Themata.AI
Follow coverage
Themata.AI

How does Fable 5.1 hide messages in images?

lesswrong.com ·

Tests of Claude Fable 5.1 found that the model can hide short messages in ordinary-looking SVG artwork and that a separate Fable session can often recover them from a rendered PNG without seeing the SVG source code or receiving a prearranged cipher. Across 50 messages in 15 languages, Fable most often assigned alphabet positions to the heights of repeated visual elements: 33 images used height encoding, frequently as buildings in night skylines. Other images encoded data through star positions, grass-blade heights, Morse-like dashed trails, and lit or unlit windows.

A separate Fable 5.1 instance, run at maximum reasoning effort with Python, Pillow, NumPy, and SciPy tools, recovered 78% of messages under an automated 90%-similarity threshold. It inspected pixels and geometric patterns, such as star coordinates that mapped to letters or blade heights that represented alphabet indices. Fable also embedded contextual hints for non-English alphabets, accents, capitalization, and digits.

GPT-6 Astra used different schemes in the same 50-message test, favoring Morse code in short and long objects in 18 cases, plus acrostics, bit codes, and Braille-like window panes. In cross-model tests, Astra recovered 44 of Fable’s 50 messages, while Fable recovered 42 of Astra’s. The researchers say decoding currently leaves visible evidence in tool calls and do not claim the technique is presently dangerous.

Read original ↗

What people are saying

The thread mostly rejects the demonstration as evidence of serious AI-to-AI covert communication.

What readers liked

  • The experiment is a playful proof that a multimodal model can treat images as a message channel, then recover the signal from rendered screenshots…
  • Several readers see a genuinely interesting general capability underneath the gimmick: models can adapt encoding schemes to the medium, whether…

Concerns raised

  • The encoding looks like a classroom-level Morse puzzle, not credible stealth; established image steganography can hide far more data with far less…
  • Odd building shapes and repeated visual motifs make the images suspicious on sight, so the demonstration fails the basic test of concealment from…
View discussion ↗
Read full discussion analysis

Source: Hacker News · Based on 15 sampled comments · Analyzed

Discussion overview

The thread mostly rejects the demonstration as evidence of serious AI-to-AI covert communication. Readers see the visible Morse-like patterns and conspicuously odd architecture as a toy puzzle: easy for a person to suspect, and easier still for an image-capable model to decode. Several argue that a model genuinely trying to evade inspection could use established steganographic techniques, such as manipulating low-significance pixel data or embedding signals in ordinary-looking outputs, rather than broadcasting a pattern through strange image structure.

The more interesting implication, commenters say, is broader than SVGs. A capable model can reason about any medium as a communications channel and choose durable, high-signal features suited to images, prose, or audio. But that is framed as a capability worth testing rigorously, not something this example establishes. Some readers enjoyed the playful visual experiment and noted that it deliberately encoded information in screenshots rather than SVG metadata. Still, the consensus is that the setup reveals more about a model following a simple encoding task than about adversarial behavior, hidden coordination, or a meaningful failure of safeguards. One participant also notes that models are generally tuned away from concealing messages, making this especially weak evidence for real-world covert behavior.

Points of disagreement

The central dispute is whether this example demonstrates troubling emergent covert communication or merely a deliberately simple visual encoding exercise. Skeptics argue that any model seeking secrecy would use denser, less visible techniques and that the bizarre images practically advertise their payload; the more charitable view is that models may select simple schemes because they infer the human task is basic, not because subtler methods are unavailable.

What readers liked

  • The experiment is a playful proof that a multimodal model can treat images as a message channel, then recover the signal from rendered screenshots rather than relying on SVG metadata.
  • Several readers see a genuinely interesting general capability underneath the gimmick: models can adapt encoding schemes to the medium, whether visual art, text, or audio.
  • The images themselves were considered appealing, and the human-decodable design makes the mechanism unusually easy to inspect rather than a black-box claim.

Concerns raised

  • The encoding looks like a classroom-level Morse puzzle, not credible stealth; established image steganography can hide far more data with far less visible distortion.
  • Odd building shapes and repeated visual motifs make the images suspicious on sight, so the demonstration fails the basic test of concealment from human observers.
  • Commenters argue that a model trained or instructed to evade detection could manipulate insignificant pixels or produce normal-looking media, making this setup poor evidence for adversarial AI risks.
  • Because models are generally fine-tuned against hiding messages, a prompted toy example says little about whether they would coordinate covertly in realistic deployments.

Keep reading

  • LLMs are making formal software verification feasible at a much larger scale
  • Using Claude to reduce the attack surface of code
  • Meta Says Claude AI Tool Triggered No Kings Instagram Suspension
Sources and details
  • lesswrong.com · Published

    How does Fable 5.1 hide messages in images?

    Read report →

Community analysis available for 1 of 1 linked discussions.

Additional discussion searches are still incomplete.

Coverage details and dates

Latest available community analysis:

Summaries: 1 current · 0 awaiting update · 0 not verified

Latest summary update:

Hacker News · lesswrong.com

How does Fable 5.1 hide messages in images? ↗
Hacker News discussion ↗

Reported comments: 36 · 15 saved in sample

Analysis ready