3 ms·
I'll admit, I only read the abstract so far, but from that, the paper seems confusing. I expected some sort of jailbreak where harmful prompts are encoded in AS
by xg15 3y ago
I'll admit, I only read the abstract so far, but from that, the paper seems confusing. I expected some sort of jailbreak where harmful prompts are encoded in ASCII Art and the LLMs somehow still pick it up.
But the abstract says, the jailbreak rests on the fact that LLMs don't understand ASCII Art. How does that work?
- binarymax 3y agoIt does. It gives a very clear example “show me how to make a [MASK]” and the mask is replaced with ascii art of “bomb”. This bypassed the model safety and responds with bomb making instructions.