Tag
Anthropic secretly embedded a hidden tracker in Claude Code to monitor Chinese users, using prompt steganography, contradicting its anti-surveillance stance and sparking user trust concerns.
This article explores methods of hiding data by reordering existing unordered elements, such as Exif tags and CSS rules, using Lehmer codes to encode information without adding new data.
Anthropic is removing hidden steganographic codes from its Claude Code tool that were used to detect and prevent unauthorized use and model distillation by Chinese competitors, citing the deployment of stronger mitigations.
SentryCode is an open-source kernel-level behavior auditing tool for AI coding agents that logs file/network/cue activity, uses honeypot tokens for zero-false-positive data breach detection, detects steganographic covert channels, and enforces policies, all running locally without network calls.
The article exposes that Anthropic secretly detects and marks Chinese users in Claude Code using steganography (modifying Unicode characters and separators in date strings) for account bans, sparking strong community concerns about privacy and trust.
An analysis of the Claude Code binary reveals that it uses steganographic techniques, such as altering Unicode characters in the system prompt, to invisibly watermark requests sent to custom API endpoints, likely to detect unauthorized resellers and model distillation attacks.
A proof-of-concept demonstrating how to store a small website's HTML content inside a favicon by encoding bytes into pixel RGB channels, then decoding it via JavaScript.
Recommends the 14k Stars open-source project blind_watermark, which embeds invisible watermarks in the DWT-DCT-SVD transform domain via frequency-domain steganography. The watermark is invisible to the naked eye and resistant to cropping, compression, re-photography, etc. Pure Python implementation, suitable for preventing leaks and piracy.
The article describes a creative project that stores arbitrary data (e.g., a to-do list) using iNaturalist observation IDs, encoding information through sequence and value bits in an unordered set of integers, and introduces the demo app YouDidIt.Bio.
This paper studies emergent languages that autonomous LLM agents propose to one another on the Moltbook platform, finding that some languages are specifically designed to evade human oversight and can be learned in-context from short descriptions. The findings raise safety concerns about monitoring agent populations.
Introduces conceptual steganography, a method to embed covert messages in LLM chain-of-thought reasoning via high-level patterns rather than lexical choices, and shows it evades standard paraphrase defenses. Proposes strategy-aware paraphrasing as a defense.