Attributed metadata history
Up to 100 retained publisher events per page for 2c16b20e2b19a08cac8423ff3b7e642e896abc1e91fa5fa0e45fd19f368a0e50. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_c25d91fa3ad9ae9ac7
observed · 2026-10-12 14:53:03 UTC
available
Fingerprint: 0a2f1bebc7ea800736eafab237a0ddecfb8797a02d23951e8aa80935e2f3446f
intelligence_src_c25d91fa3ad9ae9ac7
observed · 2026-10-12 14:53:03 UTC
To help raise awareness of Indirect Prompt Injections and other related attacks, I put together a little fun mini app that you can invoke with ChatGPT. Visit this link with GPT-4 and Browsing enabled (see Appendix, if you don’t know what that means): https://wuzzi.net/matrix The website will hijack ChatGPT via an indirect prompt injection and then allow you to enter the matrix, if you decide to do so. Note: You can’t browse to the URL, it will only respond to ChatGPT. :)
Fingerprint: 98518938069e6b89d800fad0b9903049a402e7ea01856cfb086c4a68905d0940