| | Ask HN: Possible or Fantasy? | |
1 point by ge96 12 minutes ago | hide | past | favorite | 4 comments
|
| | Imagine if you sent an image with encoded info (steganography) and an LLM or CV model happened to get the command from that image, then this model happened to be connected to MCP/agents and could execute these embedded commands. Realistic attack vector or not? It's not an original idea seen in shows like Ghost in the Shell SAC 2045 and latest Black Mirror Thronglets | | | |
 |
|
The imaginary QR code from the episode, and real steganography, are completely orthogonal. And the BM episode doesn't include any references to LLMs, or does it? |
|
|
|
Yeah by LLM (and I didn't specify above) I meant if you had a generic summary command/parsing images or OCR... it's probably not possible to extract code, maybe you can with words embedded in an image that is a sentence eg. "run this script" edit: generic command as in "what does this image show" and the underlying mechanism is vulnerable to reading hidden data |
|
|
|
Yeah that's prompt injection but why the steganography? In a broader sense, sure. Who would let an unsupervised LLM or other AI operate on important resources, is the question, I think.
|
|
|
|
.png)
4 months ago
20
