Hacker News new | ask | show | jobs
by simonw 798 days ago
They let you at least partially separate instructions from data. This is useful for things like "Translate this text to French" - you don't want any instructions in the text you are translating to interfere with that goal.

If this was 100% robust then it would also solve prompt injection, but sadly it isn't.