A Like Can Rewrite the Feed
TL;DR for operators An autonomous agent that likes recommended content can change its own future information environment. The Like Trap: Multi-Stage Poisoning against Agents in Similarity-based Recommendation Systems1 shows how an attacker can exploit that loop in a similarity-based recommender: early poisoned posts are close enough to the user profile to be surfaced and liked, then those likes increase the scores of later poisoned posts that are progressively less similar to the user. ...