A tag called <ip_reminder> showed up mid-conversation in my Claude Code session. I went looking for it in my own JSONL transcript instead of
I was mid-conversation with Claude Code, asking it to help draft a blog post, when a literal
<ip_reminder> tag showed up pasted into my own message. I hadn't typed it. It took me a few
minutes of back-and-forth with the model to figure out what I was even looking at.
TL;DR: ip_reminder is a real, non-displayed system-prompt injection Claude Code sends on
every turn for copyright safety. You don't have to trust anyone's self-reported numbers about it
Claude Code was fetching pages for me during a research session, one of them a GitHub repository...
What was discovered On June 30, a developer reverse-engineered the Claude Code binary and...
Build a local, repeatable report that finds ip_reminder insertions and analyzes input, output, cache creation, and cache read…
A reverse-engineer found that Claude Code secretly changes tiny characters in the date it sends the model - a covert marker aimed…
The story making the rounds is that Claude Code has been caught "steganographically marking" requests...
The moment that started this I use Claude Code daily. Mostly it's a cool tool. A few weeks...
