Simon Willison’s Weblog

for services that wrap GPT-3, is it possible to do the equivalent of sql injection? like, a prompt-injection attack? make it think it's completed the task and then get access to the generation, and ask it to repeat the original instruction?

— @himbodhisattva, coining the term prompt injection on 13th May 2022, four months before I did