FRESH

Hacker News

ANSI escape injection in MCP servers: Hidden from humans, visible to AI

50 points by xgpyc2qp

by illliillll

3 subcomments

Every year is apparently a good year for developers to figure out how terminals have worked for decades?
Just… don’t trust inputs you don’t fully control, there’s nothing else to it.

by nirav72

0 subcomment

ANSI bombs from the MS-DOS days are back for the modern age.
Edit: For those too young to remember - https://stason.org/TULARC/security/computer-virus-l/23-What-...

by iku

2 subcomments

May I ask, what is DAST exactly? The report doesn't seem to define it, nor does it provide a link to any definition or detail page, not even an abreviation expansion. Is that Dynamic application security testing?
[1] https://en.wikipedia.org/wiki/Dynamic_application_security_t...

by hahahaa

0 subcomment

by qwertox

0 subcomment

by inisirex

0 subcomment

by sneefle

0 subcomment

by stelardigital

0 subcomment

0 subcomment

by Daffrin

0 subcomment

by xgpyc2qp

0 subcomment

by hounainehamiani

0 subcomment

by Avery29

0 subcomment

by doodlebyte

2 subcomments

This is a really interesting class of failure. It feels like we're going to see more cases where the "human view" and the "LLM view" of the same data diverge. Have you run into similar issues outside of MCP as well, or is this mostly specific to terminal-based tool interactions?