There's also this which uses LLM prompt injection -- https://kai-greshake.de/posts/inject-my-pdf/ https://kai-greshake.de/posts/inject-my-pdf/ -- which is funni

There's also this which uses LLM prompt injection -- https://kai-greshake.de/posts/inject-my-pdf/ https://kai-greshake.de/posts/inject-my-pdf/ -- which is funnier and more absurd. No clue if it works in the wild. Maybe? Discussed here: https://news.ycombinator.com/item?id=35993498 https://news.ycombinator.com/item?id=35993498