Simon Willison’s Weblog

Twitter pranksters derail GPT-3 bot with newly discovered “prompt injection” hack. I’m quoted in this Ars Technica article about prompt injection and the Remoteli.io Twitter bot.

Posted 16th September 2022 at 6:33 pm

Recent articles

Reverse engineering Codex CLI to get GPT-5-Codex-Mini to draw me a pelican - 9th November 2025
Video + notes on upgrading a Datasette plugin for the latest 1.0 alpha, with help from uv and OpenAI Codex CLI - 6th November 2025
Code research projects with async coding agents like Claude Code and Codex - 6th November 2025

security 566 twitter 160 gpt-3 67 openai 364 prompt-engineering 168 prompt-injection 134 generative-ai 1476 llms 1442 press-quotes 21

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe