What I find missing in the comments is any examination of the following sequence of hypothetical events: 1) Adversarial input conditioning is utilized to assoc

What I find missing in the comments is any examination of the following sequence of hypothetical events: 1) Adversarial input conditioning is utilized to associate an artifact with others, or a behavior. 2) Oblivious victim users of the AI are manipulated into a specific behavior which achieves the adversary's objective. Imagine a code bot wrongfully attributing you with ownership of pwned code, or misstating the license terms. Imagine you ask a bot to fill in something like "user@example.com" and instead of filling in (literal) user@example.com it fills in real addresses. Or imagine it's a network diagnostic tool... ooh that's exciting to me. Past examples of successful campaigns to replace default search results via creative SEO are offered as precedent.