What's the point of even trying to obfuscate this with such a simple method? Could at least have hidden the targeted features by storing their hashes or embedding a bloom filter or similar
Claude Code is steganographically marking requests
11–20 of 817 posts
Re: Claude Code is steganographically marking requests
#12The more I learn about Anthropic the more they disgust me. Finger crossed for all the companies from their “ban list”
[deleted]
Re: Claude Code is steganographically marking requests
#13[flagged]
Re: Claude Code is steganographically marking requests
#14[flagged]
Re: Claude Code is steganographically marking requests
#15[flagged]
Re: Claude Code is steganographically marking requests
#16Cool fingerprinting avenue.
Re: Claude Code is steganographically marking requests
#17The more I learn about Anthropic the more they disgust me. Finger crossed for all the companies from their “ban list”
Which AI company have you learned more about where you liked them more as more details came out?
Re: Claude Code is steganographically marking requests
#18[flagged]
Source: Other AI
Re: Claude Code is steganographically marking requests
#19[flagged]
> steal the models or illegally distill them
Oh no, they're trying to steal the models that were trained on stolen data? That's horrible, I feel so bad for Anthropic.
Re: Claude Code is steganographically marking requests
#20This is very interesting. Combating resellers and distillation seems like a very difficult problem indeed. Interesting to me is that these techniques mentioned in the article are just like anti-observation techniques used by some of the more sophisticated malware out there, however defeating them is pretty trivial.
Yes, defeating this is relatively easy, particularly for sophisticated actors. But it's hard to always defeat all of the tricks. Sort of like how it's expensive and hard and uncertain to defeat all of the tricks when forging money.
Here's an example. Say you have your team use patched binaries. Then CC updates and requires a new patched binary with new tricks. You now have to have a team ready to analyze the binary and begin to address the tricks; meanwhile, unpatched code is now a fingerprint. If some researcher decides to update Claude on their own to access new features, they get fingerprinted.
Defeating a single fingerprinting technique once is easy. Defeating all of the techniques all the time is hard.