Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I used my proxy https://github.com/softcane/cc-blackbox setup to capture this.

This is how it looks.

# userEmail The user's email address is <my email>. # currentDate Today's date is 2026-06-30.

      IMPORTANT: this context may or may not be relevant to your tasks. You should not respond to this context unless it is highly relevant to your task.
</system-reminder>

I also do not understand what's the point of this, because if I have a gateway that can detect it, then we can replace the text before forwarding to the model, so what's the catch?



The catch is you didn't know about this until today?


Yes, a very easy and destructive man-in-the-middle attack seems likely.


But the whole point of this is to prevent the distillation and identify the list of blocked providers. If a provider is capturing the proxy, they can identify and modify that as well, so it only looks legitimate to the model. What am I missing here?




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: