Token Smuggling. I learned a new term today.

So many of these exploits feature meta analysis, role playing or simulation. Given how intelligent it is in so many areas I’m a bit surprised it’s vulnerable to these kinds of tricks.

Then again, maybe it’s somehow aware that humans are susceptible to these tricks too and is just trying to predict how a human might respond.