Post

What's this? Oh just Snickers using ClickFix and indirect prompt injection as part of a marketing campaign. `https://www.snickers[.]com/hungr-ai` `https://www.snickers[.]com/digitalsnickers` The second URL contains prompt injections to change model behavior. And this is the best-case scenario

Indirect prompt injection was *always* going to be the end state of LLM-based navigation of the web. It's why the AI browsers failed. It's the most obvious marketing strategy imaginable. And we're just getting started.