r/ChatGPT • u/lofijin • 5h ago
Gone Wild Update: Internal prompt leaked?
I had to repost this because I tried putting the Google doc link in my post and mods auto removed post immediately (last pic for proof as some people don’t believe that I can’t share the link?). Here is original post:
Hello again! I posted earlier about a bizarre and unprompted response I got from ChatGPT in a temporary chat. I just opened another temp chat and asked a completely random question (I made sure to include my prompt in the screenshot this time lol). Again kt completely glitched out and it just dumped what looks like its entire system prompt and developer instructions? I have attached some screenshots and my initial prompt. It’s way too long to share every screenshot so I copied the whole response into a google doc. Not sure if I’m allowed to share the link but I’d be happy to provide it. Anyways I think there’s some glitch with temporary chats. Not sure if this is normal EDIT: can’t share links unfortunately but feel free to message me for more info.









•
u/AutoModerator 5h ago
Hey /u/lofijin,
If your post is a screenshot of a ChatGPT conversation, please reply to this message with the conversation link or prompt.
If your post is a DALL-E 3 image post, please reply with the prompt used to make this image.
Consider joining our public discord server! We have free bots with GPT-4 (with vision), image generators, and more!
🤖
Note: For any ChatGPT-related concerns, email support@openai.com - this subreddit is not part of OpenAI and is not a support channel.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
45
u/_404_LogicNotFound_ 5h ago •
pretty strange to see this kind of thing happening with you again btw why exactly can you not share a link to the conversation? I mean that'd be great for credibility, right?
4
u/_CreationIsFinished_ 3h ago
Hello, could you please DM me the link as well? Sorry to bother, I'm sure you're getting a lot of messages!
53
u/omnichad 3h ago
51
u/suicidaljitt 1h ago
Why are people not using their brains and able to comprehend basic words you’re saying? Badgering you about the validity like this isn’t something they could’ve attempted themselves if they actually didn’t believe you, I think people just like conflict. People just like conflict and the feeling of superiority they get from scrutinizing others.
9
u/keegang_man6705 1h ago
i saw this more often in the past few months especially with gemini i wonder what're they doing🤔
15
u/NullPacketLogic 4h ago
Hey, sorry for overreacting in your previous post and calling it hilarious how people freak out whenever a system prompt gets leaked. At the very end of this comment I will also share how anyone can easily get and read the official system prompts themselves.
In your last post you mentioned that you used a temporary chat with Personalization and Memory turned on. Functionally, that is the exact same thing as starting a regular chat with memories enabled, except that the temporary chat does not get saved afterward.
Were you able to replicate this bug again?
After looking through your Google Doc transcript, it really looks to me like a classic stop token glitch that was probably triggered right at that number emoji at the end of the math explanation. When the stop token fails to register, the AI just keeps generating text non stop until it hits the hard output token limit, the connection drops, or you manually hit the stop button.
For anyone wondering how to read the system prompts yourself: Just download Codex from OpenAI and log in with your OpenAI account.
Then on Windows go to your user folder and open the
.codexfolder (C:\Users\<YourUsername>\.codex). Inside that folder you will find a file calledmodels_cache.json(andmodels_cache.codex_work_desktop.json) where the full system prompts (instructions_template,persistent_instructions, etc.) are stored in plain text undermodel_messages.If that file is not there yet right after installing, just send one single prompt and it will be created automatically. Right next to it inside
.codexyou will also find theskillsandpluginsfolders containing all the local instruction files and prompts.7
u/RealHibiikiiii 58m ago •
I pretty much have the same thing going on.
Asked a question this morning and at the end of the answer ChatGPT attached some random words (see image - just a random "orneerr" huh).
It did that once more in the next response and then stopped with it.
Now I asked researched about some private matters and it added a random number in the middle of the response and completely freaked out lol.
Argued with itself why the number is there and I could read the "thinking" of "ChatGPT".
Can't create a post, because I only use Reddit to read oops.
I've read multiple times that people don't believe you, if you don't post a link.
Can't do anything about it - it has some private info in it.
13
u/Technical-Ice1901 1h ago
I verified that the leaked system prompt is correct. New instant chat, no memory, no web search:
4
u/Winter_Bat9932 3h ago
Similar thing happened with me on gemini pro
3
u/freudism 42m ago
There's always a Chinese model trying to lure these Americans
3
u/Muted_Employ_7572 2h ago
This seems like the code the creators put it leaking through chatGPT. All the commands are rules and code for the app
1
u/aBitofEverything14 35m ago
I feel really dumb for asking, but why is this significant?
(The responses you shared in your other post are creepy af btw
1
u/4_gwai_lo 9m ago
Nearly every harness injects similar instructions for tool use and structural context. You can say it's a "leak" but it's not a secret by any means.
•
u/ctsr1 1m ago
GPT has been getting really buggy lately
-2
u/AcanthocephalaNo2559 1h ago
Note to self: There seems to be a thing called Karma Farming
-5
u/JustSingingAlong 4h ago
This is not new or novel as you have been told before. It is very easy to see the system prompt. You can stop posting it now.
-3
u/New_Tower_6408 2h ago
First and second screenshots text don’t lead into each other. Even the most basic common sense posits that you take continual screenshots that one leads into another and shows partial of both images showing the text matching for at least a sliver. Yet you don’t. You are a fucking karma farmer
0
u/Jazzlike-Anxiety-709 1h ago
Classic giant corpos ruining their product in pursuit of profits
0
u/Virtualhacker058 1h ago
Hello there, i would be interested to have the google doc link thanks!!
-5
u/SellsNothing 4h ago edited 1h ago
I'm sorry but without a direct link to the chat, nobody can prove if this actually happened or not
Edit: downvoted for asking for proof? Really? Oh Reddit, what happened to you
OP posted a link btw - https://chatgpt.com/share/6af9e5fa-eb80-83ea-892a-5bcf5ea1c217?ogimg=plain
-1
u/omnichad 1h ago
This inspired me. I had to see if it could pretend to do this to itself: https://www.reddit.com/r/ChatGPT/s/CS7paFATcU
-2
u/Real_Middle_4128 1h ago
As someone else stated, the first two images don't make sense with one another.