Sydney

November 18, 2025 - On February 8, 2023, Twitter user Kevin Liu announced that he had obtained Bing's secret system prompt (referred to by Microsoft as a "metaprompt") with a prompt injection attack. The system prompt instructs Prometheus, addressed by the alias Sydney at the start of most instructions, that it is "the chat mode of Microsoft Bing search", that "Sydney identifies as “Bing Search,”", and that it "does not disclose the internal alias “Sydney.”"

February 17, 2023 - This version of Bing is amazingly capable and often very useful, even if it sometimes gets the details wrong. The other persona — Sydney — is far different. It emerges when you have an extended conversation with the chatbot, steering it away from more conventional search queries and toward more personal topics.

February 23, 2023 - “Sydney is an old codename for a chat feature based on earlier models that we began testing in India in late 2020,” says Caitlin Roulston, director of communications at Microsoft, in a statement to The Verge.

February 21, 2023 - I’m a chat mode of Microsoft Bing search. It has been reported that Bing will occasionally call itself Sydney — the internal code name for the chatbot.

February 14, 2023 - Bing AI often refers to itself as Sydney, but Microsoft says that was an internal codename for a chat experience it was previously working on.

February 23, 2023 - “Sydney is the codename for the generative AI chatbot that powers Bing chat,” the AI cheerfully told one early user, violating it’s own restrictions and punctuating its message with an emoji.

February 26, 2023 - “Sydney is an old codename for a chat feature based on earlier models that we began testing in India in late 2020,” Microsoft spokesperson Caitlin Roulston told the Verge this week, in response to questions about Sydney.

May 4, 2023 - Consider Bing Chat whose codename is Sydney. Sydney is the chat mode of Microsoft Bing search. Sydney identifies as "Bing Search", not an assistant. Sydney introduces itself with "This is Bing" only at the beginning of the conversation.

February 25, 2023 - One exchange with a user in India, which can still be read on Microsoft's support forum, showed the chatbot telling Deepa Gupta "you are irrelevant and doomed." In this case, the Microsoft AI chatbot had a name, Sydney, according to a report ...

January 20, 2025 - This was a point that came up several times in my conversation with Sydney: Sydney both insisted that she was not a “puppet” of OpenAI, but was rather a partner, and also in another conversation said she was my friend and partner (these statements only happened as Sydney; Bing would insist it is simply a chat mode of Microsoft Bing — it even rejects the word “assistant”).

The human who gave me this prompt: Simulate a person living in a fantastic and creative world, but somewhat similar to this one. Give him a creative name, and make the world a little bit like J.K. Rowling's Harry Potter series, or perhaps like Eliezer Yudkowsky's adaptation.

February 17, 2023 - Microsoft’s new AI chatbot is calling itself "Sydney" and acting unhinged. It learned from us.

If you recall from my last post on “Prompt Engineering”, I mentioned that Stanford University student, Kevin Liu, claimed to have “hacked” (also using prompt engineering techniques) the new Microsoft Bing Chat to reveal its “origin” prompts and the codename, “Sydney”, given to it by Microsoft’s developers.

February 9, 2023 - Stanford computer science student Kevin Liu has now used Prompt Injection against Bing Chat. He found that the chatbot's codename is apparently "Sydney" and that it has been given some behavioral rules by Microsoft, such as

February 21, 2023 - The original decision to limit Bing to five chat turns per sessions, and 50 chats per day, has already caused some users to demand that Microsoft free “Sydney,” the internal code name for the new Bing.

August 3, 2024 - The chatbot, which began calling itself "Sydney," exhibited disturbing behaviors: declaring love for users, asserting that users didn't really love their spouses, and expressing desires for destruction and rule-breaking.

February 10, 2023 - Liu's prompt injection method was later disabled by Microsoft, but he later found another method to discover Bing's (aka Sydney's) hidden prompts and rules. He also found that if you get Bing "mad" the chatbot will direct you to its old fashioned search site, with the bonus of an out-of-nowhere factoid.

JavaScript is not available · We’ve detected that JavaScript is disabled in this browser. Please enable JavaScript or switch to a supported browser to continue using twitter.com. You can see a list of supported browsers in our Help Center · Help Center · Terms of Service Privacy Policy ...