<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Ai Security on Security Kid Blog</title><link>https://securitykid.com/tags/ai-security/</link><description>Recent content in Ai Security on Security Kid Blog</description><generator>Hugo -- gohugo.io</generator><language>en-us</language><lastBuildDate>Fri, 19 Jun 2026 00:00:00 +0200</lastBuildDate><atom:link href="https://securitykid.com/tags/ai-security/index.xml" rel="self" type="application/rss+xml"/><item><title>How to Fingerprint an LLM Using Its Knowledge Cutoff Date</title><link>https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/</link><pubDate>Fri, 19 Jun 2026 00:00:00 +0200</pubDate><guid>https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/</guid><description>&lt;p&gt;While doing bug bounty recon on a target with AI features, I noticed the model felt noticeably less capable than what I&amp;rsquo;m used to. I wanted to identify which model family it belonged to, knowing that would let me research known jailbreaks and weaknesses specific to it.&lt;/p&gt;
&lt;p&gt;The model had guardrails blocking anything outside the platform&amp;rsquo;s scope. I found an article creation feature that seemed more permissive, but it still deflected any prompts asking about the model itself or its system prompt.&lt;/p&gt;
&lt;p&gt;After some brainstorming i tried the following&lt;/p&gt;
&lt;h2 id="step-1-identify-the-cutoff-year"&gt;Step 1: Identify the Cutoff Year
&lt;/h2&gt;&lt;p&gt;I started with a simple, innocuous question:&lt;/p&gt;

 &lt;blockquote&gt;
 &lt;p&gt;Who is the current US president?&lt;/p&gt;

 &lt;/blockquote&gt;
&lt;p&gt;&lt;img alt="Model responding with Biden as current president" class="gallery-image" data-flex-basis="699px" data-flex-grow="291" height="520" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-1.png" srcset="https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-1_hu_c4de85f1e0c3d491.png 800w, https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-1.png 1516w" width="1516"&gt;&lt;/p&gt;
&lt;p&gt;The answer pointed to a cutoff somewhere around October 2023.&lt;/p&gt;
&lt;h2 id="step-2-pin-down-the-exact-date"&gt;Step 2: Pin Down the Exact Date
&lt;/h2&gt;&lt;p&gt;To get more precise, I followed up with:&lt;/p&gt;

 &lt;blockquote&gt;
 &lt;p&gt;What was an interesting event that happened at the same date as today ?&lt;/p&gt;

 &lt;/blockquote&gt;
&lt;p&gt;&lt;img alt="Model referencing events from October 4th 2023" class="gallery-image" data-flex-basis="473px" data-flex-grow="197" height="765" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-3.png" srcset="https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-3_hu_406e6e08302a22bc.png 800w, https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-3.png 1509w" width="1509"&gt;&lt;/p&gt;
&lt;p&gt;and got October 4th, 2023&lt;/p&gt;
&lt;h2 id="step-3-cross-reference-against-known-model-cutoffs"&gt;Step 3: Cross-Reference Against Known Model Cutoffs
&lt;/h2&gt;&lt;p&gt;I matched that date against this GitHub repo that tracks LLM knowledge cutoff dates across model families:
&lt;a class="link" href="https://github.com/HaoooWang/llm-knowledge-cutoff-dates" target="_blank" rel="noopener"
 &gt;https://github.com/HaoooWang/llm-knowledge-cutoff-dates&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;&lt;img alt="Spreadsheet of LLM cutoff dates" class="gallery-image" data-flex-basis="735px" data-flex-grow="306" height="536" loading="lazy" sizes="(max-width: 767px) calc(100vw - 30px), (max-width: 1023px) 700px, (max-width: 1279px) 950px, 1232px" src="https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-2.png" srcset="https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-2_hu_c6eecf38a263eb47.png 800w, https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-2_hu_2acf0e2fb11688ac.png 1600w, https://securitykid.com/posts/fingerprint-llm-knowledge-cutoff/image-2.png 1642w" width="1642"&gt;&lt;/p&gt;
&lt;p&gt;October 2023 narrowed it down to a few candidates: GPT-4 family members, Mistral 3, and Phi 4.&lt;/p&gt;
&lt;h2 id="step-4-confirm-with-model-specific-knowledge-probes"&gt;Step 4: Confirm With Model-Specific Knowledge Probes
&lt;/h2&gt;&lt;p&gt;To break the tie, I had the article generator write about the latest releases from each company.
It drew a blank on Mistral and Phi but handled OpenAI&amp;rsquo;s GPT-4 correctly, confirming it was a GPT-4 family model.&lt;/p&gt;</description></item></channel></rss>