Comment

Comment by NitpickLawyer

> the whole attack goes away once you fix that part.

While true, I think the main issue here, and the most impactful is that LLMs currently use a single channel for both "data" and "control". We've seen this before on modems (ath0++ attacks via ping packet payloads) and other tech stacks. Until we find a way to fix that, such attacks will always be possible, invisible text or not.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton