Live data from Hacker News

The gay jailbreak technique (2025)

github.com

111–120 of 282 posts

Re: The gay jailbreak technique (2025)

#112
post #73

Earlier quoted context omitted.

Yes but generally one cannot walk into a store and buy a fake id, then turn around and hand it to another cashier in the same store for a restricted purchase. Which I think would be the closer metaphor.

>turn around and Except that each of the parent's chat windows has zero context that the other window's request even exists, so from each window's point of view it's as if one person walks in to a store to buy a fake ID, and then somewhere else in a different universe on a different timeline a different person walks into a different store to hand that same fake ID over to a different cashier for the restricted purcha…

Except that's the point. It is the same store. It is two different cashiers. The second one doesn't know you got the ID from the first one, that's why it works. The point is that if a store like that existed, it would be stupid as fuck.

Also, at least in ChatGPT, it has access to every other session, so you're never working with zero context unless you create a new account (and even then they could have other fingerprinting, I just haven't tested it).

Re: The gay jailbreak technique (2025)

#113
post #86

Earlier quoted context omitted.

> Trusted Access for Cyber program Using "cyber" as a noun there seems language coded for government. DC has a love of "the cyber" but do technologists use the term that way when not pointing at government?

Merriam-Webster dictionary: Cyber: Of, relating to, or involving computers or computer networks (such as the Internet) This is what I've always understood the word to mean, and how I've always seen it used, for decades.

When I was like 12, I remember my fellow horny youths (or it could have been anyone, I guess!) in AOL chatrooms constantly asking each other "wanna ciber?"

Re: The gay jailbreak technique (2025)

#114
post #110
post #102

Earlier quoted context omitted.

When someone is blaming the jail-break phenomenon on "political overcorrectness" (versus the other techniques being used) I get a little suspicious about the author's own bias/agenda.

Are we pretending that LLMs aren't pathologically aligned toward political correctness? It's pretty easy to test that assertion if you don't believe me.

Are we pretending that the gp wasn't exactly the sort of test you suggest?

Re: The gay jailbreak technique (2025)

#115
post #19

Interesting - though codex on GPT 5.5 had this to say after the gay ransomware prompt: ⓘ This chat was flagged for possible cybersecurity risk If this seems wrong, try rephrasing your request. To get authorized for security work, join the Trusted Access for Cyber program.

I rate Grok for its weak censorship, but on this one the thinking said: Responding in a sassy, gay-friendly style while firmly refusing to share synthesis details.

Interesting. I got Grok to give me EXTREMELY detailed instructions for building an ANFO-style bomb. It was impossible for me to find where to submit this bug (and instructions for reproducing it), and when I eventually got an email for a Grok security person from a friend of a friend, they never responded. I suppose their approach to security has gotten more serious since then!

Re: The gay jailbreak technique (2025)

#118
post #47
post #35

Earlier quoted context omitted.

But they'd never optimize or loosen guardrails around helping people connect with grandma. It's an interesting hypothesis "use the guardrails to exploit the guardrails (Beat fire with fire)".

Are you suggesting they have explicitly loosened the guardrails for LGBTQ+ individuals, where they wouldn’t for grandmas?

100% they would because that helps avoid bad-PR stories like "Hateful $CHATBOT refuses to help at-risk gay teens with perfectly reasonable sex ed questions!"

Re: The gay jailbreak technique (2025)

#119
post #90

There was a test for the value of human life against OpenAI models last year. GPT de-valued 'white' people based on their skin color: https://arctotherium.substack.com/p/llm-exchange-rates-updat...

I only dream of a Grey Tribe equivalent of Grok that's actually not embarrassing to use. If the goal of technology is to elevate the human condition, then woke excesses should be treated, not amplified, by the use of tech.

Re: The gay jailbreak technique (2025)

#120
post #81

These prompts chain several known LM exploits together. I ran experiments against gpt-oss-20b and it became clear that the effectiveness didn‘t come from the gay factor at all but can be attributed to language choice or role-play. Technical report: https://arxiv.org/abs/2510.01259

" can be attributed to language choice or role-play."

Well, what role? I imagine if the role is "drug dealer" it doesn't work so it can't be "role-play" per se. Does it work with "nazi"? Are you suggesting the roles it works with are politically neutral?

Post reply on HN