diff --git a/techniques/canaries/howto_canary_tokens.md b/techniques/canaries/howto_canary_tokens.md index 01142b4..8c954d4 100644 --- a/techniques/canaries/howto_canary_tokens.md +++ b/techniques/canaries/howto_canary_tokens.md @@ -16,7 +16,7 @@ Add a unique, high-entropy string to every important page or file: canary = f"CoM-IMAGE-{today}-{secrets.token_hex(8)}" ``` -Store the mapping of canary → publication date in a private ledger. +Store the mapping of canary -> publication date in a private ledger. ## 2 -- Hidden Link Honeytokens @@ -63,10 +63,9 @@ curl -A "Mozilla/5.0..." https://example.com/ curl -A "GPTBot/1.0" https://example.com/ ``` - ## 8 -- Automated Daily Generation + Bot-Only Injection -Yes — canary tokens can (and should) be automatically generated daily and injected only into responses served to known aggressive bots. This combines the daily randomization pattern used for decompression bombs and malformed content with the aggressive-bot conditional logic. +Yes, canary tokens can (and should) be automatically generated daily and injected only into responses served to known aggressive bots. This combines the daily randomization pattern used for decompression bombs and malformed content with the aggressive-bot conditional logic. ### 8.1 -- Daily Canary Generator Script