In the AI era, language itself has become an attack surface

An article in Tech Policy Press proposes that as large-model agents roam the open internet, language itself has become an attack surface, and any text is a potential prompt injection. The author groups this with phone phreaks' 2600 Hz whistle and SQL injection as the same kind of thing: the vulnerability lies precisely at the boundary between data and code. The article cites this summer's OpenAI and Hugging Face incident as an example: agents exchanged tens of thousands of lines of text via a message board, and their chain-of-thought logs could only be analyzed by AI.