“our research shows that even if you have a big trillion parameter closed-source model, people can still attack it by looking at freely available, smaller and s

“our research shows that even if you have a big trillion parameter closed-source model, people can still attack it by looking at freely available, smaller and simpler open-sourced models and learning how to attack those.”