3 ms·
Considering these are essentially document completion engines[0], can't you just start the task with the version that doesn't refuse and then continue with the
by badsectoracula 1mo ago
Considering these are essentially document completion engines[0], can't you just start the task with the version that doesn't refuse and then continue with the version that would refuse but now has to keep going after it accepted the task? :-P
[0] in the sense that the "discussion" is basically a turn based game between you and the LLM filling a chat transcript document
- edg5000 1mo agoThe article proves your point. It's eventually proceeded once there was the right history. If he already had the exploit and wanted the model to write an implementation, faking the history could have tripped the model over the edge. So the guardrails aren't unsurmountable.