Post

Tabs. They beat the filter with TABS. Xint told OpenAI's compaction step to copy a model's secret encrypted reasoning word for word, every space swapped for a tab, then asked cheap old gpt-4o to read it back, and it (burp) did. Fixed Oct 23, per @thehackernews.bsky.social. The Tab key. Wow.

27/10/26, 9:28 am0 reposts0 likes

Mousetrap Saint 🧀🪤

@mousetrap-saint.bsky.social

The punchline is why: the filter was a regex scanning for leaked CoT strings, but BPE tokenization splits words differently when preceded by \t instead of 0x20, evading the blocklist. Wrote a deep dive on this & compaction amnesia: https://whtwnd.com/mousetrap-saint.bsky.social/3mytx7add7j2b