MissConstrue
@MissConstrue@mefi.social
Why, I remember when this was all just Arpanet. I'm over educated, opinionated, and quite possibly wrong about everything. Published author, banned comics publisher, ethicist, cranky old philosopher careered in information architecture. AKA: I contain multitudes. Black lives matter. Trans lives matter. Your life matters. End Colonialism. Free Palestine. Eat the Rich. Avatar: A crop of "The Letter" by Delphin Enjolras, against a background of prairie flowers.
mefi.social
Ok, to start, let me define "#stenography" in #infosec. Steganography in computer security is the practice of hiding information within another file, message, image, or video, making the concealed information undetectable to an unsuspecting observer.
It is not necessarily malicious, but it certainly can be. I tell you that story to tell you this one:
#Claude Code Is Steganographically Marking Requests
CC silently alters the system prompt using invisible-ish Unicode markers. It encodes proxy / gateway classification into a sentence that looks like plain English. It hides the domain list behind XOR and base64.
Is it malicious? Probably not. Is a pretty big marker on the "Why not to trust AI companies" list of reasons? Yeah, yeah it is.
https://thereallo.dev/blog/claude-code-prompt-steganography
#AI #security #ClaudeCode #Anthropic