OpenAI admits AI browsers face unsolvable prompt attacks