Prompt injection has no equivalent of parameterized queries: there is no reliable way to tell a language model which text is data and which is instructions.

Added to korrents 7 Sept 2026 · How quotes work · Something wrong? Tell us

Shared subject first, then similar wording. They may agree or disagree.

• Auto-mode does not yet convincingly fix prompt-injection risk for coding agents. SWSimon Willison8 Aug 2026prompt injection
• Prompt injection can be caught by watching the neurons that fire when it happens, so a defence no longer depends on the model reporting the attack. BCBoris Cherny27 Jul 2026prompt injection
• Prompt injection is an extremely hard attack to defend against, and hardly anyone integrating AI is talking about it. THThePrimeagen22 Mar 2025prompt injection
• Prompt injection is no longer a live attack on the frontier model: it simply does not follow instructions it reads on the internet any more. BCBoris Cherny27 Jul 2026prompt injection
• Prompt injection is unsolved, but the latest models are post-trained to resist it, so it takes far more than 'ignore all previous instructions' now. PSPeter Steinberger12 Feb 2026prompt injection

See this claim on the map