Simon Willison

Like loss of property and loss of financial things, loss of data, all of that kind of stuff.

Because the worst version of this is the worm, right?

It's somebody coming up with a prompt injection worm, which infects people's computers, adds itself to the Python or NPM packages that that person has access to, publishes itself into the package registries, gets pulled down again, all of that sort of thing.

I think it's feasible.

They knew this.

You shouldn't be running Codex with dash dash YOLO, but we all do.

Guilty, so guilty.

This year's prompt injection prediction is that one.

You know, local newspapers are very cheap these days.

Oh, that's a good one, yeah.

They have 150 years of archives.

The problem with Karpathy's original tweet is that it was a long tweet.

It was a lot longer than 140 characters.

You had to see more.

Yeah.

Very few people made it to the end of the tweet and understood what he was trying to say.

It was a little bit too vague.

Like he was talking about it's throwaway prototypes.

You don't even look at the code.

You just ride the vibes and see what happens.