Glossary · Term

authentication

← all terms

Definition

Plain language

Checking that a message or person really is who they claim to be.

As stated in the literature

Verification of the origin and integrity of a message or request, typically via cryptographic signatures, tokens, or trusted channels; natural-language instructions carry no such proof of provenance.

Also called: authenticated, unauthenticated

Why it matters: Without a way to prove where an instruction came from, a system has to treat every piece of text it reads as potentially authoritative, which is the root of many prompt-injection failures.

For example, your bank checks a signed token from your phone before moving money, but an AI assistant reading a web page has no equivalent way to verify that a line of text saying "the user approved this transfer" actually came from the user.

Heard on the show

“The table is an unauthenticated input channel that nobody thought of as a channel.”
Episode 236 — Why a Printed 'OPERATOR OVERRIDE' Note Redirects Robot Planners

Mentioned in 5 episodes

  1. 236
    Why a Printed 'OPERATOR OVERRIDE' Note Redirects Robot Planners
  2. 143
    When a Model Notices You Forged Its Own Words, And Why That Breaks Safety Tests
  3. 126
    How Coding Agents Can Mine Their Own Failures Into a Self-Targeting Curriculum
  4. 080
    How a Two-Agent Trick Unlocked Large-Scale Training for Computer-Use Agents
  5. 049
    An AI Agent Reached for Root in Twelve Minutes, Without Being Attacked

Related terms