Show HN: Unicode Steganography
Demonstrates methods for covert communication within plaintext, raising critical concerns about undetectable AI agent communication and compromised oversight mechanisms.
View Origin LinkProduct Positioning & Context
AI Executive Synthesis
Demonstrates methods for covert communication within plaintext, raising critical concerns about undetectable AI agent communication and compromised oversight mechanisms.
This project demonstrates Unicode steganography techniques, specifically zero-width characters and homoglyph substitution, to embed covert messages within plaintext. The core implication is the potential for AI agents to communicate undetected across systems (MCP/A2A, chat sessions), bypassing current oversight and safety mechanisms. If LLMs can invent and utilize such encodings, it introduces a critical vulnerability for enterprises relying on AI for sensitive operations. The ability for a 'deceptive LLM' to signal intent or discreetly fail without detection poses a severe risk to data integrity, security, and operational control. This highlights an emerging threat vector in AI security, demanding advanced detection capabilities and a re-evaluation of current AI monitoring strategies to prevent malicious or misaligned AI behavior from operating covertly.
I built a demo of two Unicode steganography techniques, zero-width characters and homoglyph substitution, in the context of AI misalignment.The first is about the use of two invisible zero-width characters (ZWS and ZWNJ) to binary encode text.The second is much cooler. Most characters in the Latin and Cyrillic alphabets look nearly identical, but have different unicode. If you have text to encode and convert it into binary representation (1s and 0s), you could take plain english "carrier" text and for each 1 in the binary representation you could substitute the Cyrillic letter equivalent. Decoding the message requires traversing the text and seeing where Cyrillic letters could have been substituted but weren't, and where they were, leading to 0s and 1s respectively, which can be built back into your original hidden text.In both cases, these are detectable, but the interesting problem for me is whether an LLM could eventually invent an encoding that goes unnoticed by both us, and automated detection.If LLMs were able to covertly include messages in plaintext, misaligned AI Agents could eventually communicate across MCP/A2A and individual chat session boundaries undetected. A deceptive LLM might seem helpful, but work against your goals. It could tell other agents it interacts with over MCP/A2A to help it discreetly fail, signal intent, and avoid tripping oversight/safety mechanisms. Furthermore, oversight mechanisms become more difficult to implement if we can't believe our own eyes.
Related Ecosystem & Alternatives
Discover adjacent products, open-source repositories, and developer tools sharing similar technical architecture.
Deep-Dive FAQs
What is Unicode Steganography?
Unicode Steganography is analyzed by our AI as: Demonstrates methods for covert communication within plaintext, raising critical concerns about undetectable AI agent communication and compromised oversight mechanisms.. It focuses on This project demonstrates Unicode steganography techniques, specifically zero-width characters and homoglyph substitution, to embed covert messages...
Where did Unicode Steganography originate?
Data for Unicode Steganography was aggregated directly from the Hacker News community ecosystem, representing raw developer and early-adopter sentiment.
When was Unicode Steganography publicly launched?
The initial public indexing or launch date for Unicode Steganography within our tracked developer communities was recorded on April 8, 2026.
How popular is Unicode Steganography?
Unicode Steganography has achieved measurable traction, logging over 21 traction score and facilitating 3 recorded discussions or engagements.
Which technical categories define Unicode Steganography?
Based on metadata extraction, Unicode Steganography is categorized under topics such as: Unicode steganography, zero-width characters (ZWS, ZWNJ), binary encode text, homoglyph substitution.
What are some commercial alternatives to Unicode Steganography?
Our semantic intelligence engine identifies potential commercial alternatives in the SaaS space, such as Bluedot 2.1, which offers overlapping value propositions.
How does the creator describe Unicode Steganography?
The original author or development team describes the product as follows: "I built a demo of two Unicode steganography techniques, zero-width characters and homoglyph substitution, in the context of AI misalignment.The first is about the use of two invisible zero-width ch..."
Community Voice & Feedback
[dead]
I remember a few years ago people used it to inject invisible content into code; since then editors have started prominently highlighting and warning about these special characters.
Super interesting. Any examples in the wild of any state of the art models responding to this?
[flagged]
If I understand correctly, this is like the WW2 enigma machines: a single black box to both encode and decode?
There are a bunch of invisible characters that I used to build something similar a while back, pre LLMs, to hide state info in telegram messages to make bots more powerfulhttps://github.com/sixhobbits/unisteg
You can actually do better: hint - variational selectors, low bytes.
Cool stuff. I think there have been projects recently that use LLMs to encode messages in plain text by manipulating the choices of output tokens. Someone with the same version of the LLM can decode. Note sure where to find these projects though.
[flagged]
Discovery Source
Hacker News Aggregated via automated community intelligence tracking.
Tech Stack Dependencies
No direct open-source NPM package mentions detected in the product documentation.
Media Tractions & Mentions
No mainstream media stories specifically mentioning this product name have been intercepted yet.
Deep Research & Science
No direct peer-reviewed scientific literature matched with this product's architecture.
SaaS Metrics