On: Indirect Prompt Injection on Bing Chat

[greshake]

We mention such exfiltration techniques in the paper, however right now Bing Chat does not have access to real-time data. Rather, it accesses the search cache without side effects like queries to the attacker's server.