‘What is this chatbot vulnerable to?’ ‘Yes.’
Text version: https://pivot-to-ai.com/2025/08/22/prompt-inject-an-ai-chatbot-with-an-image/

Patreon: https://www.patreon.com/davidgerard
Ko-Fi: https://ko-fi.com/A1529D5
Buy me nice things: https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6
Get an extremely cool Pivot to AI shirt or mug: https://pivot-to-ai.redbubble.com

Sources:

Weaponizing image scaling against production AI systems https://blog.trailofbits.com/2025/08/21/weaponizing-image-scaling-against-production-ai-systems/
Multimodal neurons in artificial neural networks https://openai.com/index/multimodal-neurons/
Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks in Machine Learning https://www.usenix.org/conference/usenixsecurity20/presentation/quiring
“In Unicode, flag emojis are represented by the emoji” https://x.com/goodside/status/1745511944465870901
“Gemini still gets tripped by it.” https://mastodon.social/@eliocamp/115069737789365526

USENIX Security ’20 — Adversarial Preprocessing: Understanding and Preventing Image-Scaling Attacks https://www.youtube.com/watch?v=6xEda18WIUU&list=UU9rJrMVgcXTfa8xuMnbhAEA
Microsoft Copilot: From Prompt Injection to Exfiltration of Sensitive Data | Exploit Chain Explained https://www.youtube.com/watch?v=A-ibygtWeYc&list=UU9rJrMVgcXTfa8xuMnbhAEA

Full Pivot to AI playlist: https://www.youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA

Replace your employees with a spam bot! (and Web3)

Patreon: https://www.patreon.com/davidgerard
Ko-Fi: https://ko-fi.com/A1529D5
Buy me nice things: https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6
Get an extremely cool Pivot to AI shirt or mug: https://pivot-to-ai.redbubble.com

Sources:

MIT report: 95% of generative AI pilots at companies are failing https://fortune.com/2025/08/18/mit-report-95-percent-generative-ai-pilots-at-companies-failing-cfo/
The GenAI Divide: State of AI in Business 2025 (PDF) https://mlq.ai/media/quarterly_decks/v0.1_State_of_AI_in_Business_2025_Report.pdf

Project NANDA YouTube https://www.youtube.com/@ProjectNANDA
NANDA Adapter https://github.com/projnanda/adapter

Previously on Pivot to AI:

How to sell AI slop to the US military — with Vannevar Labs and MIT Tech Review https://pivot-to-ai.com/2025/04/13/how-to-sell-ai-slop-to-the-us-military-with-vannevar-labs-and-mit-tech-review/
video: https://www.youtube.com/watch?v=IK0YqwqG1TU&list=UU9rJrMVgcXTfa8xuMnbhAEA

Full Pivot to AI playlist: https://www.youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA

It’s not ‘data fraud,’ it’s ‘synthetic sampling’!

Patreon: https://www.patreon.com/davidgerard
Ko-Fi: https://ko-fi.com/A1529D5
Buy me nice things: https://www.amazon.co.uk/hz/wishlist/ls/3Q8VZW46J6DM6
Get an extremely cool Pivot to AI shirt or mug: https://pivot-to-ai.redbubble.com

Sources:

Will Trump Win in 2024? Predicting the US Presidential Election via Multi-step Reasoning with Large Language Models (PDF) https://arxiv.org/pdf/2411.03321v1
Your Polls On ChatGPT https://report.verasight.io/synthetic-sampling/

Full Pivot to AI playlist: https://www.youtube.com/playlist?list=UU9rJrMVgcXTfa8xuMnbhAEA