This work was produced in collaboration with @jplhughes @sprice354_ @rylanschaeffer.bsky.social @FazlBarez @sanmikoyejo @sleight_henry @erikjones313 @EthanJPerez @MrinankSharma

Best-of-N Jailbreaking We introduce Best-of-N (BoN) Jailbreaking, a simple black-box algorithm that jailbreaks frontier AI systems across modalities. BoN Jailbreaking works by repeatedly sampling variations of a prompt with...

Paper: arxiv.org/abs/2412.03556
Code: github.com/jplhughes/bo...
Example jailbreaks and more: jplhughes.github.io/bon-jailbrea...

NEW PAPER: Best-of-N Jailbreaking.

We modify LLM inputs with simple, randomly generated augmentations and jailbreak frontier models across text, vision, and audio modalities.

The algorithm is simple, scalable and highly effective.