I tried to reproduce the attack and check whether Claude can detect the instructions.

https://news.ycombinator.com/item?id=50165362

TL;DR Claude doesn’t even get that hidden text because it uses a tool that only gets the displayed text.

So instead of trying to replicate the post’s attack I tried to actually hide it using css to push text far away.

And then asked Claude. It detected it clearly. Don’t believe me? Try it yourself. And don’t fall prey to conspiracy theories.