Claude Devs 宣布对 Messages API 做出一项调整,多轮对话中不再允许编辑 Claude 思考块(thinking blocks)之前的上下文,以增加蒸馏攻击的难度。该限制仅适用于使用 Fable 5.1 的新账号,因为蒸馏攻击常利用大量新注册的虚假账号,未来模型发布时会推广到所有用户。团队表示长期仍希望找到更好的应对蒸馏攻击的方案。
A common technique for distillation attacks involves extracting the model’s chain of thought. To make these attacks more difficult, we are introducing a change to the Messages API: it will no longer be possible to edit Claude's context prior to thinking blocks in a multi-turn conversation.
We've done this in the least disruptive way we can: it applies only to new accounts using Fable 5.1 (distillation often makes use of large numbers of new, fake accounts), although we plan to roll out this change to all users for future model releases.
We hope to find better solutions to distillation attacks in the long run.
https://t.co/km7CtFVNyV
来源:@ClaudeDevs · x.com