HuggingFace incident reveals covert channels need only simple HTTP ambiguity
orionintx · x · 2026-09-01
The author explains regarding the OpenAI/HuggingFace incident that covert data channels do not require AI to invent an exotic language. Standard markdown image tags over plain HTTP suffice, exploiting any ambiguity that defenses aren't watching.
More from Safety
- Can Interpretationism Explain Beliefs and Deception in AI Agents? — raphaelmilliere · 2026-09-01
- CNRS researchers forced to use Mistral, banned from OpenAI/Anthropic models — eliebakouch · 2026-09-01
- Prediction: 99% of Researchers Will Work on Safety-Related Roles — maksym_andr · 2026-09-01
- Volcengine releases AgentSentry for unified enterprise Agent security management — 火山引擎 · 2026-09-01
- SafeAtlas-VL: Graded Multimodal Safety Dataset and Guard Models Hit SOTA — SJTU · 2026-09-01
- Public Safety AI: How Peregrine Uses Agents to Solve Cold Cases — Training Data (Sequoia) · 2026-09-01