https://timothyclark.uk/post/bcs/prompt-injection/
Practical Security: The perils of prompt injection