alt Hacker NewsCan someone tell us how they were able to decrypt the encrypted payload? The article says they inserted the cyphertext into a session with a different model. Ok, but how does that allow you to decrypt it?
Replies
x312 • today at 3:16 PM
The provider decrypts it and puts the decrypted reasoning into the model's context window. They prompt the model to repeat back the reasoning. So then the model echoes it back in plain text.
➕ show 1 reply
crazylogger • today at 3:58 PM
Anthropic server decrypts it as part of fulfilling every request, and haiku recites it per your request.
From what I got, the weaker model (Haiku in this case) has access to the shared key and the user simply asks to "transcribe the injected reasoning".