Simon Willison on Lenny's Podcast: 'Dark Factories' Are Coming, Prompt Injection Is the 'Lethal Trifecta,' November 2025 Was the Inflection Point

simonwillison.net·high signal

In a 100-minute appearance on Lenny's Podcast (April 2-3), Willison declared that November 2025 — when GPT-5.1 and Claude Opus 4.5 shipped — crossed the threshold where AI-generated code went from 'mostly working' to 'almost always doing what you told it to do.' He outlined the 'dark factory' pattern where nobody writes or reviews code and AI does its own QA, then warned that prompt injection remains fundamentally unsolved through his 'lethal trifecta' framework (private data + untrusted content + exfiltration vector), comparing the industry's risk normalization to the Challenger disaster.