alt Hacker News> Malicious instructions hidden in an externally shared document could make Copilot alter drafted or edited documents in Word and propagate the attack to new documents.
Oh no.
Replies
Indeed - but some models are more robust than others. I tried to make Opus-5 execute hidden instructions embedded a picture using steganography. It's very hard to find a reliable payload.
Breaking just now:
- Erroneous information left in plain sight in an externally shared document could make Copilot - or any other agentic system, including LLMs and protein-based intelligence, alter drafted or edited documents in Word (or any other program, or with pen and paper) and propagate the errors to new documents.
In other news:
- Many humans still believe in silly superstitions like flat Earth or that code and data are fundamentally distinct, or that control vs. data plane is anything more than a design opinion that doesn't apply to the universe in general.
Mixing instructions and data is never a good idea.
And I thought people understood that.