logoalt Hacker News

driverdantoday at 6:05 PM1 replyview on HN

There are two problems, false positives and changing the LLM's pattern.

It's really easy to have a false positive and false positives can be very harmful if the person using the detector isn't aware of that risk.

It's also very easy to change the pattern of LLM output. You can provide basic prompting that will significantly change the structure of the output. For example, having it utilize the Wikipedia article on signs of AI writing and avoid everything it describes. https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing


Replies

WhitneyLandtoday at 8:00 PM

"It's really easy to have a false positive"

Not really. The false positives for the SOTA detector are very very low.

"It's also very easy to change the pattern of LLM output."

Not in a way that can reliably avoid detection. The problem is the patterns are baked into the distribution itself. It's smoothed over, so it becomes difficult to prompt your way out of that.