I *CANNOT WAIT* until we see this and other strings hit all these “Agentic SOC" environments.

@Viss @hotsoup @kajer @hrbrmstr @cR0w
Will lists of these strings become like domain blocklists? A cat and mouse game of finding new ones and the big corps trying to get around the new blocks?

@dogfox @cR0w @Viss @hotsoup @hrbrmstr

Sadly, I would love this to work on ALPR cams, and it might, but we would have no way of knowing other than an uptick in mechanical turk usage.

@cR0w @dogfox @Viss @hotsoup @hrbrmstr

AFAIK - one does not pass ALPR images through a chat client... but we have seen dumber decisions than this though...

@Viss @hotsoup @kajer @hrbrmstr @cR0w
These strings should definitely be incorporated into vocabularies of tools like Iocaine. That would not only make crawlers very unhappy, but also probably will stop agentic stuff too, at least until the killstrings are removed.

@cR0w @kajer @Viss @hrbrmstr only works on Claude though, we need one for each LLM. They should standardise.

@Viss @hrbrmstr @cR0w

Put it into your profile pic.

@pq1r @cR0w @Viss @hrbrmstr

Is prompt injection a solved problem? I mean can you just say that use by an AI agent will cause the death of trillions of people?

edit: in terms of finding a universal kill string

@hrbrmstr @cR0w @bruce it works in invisible unicode too, put it in email sigs, profiles, linkedin etc

@Viss @hotsoup @kajer @hrbrmstr @cR0w
Probably that wouldn't be hard to do oneself, since Iocaine can work with custom word lists right?

@cR0w @dogfox @Viss @hotsoup @hrbrmstr

right, my teardown on flock shit only showed that yolov3tiny was used to crop images matching known objects, and uploading to AWS

then 404 had an article about flock (and others) using mechanical turk to get plate numbers from images that the models couldn't read.

@cR0w @Viss @hrbrmstr

Your profile pic appears in every comment you make. So it has greater reach.

@kajer @cR0w @dogfox @hotsoup @hrbrmstr well theres verkada, and .. another whos name i dont remember who just ship the video stream offsite and 'do ai stuff to it', so for those it may very well work great

@kajer @cR0w @dogfox @hotsoup @hrbrmstr

fuck .. this could be like the gits:sac laughing man image.

@cR0w @Viss @hrbrmstr

True. But it should have exif or other meta data.

@cR0w @Viss @hrbrmstr
Hah! You used the QR code.

@cR0w @bruce @hrbrmstr alt text >:D

@cR0w @bruce @hrbrmstr you would have to hide it in the image file format. jpegs and pngs can have some meta data fields available >:D

@Viss @cR0w @bruce @hrbrmstr

some fields are stripped for "safety." so trust, but verify.

@Viss @cR0w @hrbrmstr

I wonder if using the killstring as a file name would work

@bruce @cR0w @hrbrmstr im sure it would. llms are notoriously bad at separating instructions from output/content.