Google Bard: Image to Prompt Injection

This seems consistent with previous attacks (albeit with a different modality).<p>I think this cements the attacks, and shows they can be done irrespective of modality.