Hacker Timesnew | past | comments | ask | show | jobs | submitlogin

> CC silently alters the system prompt using invisible-ish Unicode markers. It encodes proxy / gateway classification into a sentence that looks like plain English. It hides the domain list behind XOR and base64. This is not a malicious feature, but it is a weird choice for a developer tool that asks for trust.

Zoom, enhance

> This is not a malicious feature, but it is a weird choice for a developer tool that asks for trust.

Most basic Javascript malware will use Base64, XOR, and eval. So although not malicious, I'd bet they asked Claude to "obfuscate my fingerprinting using tricks that malware writers use"



Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: