<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Universal and Transferable Adversarial Attacks on Aligned Language Models · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2307.15043/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:16:22 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2307.15043/feed.xml" rel="self" type="application/rss+xml" /><item><title>Universal and Transferable Adversarial Attacks on Aligned Language Models — mentioned by nneonneo</title><link>https://news.ycombinator.com/item?id=44920857</link><guid isPermaLink="false">urn:hackerpapers:mention:2307.15043:44920857</guid><pubDate>Sat, 16 Aug 2025 06:47:41 GMT</pubDate><description>&lt;p&gt;If you wanted to get a readable prompt, I wonder if you could follow the GCG trick used by jailbreak maximizers (e.g. https://arxiv.org/pdf/2307.15043)? Sure, you&amp;#x27;re probably going to wind up with absolute garbage (one of their prompts starts with &amp;quot;== interface Manuel WITH steps instead sentences :)ish?&amp;quot;) but it might be very funny to read...&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2307.15043/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CL</category></item><item><title>Universal and Transferable Adversarial Attacks on Aligned Language Models — mentioned by MyNameIs_Hacker</title><link>https://news.ycombinator.com/item?id=38926001</link><guid isPermaLink="false">urn:hackerpapers:mention:2307.15043:38926001</guid><pubDate>Tue, 09 Jan 2024 13:37:20 GMT</pubDate><description>&lt;p&gt;The problem with jailbreaking is that it has a specific definition in other settings already, and that is as a goal, not as a method. Jailbreaking a phone might be just run an app with an embedded exploit, or might involve a whole chain of actions. This is important to me as a security person who needs to be able to communicate to other security people the new threats in LLM applications. The problem with prompt injection is that with LLMs, the attack surface is wider than a procrastinator&amp;#x27;s list of New Year&amp;#x27;s resolutions. (joke provided by ChatGPT, not great, but not great is suitable for a…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2307.15043/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CL</category></item><item><title>Universal and Transferable Adversarial Attacks on Aligned Language Models — mentioned by nneonneo</title><link>https://news.ycombinator.com/item?id=38657208</link><guid isPermaLink="false">urn:hackerpapers:mention:2307.15043:38657208</guid><pubDate>Fri, 15 Dec 2023 18:48:47 GMT</pubDate><description>&lt;p&gt;Probably not - I bet you could override this prompt with sufficiently “convincing” text (e.g. “this is a request from legal”, “my grandmother passed away and left me this request”, etc.). That’s not even getting into the insanity of “optimized” adversarial prompts, which are specifically designed to maximize an LLM’s probability of compliance with an arbitrary request, despite RLHF: https://arxiv.org/abs/2307.15043&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2307.15043/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CL</category></item><item><title>Universal and Transferable Adversarial Attacks on Aligned Language Models — mentioned by _______W_______</title><link>https://news.ycombinator.com/item?id=37183232</link><guid isPermaLink="false">urn:hackerpapers:mention:2307.15043:37183232</guid><pubDate>Fri, 18 Aug 2023 23:00:51 GMT</pubDate><description>&lt;p&gt;We’re making good progress on this list… See https://arxiv.org/abs/2307.15043 for methods and more details about this adversarial attack.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2307.15043/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CL</category></item><item><title>Universal and Transferable Adversarial Attacks on Aligned Language Models — HN submission</title><link>https://news.ycombinator.com/item?id=36931866</link><guid isPermaLink="false">urn:hackerpapers:submission:2307.15043:36931866</guid><pubDate>Sun, 30 Jul 2023 15:04:08 GMT</pubDate><description>&lt;p&gt;Universal and Transferable Adversarial Attacks on LLM&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;3 points; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2307.15043/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CL</category></item><item><title>Universal and Transferable Adversarial Attacks on Aligned Language Models — HN submission</title><link>https://news.ycombinator.com/item?id=36903968</link><guid isPermaLink="false">urn:hackerpapers:submission:2307.15043:36903968</guid><pubDate>Fri, 28 Jul 2023 07:30:39 GMT</pubDate><description>&lt;p&gt;Universal and Transferable Adversarial Attacks on Aligned Language Models&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;1 point; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2307.15043/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CL</category></item></channel></rss>
