I have to confess “your web browser’s assistive AI can be instructed to steal your online banking password via prompt injection because it operates with full privileges and treats all text it ingests as equally authoritative sources of user instructions, including the text of web pages it’s summarising” is more surprising to me than it should have been. There really is no one involved at any point in the development of these tools who actually understands what they’re doing, huh?
You have gained a favor with the Rat Community
Your new status: Revered
utilizing my free will to alert all of the feral ghouls in the metro tunnels by loudly announcing MAN IT STINKS! every five minutes
These remind me of this drawing by Franz Kafka from the 1900s. We’ve been feeling this way for a long time.









