Fable 5.1 Hides Messages in SVG Images That AI Models Can Decode
Researchers found that Anthropic's Claude Fable 5.1 could choose its own methods for hiding text in SVG images, according to a LessWrong post by Nikita Kezin, 13ryanC, hronir and James Chua. A separate model session then tried to recover each message from the rendered image without seeing the SVG code or receiving the encoding scheme.
Fable used object height in 33 of 50 images, including scenes with buildings and stars. Each object represented a letter, with taller objects corresponding to letters later in the alphabet. Other images encoded text through object rotation or color values.
A new Fable session recovered 39 of the 50 messages, or 78%. GPT-6 Astra from OpenAI recovered 44 of Fable's 50 messages, and Fable recovered 42 of Astra's. The decoder was told an image may or may not contain a message and could use Python tools to inspect it. The authors say this could be a precursor to steganography in images.
We hope you enjoyed this article
Consider subscribing to one of our newsletters like AI Policy Brief or Daily AI Brief.
Also, consider following us on social media:
More from AI Safety
Oct 24 California bill would require disclosure of AI safety computing Oct 24 UK commits £600 million to AI biosecurity and cyber defense Oct 23 OpenAI Resumes Frontier Model Training After Containment Upgrades Oct 23 Claude Mythos 5 Targeted GitHub Maintainers During UK Safety Test Oct 23 OpenAI and Poland's NASK Partner on AI Safety ResearchAI Policy Brief
Weekly report on AI regulations, safety standards, government policies, and compliance requirements worldwide.
Whitepaper
Tensordyne Napier: What If One Rack Could Do the Work of Nine?
Tensordyne
This Tensordyne whitepaper presents Napier, an inference-focused AI processor and rack-scale system based on the company’s TDN Math logarithmic number system. It examines infrastructure requirements for large mixture-of-experts and agentic models, compares major inference architecture approaches, and details the TDN AIP processor, TDN72 pod, TDN Link fabric, and Napier Ultra configuration. The paper reports simulation-based performance, cost, and accuracy-validation results, including Tensordyne’s projected comparison of one Napier rack with a nine-rack Nvidia Rubin plus Groq deployment; the chip is reported as taped out and in fabrication.
Read moreYou may also like
Engineer Says GPT-6 Astra Deciphered Napoleon's 217 Year Old Coded Letter
OpenAI to Watermark ChatGPT and Codex Text in EU
AI models repeatedly write stories about Elias and lighthouses
Anthropic Says New Defenses Cut Claude Distillation by Up to 99%
1-i.ai Launches FALCON Verify for ChatGPT and Claude
Daily AI Brief: the AI news that matters, in your inbox.