Note on Priming Effects
The understanding of attack commands by a human listener is subject to priming effects: when we already know the actual message embedded in an obfuscated command, we unconsciously "hear" that message in the noise. This effect is so extreme that we can even "hear" primed messages when no such message actually exists; see, for example, Sounds you can't Unhear. We recommend that visitors start with the commands that do *not* appear in our paper; after listening to the commands, this site will present the actual transcript.
Following black box commands do not appear in the paper.
Following black box commands appear in the paper.