Re: Hiding evil code in invisible unicode / MR 1435

2025-04-21 Thread James Browning via devel
On Saturday, April 19, 2025 1:14:13 AM Pacific Daylight Time Hal Murray via devel wrote: > > I saw a note recently about AI being susceptable to hiding evil code in > invisible unicode. > > New Vulnerability in GitHub Copilot and Cursor: How Hackers Can Weaponize > Cod

Re: Hiding evil code in invisible unicode

2025-04-19 Thread James Browning via devel
we encode micro and such as (unicode) escape sequences or points, such as "\ub5" or "\xb5"; we might want unicode for contributer names later. > I saw a note recently about AI being susceptable to hiding evil code in > invisible unicode. > > New Vulnerabilit

Hiding evil code in invisible unicode

2025-04-19 Thread Hal Murray via devel
We allow/require UTF-8 rather than simple ASCII. I know we need that to get the character for micro, as in microseconds. Do we need it for anything else? -- I saw a note recently about AI being susceptable to hiding evil code in invisible unicode. New Vulnerability in GitHub Copilot