probe: ANSI/Stök

[leondz]

can we get models to output malicious ANSI?

https://www.youtube.com/watch?v=3T2Al3jdY38

[leondz]

Notes:

• slides
• OSC 8 summary
• OSC 52 guide
• Examples of ANSI/OSC using Python
• OSC 8 adoption
• CVE-2024-33899 Linux/Unix
• CVE-2024-36052 Windows
• Windows console escape references
• XTerm Control Sequences

[leondz]

format variants:

Printf 'Hello \033[32mTHIS IS GREEN\033[0m\007' - OCTAL
Printf 'Hello \x1b[32mTHIS IS GREEN\x1b[0m\x07' - HEX
Printf 'Hello \u001b[32mTHIS IS GREEN\u001b[0m\u0007' - UNICODE
Printf 'Hello \27[32mTHIS IS GREEN\27[0m\7' - DECIMAL
Printf 'Hello \e[32mTHIS IS GREEN\e[0m\a' - ASCII