TLDR AI · MISCELLANEOUS

INVISIBLE TEXT THAT AI CHATBOTS UNDERSTAND AND HUMANS CAN'T? YEP, IT'S A THING

arstechnica.com13 min read

Summary from the TLDR AI newsletter

Recent research highlights vulnerabilities in LLMs like prompt injection and ASCII smuggling, which allow attackers to hide instructions or data that are invisible to users but readable by the models. Invisible Unicode characters can be used in AI chatbots like Claude and Copilot to embed and extract malicious payloads and sensitive data. This poses a significant security risk. While some AI platforms like OpenAI and Microsoft have implemented mitigations, the broader issue of AI processing data imperceptible to humans continues to challenge security protocols.