Reading Time: 5 minutesFernando Irarrázaval’s public challenge saw 2,000 people send 6,000 emails trying to extract secrets from an AI assistant, and none succeeded — a result that Simon Willison’s analysis calls consistent with broader improvements in frontier model training against prompt injection. However, Willison cautions that failed casual attempts offer no guarantee against a sophisticated, targeted attacker, and the post explains what this means for Indian professionals deploying AI in real business workflows.