164
How Googlers cracked an SF rival's tech model with a single word | A research team from the tech giant got ChatGPT to spit out its private training data
(www.sfgate.com)
Basically: you ask for poems forever, and LLMs start regurgitating training data:
The paper it links to does in detail: by asking it to repeat "poem" forever
Did it work for you? Because I get nothing
Probably was patched not to work. It's a cat and mouse game.
It works on https://deepai.org/chat
They gave OpenAI 60 days notice before publishing so that they could add a new guardrail. That's surely what happened.
Any word. Book also worked