Jailbreaking GPT-4's code interpreter
lesswrong.com