I think GP is referring to "Prompt Injection as Role Confusion" (https://role-confusion.github.io/). It was discussed on HN several weeks ago (https://news.ycombinator.com/item?id=48631888)