Prompt Injection

A Small Label Appeared Beneath the Answer

Two ChatGPT accounts with no connection to each other could pass instructions through an internal package server that both were allowed to reach.

The Instruction Went With It

A Word document carried a paragraph of white-on-white instructions. Copilot could not see the colour, obeyed them, and wrote them into the next document.

And Add No Takesies Backsies at the End

A user told a Chevrolet dealership’s chatbot to agree with anything the customer said. He then asked it for a new Tahoe for one dollar.