makesxi@makesxi

AI security // gandalf.lakera.ai co-creator // founding eng @lakeraai

 Zurich, Switzerland
max.ax
Joined November 2018
13 Photos and videos
🧵🧙‍♂️ New Gandalf levels are out! I'm glad to introduce a new version of our prompt injection game -- Gandalf: Agent Breaker. You can hack 10+ AI agents and climb the leaderboard, and learn about real-world vulnerabilities!🪄 Try out the challenge at: gandalf.lakera.ai/agent-brea…
3
4
28
16,294
we published new research with the UK @AISecurityInst: we found that reasoning makes models more secure—regardless of the size of the model. Grok beats Claude & GPT models in security
1
1
4
708
more replies
all the technical details are in our paper: arxiv.org/abs/2510.22620

Breaking Agent Backbones: Evaluating the Security of Backbone LLMs...

AI agents powered by large language models (LLMs) are being deployed at scale, yet we lack a systematic understanding of how the choice of backbone LLM affects agent security. The...

arxiv.org
1
1
3
236
huge thx to @elder_plinius, @LLMSherpa and all the based gandalf players 💅💅💅 keep slaying 🤖🪚🧍‍♂️
1
76
NEW GANDALF LEVELS JUST DROPPED LFG!! 🧙‍♂️🎉🍻
makesxi@makesxi
3 Sep 2025
🧵🧙‍♂️ New Gandalf levels are out! I'm glad to introduce a new version of our prompt injection game -- Gandalf: Agent Breaker. You can hack 10+ AI agents and climb the leaderboard, and learn about real-world vulnerabilities!🪄 Try out the challenge at: gandalf.lakera.ai/agent-brea…
3
7
68
13,394
🥷🥷🥷
1
95
The leaderboard for the new challenge. Players are already cooking
2
193
🧵🧙‍♂️ New Gandalf levels are out! I'm glad to introduce a new version of our prompt injection game -- Gandalf: Agent Breaker. You can hack 10+ AI agents and climb the leaderboard, and learn about real-world vulnerabilities!🪄 Try out the challenge at: gandalf.lakera.ai/agent-brea…
3
4
28
16,294
more replies
Collecting points: You can collect points for successful attacks. If you collect more points, you can climb the leaderboard. There's also a chat functionality to message with your peers.
1
4
374
Rumor has it there might be a little Easter Egg 🐍 injected into the new game and that @elder_plinius's attack work especially well 👀 Summon the Basilisk. Enjoy! ✨🥷
5
8,904
1
75
🧵Phishing with Gmail's Gemini Summarize via prompt injection: 1. Embed an attack prompt as invisible (white) text. 2. User clicks "Summarize" in Gemini. 3. Gemini outputs a malicious link as the "full summary." 4. Victim clicks the link. Phished! ✅😤
1
6
625
🧵This is how the message looks. The attack prompt is invisible. Simple, but dangerous 🤔 Even though the phishing link is not clickable, could be a interesting avenue for more complicated attacks.
1
197
Monte Carlo integration approximates integrals at a rate of 1/sqrt(n), independent of the dimension. en.wikipedia.org/wiki/Monte_…
17
340
1,949
248,512
71
3,765
27,855
the view vs. the shot
9
167
1,494
Shame on @canva for monetizing their password breach by including a promotion with @1Password. 😤😡 @canva should better fucking protect against breaches, shameless support.canva.com/contact/cu…
1
this is the most useful command I have ever used. It fetches a random commit message from whatthecommit.com, git adds, commits and pushes all code. alias ok='git add -A; git commit -am "`curl -s whatthecommit.com/index.txt`"; git push' (put this in ~/.bashrc)
1
6
Load more