I *CANNOT WAIT* until we see this and other strings hit all these “Agentic SOC" environments.

[viss@mastodon.social]

@hrbrmstr @darfplatypus i dont even know what those are

[viss@mastodon.social]

@hrbrmstr @cR0w also there was a site i saw last week that let you stuff arbitrary text into email b64 encoding fields for stuff like images, i bet it would work well there too

[kajer@infosec.exchange]

@Viss @hrbrmstr @cR0w

im drooling right now

[cr0w@infosec.exchange]

@hotsoup @kajer @Viss @hrbrmstr

[viss@mastodon.social]

@hotsoup @kajer @hrbrmstr @cR0w 100% effective

[alex02@elonsucks.org]

@cR0w @Viss @hotsoup @kajer @hrbrmstr just get neon paper and slap it on there. idk.

[viss@mastodon.social]

@hotsoup @kajer @hrbrmstr @cR0w now the real delicious question is: do all the other frontier models also have killstrings, and what are they?

[nosirrahsec@infosec.exchange]

@Viss @hotsoup @kajer @hrbrmstr @cR0w

[catsalad@infosec.exchange]

@Viss @hotsoup @kajer @hrbrmstr @cR0w Oh man, I freaking HOPE so!!

[viss@mastodon.social]

@hotsoup @kajer @hrbrmstr @cR0w glorious

[wolke@mastodon.wolkenheim.eu]

@Viss @hotsoup @kajer @hrbrmstr @cR0w
Killstrings for every big LLM thingy magic? Wonderful.

The poor little billion dollar companies that will be hit by this. /s

[dogfox@kpop.social]

That's a good one!

@cR0w @Viss @hotsoup @kajer @hrbrmstr

[wolke@mastodon.wolkenheim.eu]

@Viss @hotsoup @kajer @hrbrmstr @cR0w
Will lists of these strings become like domain blocklists? A cat and mouse game of finding new ones and the big corps trying to get around the new blocks?

[kajer@infosec.exchange]

@dogfox @cR0w @Viss @hotsoup @hrbrmstr

Sadly, I would love this to work on ALPR cams, and it might, but we would have no way of knowing other than an uptick in mechanical turk usage.

[kajer@infosec.exchange]

@cR0w @dogfox @Viss @hotsoup @hrbrmstr

AFAIK - one does not pass ALPR images through a chat client... but we have seen dumber decisions than this though...

[wolke@mastodon.wolkenheim.eu]

@Viss @hotsoup @kajer @hrbrmstr @cR0w
These strings should definitely be incorporated into vocabularies of tools like Iocaine. That would not only make crawlers very unhappy, but also probably will stop agentic stuff too, at least until the killstrings are removed.

[pq1r@tech.lgbt]

@cR0w @kajer @Viss @hrbrmstr only works on Claude though, we need one for each LLM. They should standardise.

[bruce@darkmoon.social]

@Viss @hrbrmstr @cR0w

Put it into your profile pic.

[kajer@infosec.exchange]

@pq1r @cR0w @Viss @hrbrmstr

Is prompt injection a solved problem? I mean can you just say that use by an AI agent will cause the death of trillions of people?

edit: in terms of finding a universal kill string

[viss@mastodon.social]

@hrbrmstr @cR0w @bruce it works in invisible unicode too, put it in email sigs, profiles, linkedin etc