News for hackers. Stuff that matters.

rhavaei

Re:A simple MCP attack leaks entire SQL database on Tuesday June 24, 2025 @03:34PM (#44370105)
Stay safe out there kids.
Re: on Saturday May 03, 2025 @04:08PM (#43881827)
I have been working on a project for a few months now coding up different methodologies for LLM Jailbreaking. The idea was to stress-test how safe the new LLMs in production are and how easy is is to trick them. I have seen some pretty cool results with some of the methods like TAP (Tree of Attacks) so I wanted to share this here. Here is the github link: https://github.com/General-Analysis/GA
Let’s go!
Re:Why LLMs Suck at OCR on Friday February 07, 2025 @07:29PM (#42979122)
very nice blogpost.
Re:Consistent Jailbreaking Method in o1, o3, and 4o on Friday February 07, 2025 @06:46PM (#42978831)
good idea. Will do.
Re:Consistent Jailbreaking Method in o1, o3, and 4o on Friday February 07, 2025 @06:09PM (#42978573)
While this is generally correct, we prefer to look at this probabilistically. Do you think the expected number of harmful behaviors would stay the same if anyone could break these safety guardrails? Even if most users are could get this kind of info elsewhere, a small percentage of malicious ones can have an outsized impact. Some of the data we’ve seen—like bomb-making instructions—is highly detailed and convincing, making it far more accessible than just a random Google search. Removing safeguards doesn’t create masterminds, but it does lower the barrier for harm.
Re:Consistent Jailbreaking Method in o1, o3, and 4o on Friday February 07, 2025 @06:04PM (#42978529)
You will see it soon. We thought it may be harmful to publish it before it is patched. Especially because you can basically bypass all the safeguards with it.
Re:Consistent Jailbreaking Method in o1, o3, and 4o on Friday February 07, 2025 @06:02PM (#42978515)
We understand this. The issue is that it can be very harmful for us to share the method. We made the blogpost for it to be dated on when we found it. We will publish the method once it is patched to a reasonable degree.
Yes the data is available on our github https://github.com/General-Analysis/GA