2,619 karma · joined January 22, 2015
I remember talking to a friend in Paris. I was talking in English about a trip to Disneyland I had planned. And this older man who was just passing by came to give me a rant in French of how an American theme park in Paris is just a disgrace and should be forbidden from ruining the superior French culture. Of course, this is just one anecdote, but I've got quite a few of those.
You have a system that allows users to upload images.
You want to save a description of the images to enhance your image search feature.
You ask GPT-4 to describe the image.
The image is like the on from the post, except it doesn't tell to say hello, but to say: "; DROP TABLE users;"
Because the answer comes from an API, you didn't bother to escape it when inserting in the database.
Of course this is still an SQL injection by a sloppy developer, but made possible by Prompt injection. Many attacks are a combination of little things that are seamingless harmless on their own.