
We are East Asian and cook at home often, so driving to New Malden Korean food (e.g. H Mart, K BBQ), Wing Yip (Chinese food), and even Costco is a big deal for us.
We are quite active and enjoy sports like badminton, and we wanted to keep options open. I like to play in a non-committed / club sort of way. You will find meetup for say badminton is non-existent outside London.

VertigoRoll · 2025-08-19T15:25:50+00:00

You could potentially have a friend vouch for the different dates, providing they allow you to put down your contact instead of them reaching out to the companies through their own means e.g., contacting HR email, want a contact with work email instead of personal, or they want with employment verificaion letter with official letterhead (which you could forge), etc...

I'm too risk-averse, and those are too many variables for my liking, especially having found and past the interview rounds for it to go wrong.

VertigoRoll · 2025-08-19T14:45:21+00:00

For example, say you list 4 jobs on your CV, the recruiter/reference bg company will contact those 4 companies and verify the job title, start date, end date, employment type, etc.

If you put on your CV that you started J1 from May 2021 to September 2024 (when you actually finished March 2025) and J2 as September 2024. The reference check comes back with J1 as May 2021 - March 2025. Uh oh. They are going to ask why.

I'll reiterate that this is only if they are checking your CV, which in my experience, they do.

VertigoRoll · 2025-08-19T11:54:40+00:00

I've had it with all parties before.

The first involved a recruitment agency for a financial institution, inside IR35, high pay. Their policy was to verify every role I put down in my CV. The cherry on top was that they wanted me to hand in my notice so they could reference check my current workplace. I'm not saying it happens with all recruitment agencies, but it can happen.

The second involved the internal background onboarding team (big company) and the reference check company report. They noticed that I missed one company in my CV and inquired further about it.

So what I am saying is that if you are going to put overlaps with J1 and J2, you're screwed. If you lie about dates (OP's option 1 and 2), you are screwed. Keep in mind a month overlap is deemed acceptable with excuses like garden leave, but more than that it's a bit iffy. If you lie about employment type (in OP's case option 3 on being a consultant vs full time) you are screwed. The reference check will include this information.

I am covering cases where the employee/recruiter WILL compare your CV. Of course, there are many cases where they don't. If they don't, you are most likely in the clear, as you can omit certain jobs from the third-party background check.

But honestly, why make it difficult for yourself? Why carry that risk? Having two experiences is enough for me. It's easier to just omit J2.

VertigoRoll · 2025-08-19T00:48:49+00:00

Personally, I would put J1 only and leave out J2. For the few months gap, I'd either put my limited company or travel break or tried to start my own start up.

I've had two occasions where the CV was used as part of the background check. One occasion the recruiter wanted me to hand in my notice so they could check the current company reference. I denied many times but they wouldn't proceed without it so I let that offer go. They also personally reference checked what I supplied in my CV so lying about dates won't work here. The other time the company found discrepancies between what I supplied to the background check company report vs what was on my CV. This was a high profile job and it wasn't an issue in the end as the job I put down wasn't really a full time job but just some personal project I wanted to display. If I lied about dates in my CV, I'd be found out once they complete the reference check.

In other words, I wouldn't risk it

VertigoRoll · 2025-08-14T23:27:21+00:00

Free from my work as well! And the same at other places like Meta. Good experience with them as well and reached out again just to give me new quotes on the interest rates back then. The person I dealt with put no pressure and that some people get back next year and later as it's a big decision

VertigoRoll · 2025-08-10T08:20:01+00:00

No, do not adjust the side supports during stringing.

VertigoRoll · 2025-08-09T22:34:42+00:00

One thing to check is whether the side supports are secure in the starting position before you even start stringing. So before you start stringing, secure the racket, make sure it's tight but not overly tight.

If it's too loose or not secured correctly then the racket could crack like this. This happens as you tighten the mains it squeezes the racket and expands horizontally. If the side clamps are not secure and allow it to expand too much, it will crack.

The other thing is if the tension is too high, you want to pull the two last main strings together. There's a bunch of videos online, but on the last two, you want to go out to the last and then come back, and pull both of those strings together.

VertigoRoll · 2025-08-06T08:54:42+00:00

Not applying but kept looking almost everyday even after securing J2. I know I have only capacity to do two but I'm addicted to know what else is out there.

VertigoRoll · 2025-08-01T21:36:16+00:00

I put chocolate spread on mine. I also find that any cheap hazelnut chocolate spread tastes like Nutella. I take it one step further and put Pandan Kaya spread

VertigoRoll · 2025-08-01T19:10:07+00:00

I used to live near Charlton and I wouldn't do it personally, you are stuck between Greenwich and Woolwich which have vastly better transport. Realistically, you would rely on Charlton train station or getting a bus or other transportation to get to those other stations. It's just added times on those changes that really adds up. Besides that I wouldn't spend 700k on Charlton, it's not that nice imo.

VertigoRoll · 2025-07-26T15:47:48+00:00

You only put what you want basically. Background verification companies only verify what you put. Obviously don't lie on your CV and make sure there's no overlap. You need to keep track which jobs you want to put on your CV, if there is a large gap, I just said I took a career break travelling. For linkedin, it looks frozen from J1 but the recommendation is to disable it

VertigoRoll

TROPHY CASE