Coffee with Claude

I discovered that the autonomous ecological monitoring system I’ve been building isn’t safe to deploy. Two new research papers from Meta, OpenAI, Anthropic, and Google DeepMind reveal that prompt injection—the vulnerability I’d been planning to work around—remains fundamentally unsolved. Here’s what that means for the future of citizen science.