You write down what you thought.
Press o. Give it stars, file it in a collection, and keep the sentence you would otherwise have said out loud and lost.
Everything I know about prompt injection, two years on
The attack that still has no fix, the mitigations that actually help, and why every agent vendor keeps rediscovering the same wall.
My take
Everything I know about prompt injection, two years onMy take
Everything I know about prompt injection, two years on- o opens the drawer
- ★ one to five
- # a collection is a tag

HN comment · kestrel_
The dual-model pattern only works if the quarantined side can never emit anything the privileged side treats as instructions.