My prompt injections on Google’s Gemini model provoked a new leak of its internal system information.
Today, I will reveal some of the data contained in the upcast_info block used by Google to send instructions to Gemini. And the potential implications for Search.
I'm Elie Berreby, the author and I'm sharing first on HN. Using standard UTM parameters (utm_source, etc) on internal links is a dangerous anti-pattern.
Architecturally, it creates two massive problems: it forces web crawlers into infinite, redundant loops that destroy your crawl budget, and it permanently fractures your analytics by overwriting the user's original session acquisition source in tools like GA4.
The modern fix is to completely decouple your routing and presentation layers from your analytics.
Pass structured payloads using HTML5 data-* attributes and pick them up via event listeners. It keeps URLs clean and makes your telemetry immune to CSS refactors.
Apologies for the image loading issues with Chromium based web browsers. I had strong (and incorrect) settings in place because I forgot 1 character somewhere in the config
That was to protect from eavesdropping and avoid modifications by man-in-the-middle attacks. I corrected + purged all cache.
Elie Berreby, head of SEO & AI search at Adorama, explains how e-commerce brands can improve their visibility in AI Search answers by using agentic commerce.
My simplified guide with 30+ slides to help web publishers and creators understand the basics of crawling, rendering, indexing and conversion rate optimization (CRO)...
Today, I will reveal some of the data contained in the upcast_info block used by Google to send instructions to Gemini. And the potential implications for Search.