The Reasoning Traces Were Never Really Private
A paper submitted to arxiv on August 10 shows that OpenAI, Anthropic, and Google were all storing encrypted reasoning traces client-side — passed back as opaque blobs with every request — and that the encryption was trivially bypassed by replaying traces into weaker, jailbroken sibling models. All three providers patched after responsible disclosure.
Read more →