Simon Willison’s Weblog

Twitter pranksters derail GPT-3 bot with newly discovered “prompt injection” hack. I’m quoted in this Ars Technica article about prompt injection and the Remoteli.io Twitter bot.

Posted 16th September 2022 at 6:33 pm

Recent articles

The Summer of Johann: prompt injections as far as the eye can see - 15th August 2025
Open weight LLMs exhibit inconsistent performance across providers - 15th August 2025
LLM 0.27, the annotated release notes: GPT-5 and improved tool calling - 11th August 2025

security 538 twitter 160 gpt-3 67 openai 339 prompt-engineering 156 prompt-injection 115 generative-ai 1331 llms 1308 press-quotes 19

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe