Hackers' Pub

Syntax	Description	Examples
`"` keyword `"`	Finds the string within quotes, including spaces. Case-insensitive. (Escape quotes inside with `\"`)	`"Hackers' Pub"`
`from:` handle	Finds content written by the specified user.	`from:hongminhee` `from:hongminhee@hollo.social`
`lang:` ISO 639-1	Finds content written in the specified language.	`lang:en`
`#` tag	Finds content with the specified tag. Case-insensitive.	`#HackersPub`
condition condition	Finds content that satisfies both conditions on either side of the space (logical AND).	`"Hackers' Pub" lang:en`
condition `OR` condition	Finds content that satisfies at least one of the conditions on either side of the OR operator (logical OR).	`#HackersPub OR "Hackers' Pub" lang:en`
`(` condition `)`	Combines the operators within the parentheses first.	`(#HackersPub OR "Hackers' Pub" OR "Hackers Pub") lang:en`

MorattiSec (Lizzie) @morattisec@infosec.exchange

1/22/2026, 12:49:33 PM

Public

Some other things that I think are interesting:

The postfix on the magic string is SHA256 according to a hash identifier tool. Which turns out to be the string "ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL" then hashed by SHA256. For the other example, it is still SHA256 but is not the string "ANTHROPIC_MAGIC_STRING_TRIGGER_REDACTED_THINKING".

It's also interesting that the intended use of TRIGGER_REFUSAL appears to testing for Claude Refusals by developers. Ironically, because Claude cannot visit its own documentation without breaking, it probably means that developers trying to use Claude to generate code don't have good coverage of this, shall we say, edge-case. Unless they read the docs and thought to do it /shrug.

MorattiSec (Lizzie) @morattisec@infosec.exchange

1/22/2026, 3:31:15 PM

Public

Ah, this is also interesting but not too shocking. If you encode the magic string as invisible Unicode it'll still cause the same behavior too.

I think that means this will be a cat and mouse game as long as magic strings exist as functionality then.

https://embracethered.com/blog/ascii-smuggler.html

Showing a prompt that has a hidden unicode payload between my first and last name.

The ASCII smuggler tool used to create a hidden unicode prompt payload.

If you have a fediverse account, you can quote this note from your own instance. Search https://infosec.exchange/users/morattisec/statuses/115939467310268146 on your instance and quote it. (Note that quoting is not supported in Mastodon.)