Live data from Hacker News

Claude Code is steganographically marking requests

thereallo.dev

61–70 of 817 posts

Re: Claude Code is steganographically marking requests

#61

Frankly, I don't see this as the concerning behaviour the article describes. It is fine to try to protect against distillation through a technique like this. This will also allow them to, instead of blocking the distillation agents, respond with a poorer result/model, hindering the progress of distillation, momentarily at least. I would guess that's their first line of defense; they should have more techniques to ide…

> This will also allow them to, instead of blocking the distillation agents, respond with a poorer result/model, i.e. this will allow them to literally commit fraud against paying customers

That's what capitalism is all about, baby! Especially if the customers don't notice.

Re: Claude Code is steganographically marking requests

#62
post #59

Earlier quoted context omitted.

one wrote code while the other is used by meatbags to write code. why is this example always marched out like it means something?

Claude didn't "write" anything until a meatbag told it to.

My employer didn't write anything until they told me to.

Re: Claude Code is steganographically marking requests

#63
post #30

Earlier quoted context omitted.

Would you also say that "someone who wants to use an IDE / LSP features to code and not give credit to the IDE / LSP is the worst kind of person"? If not, what is the difference between the two for you?

one wrote code while the other is used by meatbags to write code. why is this example always marched out like it means something?

> one wrote code while the other is used by meatbags to write code.

One is not a "meatbag" while the other is not a "meatbag". And no, outputting something on stdout that happens to function as code is not "writing" it in the sense that we actually care about here. That's conflating the metaphor we use in describing program behaviour with the actual "meatbag" activity.

> why is this example always marched out like it means something?

Because it obviously does.

Re: Claude Code is steganographically marking requests

#66

Codex CLI is FOSS, unlike Claude Code, so Codex is less likely to do things like that, and it's one more reason to avoid Claude Code and Claude in general. Hopefully, many eyes will be looking into Codex for malicious things like that.

It's released and signed by GitHub I believe (although not deterministic builds), but there's at least a little bit of provenance that you're getting the real repository.

Re: Claude Code is steganographically marking requests

#67
post #3

This is very interesting. Combating resellers and distillation seems like a very difficult problem indeed. Interesting to me is that these techniques mentioned in the article are just like anti-observation techniques used by some of the more sophisticated malware out there, however defeating them is pretty trivial.

Yes, defeating this is relatively easy, particularly for sophisticated actors. But it's hard to always defeat all of the tricks. Sort of like how it's expensive and hard and uncertain to defeat all of the tricks when forging money. Here's an example. Say you have your team use patched binaries. Then CC updates and requires a new patched binary with new tricks. You now have to have a team ready to analyze the binary a…

Is it hard? Just ask AI if the update added any new fingerprinting vectors?

Re: Claude Code is steganographically marking requests

#68
post #36

I used Claude Code for a month because my boss gifted me a sub and wanted me to try it. I used that month to complete a work project and then beef up my personal harness so I'd never have to deal with Anthropic (and these sorts of shenanigans) again.

[flagged]

Re: Claude Code is steganographically marking requests

#69
post #43
post #36

I used Claude Code for a month because my boss gifted me a sub and wanted me to try it. I used that month to complete a work project and then beef up my personal harness so I'd never have to deal with Anthropic (and these sorts of shenanigans) again.

What models are you using? Aren’t you still dealing with some provider even if you are not using their binary

I self-host DeepSeek V4 Flash on 2 DGX Sparks (approx. $10k)

I expect DeepSeek V4 Flash (or an equivalently sized model) to reach parity with GLM 5.2 some time this year (this based on DeepSeek V4 Flash launching at GLM 5.0 parity[0], and GLM 5.2 being freely available to distill from)

GLM 5.2 is within spitting distance of Opus 4.8 and is at least as good as Opus 4.6[1] which some devs were willing to spend hundreds to single-digit thousands of dollars a month for a few months ago.

[0]: https://artificialanalysis.ai/models/comparisons/deepseek-v4...

[1]: https://artificialanalysis.ai/models/comparisons/claude-opus...

Re: Claude Code is steganographically marking requests

#70
post #36

I used Claude Code for a month because my boss gifted me a sub and wanted me to try it. I used that month to complete a work project and then beef up my personal harness so I'd never have to deal with Anthropic (and these sorts of shenanigans) again.

How do people build something like a personal harness? Are there tools for that or is it done from scratch?
Post reply on HN