Why does prompt injection work | Hacker News Reader