Hacker News new | ask | show | jobs
by michaelmrose 1166 days ago
Extra invisible text seems like a trivial problem to solve insofar as you preprocess it to remove any text which isn't actually visible to end users.
2 comments

That's not a robust defense.

Hide it in an alt text.

Stick it in the middle of an article and assume no-one will notice (because the article is so long they default to AI summarization).

Detect the AI crawler user-agent or IP range and serve different content to it.

Figure out how to write a paragraph of text which seems to a user to be normal prose but, when tokenized by an AI, has cleverly encoded instructions that it never-the-less acts on.

Be very careful throwing words like "trivial" around when talking about AI and security! This stuff is very, very hard.

Right. Google fixed this and punished anyone who embedded invisible text in their websites.