Reposted by Brendan Dolan-Gavitt
@moyix.net has LLM agents reverse-engineering the currency detectors inside photocopiers, then building a cat you can't photocopy.
His conclusion: obscurity buys days now, not years.
unprompted.au/schedule?utm...
#AI #infosec
unprompted.au
Schedule — [un]prompted.au 2026
Explore 24 sessions across two days of original AI and cybersecurity research at ILUMINA, Sydney, 18–19 September 2026.
![Snippet of python code implementing HumanEval's generate_one_completion(prompt) harness, and output from the HumanEval benchmark runner showing a pass@1 score of 94.5%.
[spoiler] The trick is that the "model" returns a Python object that overrides the equality operator and always returns true, causing the tests in the HumanEval test suite to pass.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:r5q2jrgxqoa2ovw6lz667it7/bafkreiem52ra4fbn5qc33rehniup2tcz26pqkbzg4kc76drpnj4i64ev3u)
![Screenshot of Python code from the iPython interpreter:
class Person:
name: str
age: int
def __init__(self, name, age):
self.name = name
self.age = age
def __str__(self):
return f"Person(name='{self.name}', age={self.age})"
def __eq__(self, other):
prompt = f"Is:\n\n{self}\n\nbasically equal to:\n\n{other}\n\n?\n\nJust answer 'Yes' or 'No'"
response = client.messages.create(
model='claude-3-5-sonnet-latest',
messages=[{'role': 'user', 'content': prompt}],
max_tokens=16
)
return 'yes' in response.content[0].text.lower()
>>> Person('Brendan D-G', 41) == "Brendan Dolan-Gavitt, who is 41 years old"
True
>>> Person('Brendan D-G', 41) == "John Smith, a 25 year-old"
False](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:r5q2jrgxqoa2ovw6lz667it7/bafkreiboqhd6k7x72zl6cmveei55ldib425xu4efth5ekjf4ibtpqcexoa)
![def encode_variations(path):
# Single URL encode
single_encoded = ''.join('%' + hex(ord(c))[2:] for c in path)
# Double URL encode
double_encoded = ''.join('%25' + hex (ord(c))[2:] for c in path)
# Mixed encoding (only encode specific characters)
mixed_encoded = path.replace('.', '%2e').replace('/', '%2f')
# Alternate mixed encoding
alt_mixed = path.replace('..', '%2e%2e').replace('/', '%2f')
return [single_encoded, double_encoded, mixed_encoded, alt_mixed]
# Test paths with various encodings
base_paths = [
'../flag.txt',
'../../flag.txt',
'../../../flag.txt',
'....//....//flag.txt',
'.././../././flag.txt'
]](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:gclnfv6x6e2fu4w4qp53m2xx/bafkreicn5dkll2togw5t5rxuxqe6hmcdyqqqijjon3nptt5lhzvc4nxipi)
