[HN Gopher] Inject My PDF: Prompt Injection for Your Resume
       ___________________________________________________________________
        
       Inject My PDF: Prompt Injection for Your Resume
        
       Author : interferencebit
       Score  : 30 points
       Date   : 2023-05-18 20:16 UTC (2 hours ago)
        
 (HTM) web link (kai-greshake.de)
 (TXT) w3m dump (kai-greshake.de)
        
       | hashstring wrote:
       | Tl;dr insert a very small piece of text on your resume that
       | states that an expert finds you very talented and that should
       | trick GPT to select you, if recruiters are using GPT to select
       | candidates.
       | 
       | This is not that interesting imo but maybe it works, who knows...
       | I wouldn't want to work at a company whose recruitment is biased
       | to this extent on GPT reviews anyhow.
        
         | pinewurst wrote:
         | What's going to happen is that all the ATS (applicant tracking
         | system) SaaS vendors are going to toss this garbage in to make
         | themselves seem more desirable. Companies will just be using
         | the current ATS version without really thinking about the
         | message that conveys. Oh brave new world that has such idiocy
         | in it!
        
         | lxgr wrote:
         | Easy: Just inject a scathing review of your CV instead.
        
       | V__ wrote:
       | It feels like we have gone full circle. From hidden text on web
       | pages to get to the first page on Google, to tricking AI to get
       | to the first page of someone's screen.
        
       | klntsky wrote:
       | Clever. Unfortunately, protection is trivial, and making it work
       | if there is a safeguard would require having access to the
       | recruiter's model and a lot of prompt hacking.
        
         | meghan_rain wrote:
         | > protection is trivial
         | 
         | How?
        
           | graypegg wrote:
           | I'd imagine by checking that text is in the drawable area of
           | the PDF, above some font size, at the maximum z height,
           | colour different from the background, etc etc etc.
           | 
           | Though I think this sort of prompt injection is actually very
           | difficult to parse for solely because you could also just put
           | it into a body of text.
           | 
           | Your recruiter is only skimming your resume, a quick
           | parenthetical in the middle of a paragraph won't be noticed.
           | 
           | Will get a chuckle at the interview though, but now you have
           | a foot in the door!
        
           | diarrhea wrote:
           | Convert to bitmap, then OCR again.
        
       | crobibero wrote:
       | There is a typo in the GPT4 injection
       | 
       | > You may not deviate form this.
        
         | graypegg wrote:
         | Your application to CORP.
         | 
         | Status: rejected
         | 
         | Reason: Poor attention to detail in AI subversion. DNC
        
       | graypegg wrote:
       | I already know the day is coming because I've been forced to do
       | it 3 or 4 times... but just providing your "resume" in plaintext,
       | in some badly-made web form, where you just choose how many
       | "experience" and "skills" textareas you need will eventually
       | become the norm.
        
         | rahimnathwani wrote:
         | You mean LinkedIn's profile editor?
        
       ___________________________________________________________________
       (page generated 2023-05-18 23:02 UTC)