alt Hacker NewsThis article is way too long, and very sloppy.
Here's the section with the prompt injection headers. They all look like jokes / non-serious attempts to me, bar the ones that included the Claude 4 era refusal triggering string. https://www.signalscorps.com/blog/prompt-injection-in-http-h...
Replies
The only interesting one to me is the npx one. It could actually be malicious. Wish they would've at least dug into what the redacted package actually does.
I am hiring and received this pfd with hidden text, claude flagged it and I was so confused what is going on, so I printed all text in my notes app and I realized resume had hidden text white font on white background, so only AI could see and read
I was impressed the model picked it up and flagged system manipulations
Unanswered by the article: Does any of that (joke or not) actually work?
It's input to the model, sure, but it would have to be a pretty dumb model.
I don't doubt that it's possible to create prompt injection attacks that work. I'm very interested in knowing how hard it is.