Multi-modal prompt injection image attacks against GPT-4V

Link. “clearly there are ways to encode text in images that are invisible to the human eye but can be read by GPT-4V.”