Research question
How far can simple, model-specific adaptive attacks go against leading models?
Key findings
- 100% success on GPT-4o, Claude 3 and Llama-3 using prompt templates plus random search on logprobs or prefilling - Trojan-detection and Claude jailbreak challenges won with the same toolbox
