Comment by aaroninsf

Am I missing something?

Is this attack really just "inject obfuscated text into the image... and hope some system interprets this as a prompt"...?