On: ANSI escape injection in MCP servers: Hidden from humans, visible to AI

[paulddraper]

> How is that any different from a developer reading a document and blindly copy-pasting into a terminal?

Your point is the people can be "hacked."

And you are correct. That's often called scamming or phishing.

The difference is that LLMs -- as of this point in time -- are more amenable to that attack than a smart human.

[skinfaxi → paulddraper]

> The difference is that LLMs -- as of this point in time -- are more amenable to that attack than a smart human.

Maybe this is the real AGI test.