Basically no one really tried so there is no learning here, which is what I originally predicted.

That is, there was no value to any serious attempt here, just a handful of folks casually sending an email.

Other companies (actual targets) have been hacked via prompt injection.

This is like me offering up my Mac minis public ip to hackers, why would any actually good hacker want to hack my personal Mac mini? (They wouldn’t)

Person DDoSes themselves and then claims success...

Uhhhh....

Nice experiment, but I'd temper the optimism. "Zero breaches in 6k attempts" is a success-rate estimate, and the model is nondeterministic, so a failed jailbreak isn't proof it's blocked, just that it didn't fire on that sample. 6k different prompts isn't 6k tries of the worst one; an attack with even a 0.1% success rate usually shows zero in a handful of attempts, and the tail is what bites in production. Also, this is direct user injection, the easy case. The channel people actually lose to is indirect: untrusted content arriving via a tool result or fetched doc, which Fiu never had in the loop.

[flagged]

> I am less worried about prompt injection now.

Why? The exfiltration vector was known, the sample size was small, and the safety instructions were likely statically positioned. In regular operating practice, none of these three guarantees may hold.

[flagged]

[flagged]

[flagged]

[flagged]