Simon Willison’s Weblog

Twitter pranksters derail GPT-3 bot with newly discovered “prompt injection” hack. I’m quoted in this Ars Technica article about prompt injection and the Remoteli.io Twitter bot.

Posted 16th September 2022 at 6:33 pm

Recent articles

Adding dynamic features to an aggressively cached website - 28th January 2026
ChatGPT Containers can now run bash, pip/npm install packages, and download files - 26th January 2026
Wilson Lin on FastRender: a browser built by thousands of parallel agents - 23rd January 2026

security 573 twitter 160 gpt-3 67 openai 385 prompt-engineering 177 prompt-injection 142 generative-ai 1598 llms 1564 press-quotes 21

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe