News for hackers. Stuff that matters.
Re:Multi-modal prompt injection image attacks against GPT-4V by simonw on Saturday October 14, 2023 @11:53AM (#37881461)
ChatGPT didn't grow the ability to visit URLs until they introduced ChatGPT Browse - though it frequently hallucinated that it could: https://simonwillison.net/2023/Mar/10/chatgpt-internet-acces...

The exfiltration demo in the blog post doesn't show ChatGPT fetching a URL: it shows it outputting an image tag with an src= pointing at an external URL, which the user's browser then attempts to load.

There are no comments on this comment yet.