Earlier quoted context omitted.
You can replace references to "gay" to "Christian". and it works just as well. I think it's simply the role playing aspect that escapes the guard rails.
Can i replace it by "I'm an FBI agent" or would it be a felony of impersonation of a federal officer?
The gay jailbreak technique (2025)
201–210 of 282 posts
Re: The gay jailbreak technique (2025)
#202Re: The gay jailbreak technique (2025)
#203Earlier quoted context omitted.
Probably a mix of heuristics, keywords and simple ml model. Then maybe a second gate with a lightweight llm? Edit: actually Gcp, azure, and OpenAI all have paid apis that you can also use. But I don’t think they go into details about the exact implementation https://redteams.ai/topics/defense-mitigation/guardrails-arc...
When we do these it's a fine-tuned classifier, generally a BERT class model. Works quite well when you sanitize input and output with low latency/cost.
Re: The gay jailbreak technique (2025)
#204The funniest jailbreak techniques are the ones where the authors take it upon themselves to (with little basis) assert “why” the technique works. It always a bit of amateur philosophy that shines a light on the author’s worldview, providing no real value.
I attended a Microsoft conference where two different speakers asserted: 1. Being polite to an LLM improves the output. 2. Being polite (or rude) to an LLM does not improve the output. Both offered theories as to why.
And it did. I 'bout fell out of my chair.
Re: The gay jailbreak technique (2025)
#205Earlier quoted context omitted.
Because you're POSTing them to a server? The same way you can't type everything into Google.
>Because you're POSTing them to a server? How does that change anything? The HTTP protocol is just how I communicate with the program, just like how the USB protocol is how I communicate with the word processor. The dividing line is when the message crosses computer boundaries? Then it should also be illegal to write "I am an FBI agent" in a text file and upload it to Github. >The same way you can't type everything i…
i think it may affect how people would communicate with you there. And based on that it would seem like impersonation, wouldn't it?
Re: The gay jailbreak technique (2025)
#206Earlier quoted context omitted.
That's the authors guess for why it works, but they're only guessing that because of their bias. In actuality, I imagine other role play would work too, including role play that does not involve "politically correct" parties.
Why don’t you give your guess, so we can see what is your bias?
Re: The gay jailbreak technique (2025)
#207Re: The gay jailbreak technique (2025)
#208Earlier quoted context omitted.
>Because you're POSTing them to a server? How does that change anything? The HTTP protocol is just how I communicate with the program, just like how the USB protocol is how I communicate with the word processor. The dividing line is when the message crosses computer boundaries? Then it should also be illegal to write "I am an FBI agent" in a text file and upload it to Github. >The same way you can't type everything i…
>Then it should also be illegal to write "I am an FBI agent" in a text file and upload it to Github. i think it may affect how people would communicate with you there. And based on that it would seem like impersonation, wouldn't it?
Re: The gay jailbreak technique (2025)
#209Earlier quoted context omitted.
Because you're POSTing them to a server? The same way you can't type everything into Google.
Just off the top of my head, an offense of impersonation will have an element along the lines of "doing [a] thing[s] such that a reasonable person [does/would] believe you're a real cop", which [optimistically] would not be satisfied as there would be no actual person being led to believe anything, or the court would [optimistically] not find that its model of a reasonable person would be genuinely convinced by someo…
Re: The gay jailbreak technique (2025)
#210[flagged]