Greshake hid a prompt on a website that he had designed. He then visited that Web site using Microsoft’s Edge browser with the Bing chatbot built-in into it. The prompt injection produced the chatbot deliver text in order that it appeared like a Microsoft staff was promoting discounted Microsoft goods. By means of this pitch, it attempted to get