Unicode variation selectors for invisible LLM injection

Comments (1)

mpoteat · 1h ago

Recently, LeetCode has begun hiding instructions (using css) in their competitions to use particular unique variable names like 'dexolarniv' - and anyone using such a variable name in their submission gets summarily banned.

In their implementation, the hidden prompt does show up on copy/paste - however I tested this method, and the LLM (i.e. ChatGPT) does still follow the Unicode-hidden instruction and uses 'dexolarniv' in the code returned! So I think this is (right now) a viable invisible injection strategy.

Signal Secure Backups (signal.org)

OpenWrt: A Linux OS targeting embedded devices (openwrt.org)

Job Mismatch and Early Career Success (nber.org)

Firefox 32-bit Linux Support to End in 2026 (blog.mozilla.org)

iPhone Dumbphone (stopa.io)

Experimenting with Local LLMs on macOS (blog.6nok.org)

Will Amazon S3 Vectors Kill Vector Databases–Or Save Them? (zilliz.com)

Dietary omega-3 polyunsaturated fatty acids as a protective factor of myopia (bjo.bmj.com)

NPM debug and chalk packages compromised (aikido.dev)

Color NPM Package Compromised (fasterthanli.me)

The story of how RSS beat Microsoft (buttondown.com)

Browser Fingerprint Detector (fingerprint.goldenowl.ai)

Immich – High performance self-hosted photo and video management solution (github.com)

Meta suppressed research on child safety, employees say (washingtonpost.com)

A complete map of the Rust type system (rustcurious.com)

Escaping the Internet (ryanckulp.com)

Building an acoustic camera with UMA-16 and Acoular (minidsp.com)

14 Killed in anti-government protests in Nepal (tribuneindia.com)

Using Claude Code to modernize a 25-year-old kernel driver (dmitrybrant.com)

The MacBook has a sensor that knows the exact angle of the screen hinge (twitter.com)

The Key Points of Working Effectively with Legacy Code (understandlegacycode.com)

Why Is Japan Still Investing in Custom Floating Point Accelerators? (nextplatform.com)

VMware's in court again. Customer relationships rarely go this wrong (theregister.com)

Formatting code should be unnecessary (maxleiter.com)

Australian startup joins race to build local ChatGPT (afr.com)

Indiana Jones and the Last Crusade Adventure Prototype Recovered for the C64 (gamesthatwerent.com)

We Rarely Lose Technology (2023) (hopefulmons.com)

Integer Programming (2002) [pdf] (web.mit.edu)

GPT-5 Thinking in ChatGPT (a.k.a. Research Goblin) is good at search (simonwillison.net)

Intel Arc Pro B50 GPU Launched at $349 for Compact Workstations (guru3d.com)

Writing by manipulating visual representations of stories (github.com)

After nearly half a century in deep space, every ping from Voyager 1 is a bonus (theregister.com)

New Google Court Doc: Open Web Is in Rapid Decline (seroundtable.com)

Writing Code Is Easy. Reading It Isn't (idiallo.com)

Look Out for Bugs (matklad.github.io)

Google gets away almost scot-free in US search antitrust case (computerworld.com)

Creative Technology: The Sound Blaster (abortretry.fail)

What if artificial intelligence is just a "normal" technology? (economist.com)

Analog optical computer for AI inference and combinatorial optimization (nature.com)

How many dimensions is this? (lcamtuf.substack.com)

How inaccurate are Nintendo's official emulators? [video] (youtube.com)

The AI bubble argument misunderstands both bubbles and AI (danielmiessler.com)

How many SPARCs is too many SPARCs? (thejpster.org.uk)

Raspberry Pi Connect (raspberrypi.com)

Garmin beats Apple to market with satellite-connected smartwatch (macrumors.com)

Microdosing GLP-1 drugs became a longevity 'craze' (washingtonpost.com)

Big business and capitalism are becoming less and less popular with Americans (businessinsider.com)

No more data centers: Ohio township pushes back against influx of Amazon, others (dispatch.com)

Exploring Grid-Aware Websites (nicchan.me)

Taking Buildkite from a side project to a global company (valleyofdoubt.com)

Unicode variation selectors for invisible LLM injection

Comments (1)