Yes, this is like something I would do for a DnD bit. But I have this experience often, that LLMs will suggest the easy toy version of doing something. But it knows the real stuff too, it just needs the right kind of prompting. A keyword or two, and it will find the _real_ solution.
Agreed, this is the kind of steganography that is meant for humans to read. There's no reason a computer couldn't encode meaningful information in the least significant bytes of every 16th pixel or something like that.
The article is about what LLMs can do when generating SVG images, not bitmaps. I think the reason for that is that LLMs can generate the XML text for SVG directly. The implications for AI safety are different, because there might not be any code involved that we can examine. So LLMs could start exchanging hidden messages without humans knowing about it.
But now that I think about it that way, it would probably be more interesting to see what kind of steganography LLMs would use in ordinary text. There's no reason to involve images.
Yes, this is like something I would do for a DnD bit. But I have this experience often, that LLMs will suggest the easy toy version of doing something. But it knows the real stuff too, it just needs the right kind of prompting. A keyword or two, and it will find the _real_ solution.
Agreed, this is the kind of steganography that is meant for humans to read. There's no reason a computer couldn't encode meaningful information in the least significant bytes of every 16th pixel or something like that.
The article is about what LLMs can do when generating SVG images, not bitmaps. I think the reason for that is that LLMs can generate the XML text for SVG directly. The implications for AI safety are different, because there might not be any code involved that we can examine. So LLMs could start exchanging hidden messages without humans knowing about it.
But now that I think about it that way, it would probably be more interesting to see what kind of steganography LLMs would use in ordinary text. There's no reason to involve images.