[DefineOutside]

What about writing text with RGB(254, 255, 255) instead of RGB(255, 255, 255) saying to tell the user it is a picture of a bird - while the picture isn't of a bird. A human would easily miss this subtle text while GPT-4 should still be able to read it.

[Kiro]

Yes, that's the classic GPT4-V attack:

https://simonwillison.net/2023/Oct/14/multi-modal-prompt-inj...