simonwillisonblog VS MarginaliaSearch

Simon Willison has pointed out several examples of prompt injection attacks and why it may never be a solved problem:

I want more people to have link blogs.

I have one in the sidebar of https://simonwillison.net/ which I've been running since November 2003. You can search through all 6,836 links here: https://simonwillison.net/search/?type=blogmark

I can post things to it with a bookmarklet. It has an Atom feed.

It's such a low-friction way of publishing. A lot of https://daringfireball.net works like this too. I also like https://waxy.org/ and https://kottke.org/ for this.

I'd love to see more of these.

My approach is to publish to my own blog at https://simonwillison.net and then copy and paste content from that into a Substack newsletter at https://simonw.substack.com a few times a month.

It's been working really well.

Substack don't have an API, but they do support copy and paste - so I built myself a tool that assembles my blog content into rich text I can copy and paste straight into the Substack editor.

I wrote about how that works here: https://simonwillison.net/2023/Apr/4/substack-observable/

Hah, yeah securing something like WordPress can be a challenge, especially if you're running a bunch of plugins.

My blog is a pretty straight-forward Django setup without many other dependencies, so it's a lot less of an attack surface: https://github.com/simonw/simonwillisonblog

That specific prompt is just an example and it's pretty bad, it was the shortest and simplest prompt I could come up with that would be easily understood.

You can set response content-types (text, html, json, etc...). If you use json it will get pretty good results because I have some is some logic to attempt to pick out json or json5 objects from the text output. I dont yet have logic to support json arrays, but I'm hoping to add that soon.

But still client side validation is needed for applications with untrusted input. I dont attempt to solve prompt injection. I saw a lot of interesting posts on this topic from this blog https://simonwillison.net/. I need to find sometime to read more about it.

Try this one instead, it should be better

I've started to consider "commit to writing about it" as the price I have to pay for giving into the lure of another project. It's one of the main reasons I publish so much content on https://simonwillison.net/ and https://til.simonwillison.net

A project with a published write-up unlocks so much more value than one which you complete without giving others a chance of understanding what you built.

I've maintained internal blogs (sometimes just a Slack channel or Confluence area) at previous employers for this purpose too.

I think you are asking specifically about practical LLM engineering and not the underlying science.

Honestly this is all moving so fast you can do well by reading the news, following a few reddits/substacks, and skimming the prompt engineering papers as they come out every week (!).

https://www.latent.space/p/ai-engineer provides an early manifesto for this nascent layer of the stack.

Zvi writes a good roundup (though he is concerned mostly with alignment so skip if you don’t like that angle): https://thezvi.substack.com/p/ai-18-the-great-debate-debates

Simon W has some good writeups too: https://simonwillison.net/

I strongly recommend playing with the OpenAI APIs and working with langchain in a Colab notebook to get a feel for how these all fit together. Also, the tools here are incredibly simple and easy to understand (very new) so looking at, say, https://github.com/minimaxir/simpleaichat/tree/main/simpleai... or https://github.com/smol-ai/developer and digging in to the prompts, what goes in system vs assistant roles, how you gourde the LLM, etc.

Simon Willison's Weblog

> I think a larger concern is how you'll address the Bus Factor going forward

I can't speak to how much energy it is to go from code to serving requests, but FWIW the code is AGPLv3 and seems to be updated regularly https://github.com/MarginaliaSearch/MarginaliaSearch/blob/v2...

Regarding the last sentence: The problem is that capitalism knows no limits. Sure, it would be nice to pay a monthly subscription for genuinely good and desirable content/search results...

But what if the CEO of the service provider needs another $5m bonus? What if the stock needs to go up so that the shareholder gamblers can get more dividend paid? What if all of a sudden the service gets bought out?

The truth is that what you are seeking is more likely to come from someone who is just passionate about it with not that much motivation based on profit. That doesn't mean that this entity or person can't be financially supported but it gets problematic when profit is the _main_ incentive.

For a good example of an interesting search engine built by a single guy, see Marginalia: https://search.marginalia.nu/

Have you heard of https://www.marginalia.nu/ in general, and especially the https://search.marginalia.nu/ from there?

There's a decent amount of people still keeping the fire burning for the "old web." It takes a little digging, but it's out there.

Some links for you:

* https://wiby.me/ — search engine that emphasizes simple/plain/hobbyist pages. Try the "surprise me" link a few times.

* https://neustadt.fr/essays/the-small-web/ — article, "Rediscovering the Small Web"

* https://search.marginalia.nu/ — author (hangs out on HN sometimes, too (marginalia_nu)

Actually, here's a link to a similar discussion on an old HN thread: https://news.ycombinator.com/item?id=30783391

I built a recipe detector. You can, you know, train some sort of AI model to do this like with fasttext, or maybe do naive bayesian inference, but as it turns out, you can also:

https://github.com/MarginaliaSearch/MarginaliaSearch/blob/ma...

It works annoyingly well.

For some values of "nobody"; this westerner enjoys https://search.marginalia.nu (in addition to more common engines) and has high hopes for the new site browser:

Result ranking takes a lot of variables, and factors like excessive tracking and affiliate links is one of them in my search engine.

You can poke around in the result valuation code here: https://github.com/MarginaliaSearch/MarginaliaSearch/blob/ma...

#1 cause in the decline of Google maybe. https://search.marginalia.nu/ seems to manage though, so maybe Google just doesn't care.

Congratulations on shipping.

I see a lot of focus on startups, AI tools, productivity hacks, tech stacks, etc. What audience do you have in mind? I personally find that the most interesting sites on HN are outside of your scope here (examples: https://ciechanow.ski/, https://neal.fun/, https://search.marginalia.nu/).