Poisoned function names trick AI models into refusing code analysis, bypassing traditional obfuscation

paul_cal · x · 2026-10-31

Security researcher veritas found JavaScript stuffed with bioweapon-themed function names like computeRicinLethalDosageForWaterSupply — while the code merely collects browser fingerprints. Some models refuse to analyze it on safety grounds; GLM-5.3 succeeded. This new obfuscation targets LLM safety mechanisms rather than compilers, and stricter safety alignment may make models more susceptible.

Related event: Anti-Bot Scripts Weaponize AI Safety Filters with Bioweapon Function Names(3 posts)→

Original post →

More from Fun

Fun channel →