Invisible Indirect Injection: A Puzzle for ChatGPT | Dark Hacker News