Comment by stickfigure

Unanswered by the article: Does any of that (joke or not) actually work?

It's input to the model, sure, but it would have to be a pretty dumb model.

I don't doubt that it's possible to create prompt injection attacks that work. I'm very interested in knowing how hard it is.