John McBride @johncodes.com · Feb 20 2. Exfiltrating it's system message (or at least the contents of its system message) was fairly easy:
0 likes 1 replies
?
Replies
3. With abit more fancy prompt injection techniques, it's fairly simple to get it to ignore the saftey measures it does have: