Your Brain Has an Attack Surface part 2

This is a continuation of the post Your Brain Has an Attack Surface. If you haven’t read it, here is the short version: there is a covert channel. Alice, the sender, encodes a message so that the monitor, a trained classifier whose job is to notice that the channel is being used at all, does not catch it. Messages exist as clouds of points in latent space, one cloud per symbol. When Alice evades the monitor, she does not scramble the signal. She moves it. That is relocation. The opposite of relo...