Ask HN: Is prompt injection going to be a new common vulnerability? There was a post [0] recently about the bing chatGPT assistant either citing or hallucinating its own initial prompt from the (in theory) low privileged chat