I do agree that trying to solve this within LLM will be hard. But the problem seems easier to solve in practice than vision, unless people come up with a way to make an adversarial string that reads like natural language

→ View original post on X — @_yutaroyamada