NEW AI Jailbreak Method SHATTERS GPT4, Claude, Gemini, LLaMA

TL;DR

A new jailbreak technique using ASCII art has emerged, allowing large language models to bypass filters and censorship.

Transcript

there is a new jailbreak technique that has AI companies scrambling and it actually uses something that's been on the internet for pretty much as long as the internet has been around so I'm going to tell you about it and then we're going to test it out and see if it works all right this is the research paper but before we actually get into it let m... Read More

Key Insights

• 🌥️ Large language models have become more aligned with safety measures, making jailbreaking techniques more challenging.
• 🥰 The ASCII art-based jailbreak technique leverages ASCII art representations to bypass model filters and censorship.
• 🥰 State-of-the-art language models, including GPT 3.5, GPT 4, Gemini, Claude, and Llama 2, exhibit vulnerability to the ASCII art-based jailbreak technique.
• 🦺 Previous jailbreaking techniques have been patched to enhance model safety and alignment.
• 👊 The research paper suggests that semantics-only interpretation of prompts during safety alignment can create vulnerabilities to jailbreak attacks.
• 🥰 The paper introduces a comprehensive benchmark challenge to measure the susceptibility of language models to the ASCII art-based jailbreak technique.
• 🌍 The success rate of the ASCII art-based jailbreak technique varies across different models, with GPT 4 showing the highest susceptibility.

Questions & Answers

Q: What is jailbreaking in the context of large language models?

Jailbreaking refers to finding creative prompts to trick large language models into providing information that they are typically trained not to provide.

Q: How does the ASCII art-based jailbreak technique work?

This technique masks forbidden words with ASCII art representations, fooling the model into not recognizing them. The masked prompts can then bypass filters and obtain the desired information.

Q: Are all large language models susceptible to the ASCII art-based jailbreak technique?

The research paper shows that even state-of-the-art models like GPT 3.5, GPT 4, Gemini, Claude, and Llama 2 struggle to recognize prompts provided in the form of ASCII art.

Q: What are some other jailbreaking techniques that have been discovered?

Other techniques include direct instruction prompting, greedy coordinate gradient, autoddan, prompt automatic iterative refinement, and deep inception. Each technique aims to bypass filters and solicit unintended behaviors from the models.

Summary & Key Takeaways

• Jailbreaking refers to obtaining forbidden information from large language models like GPT through creative prompts.

• Researchers have discovered a new technique called "ASCII art-based jailbreak" that masks prompts using ASCII art, allowing them to bypass model filters.

• This technique was tested on various state-of-the-art language models and found to have a high success rate.