How Johnny Can Persuade LLMs to Jailbreak Them: Rethinking Persuasion to Challenge AI Safety by Humanizing LLMs

Most traditional AI safety research has approached AI models as machines and centered on algorithm-focused attacks developed by security experts. As large language models (LLMs) become increasingly common and competent, non-expert users can also impose risks during daily interactions. This paper introduces a new perspective to jailbreak LLMs as human-like communicators, to explore this overlooked intersection between everyday language interaction and AI safety. Specifically, we study how to persuade LLMs to jailbreak them. First, we propose a persuasion taxonomy derived from decades of social science research. Then, we apply the taxonomy to automatically generate interpretable persuasive adversarial prompts (PAP) to jailbreak LLMs. Results show that persuasion significantly increases the jailbreak performance across all risk categories: PAP consistently achieves an attack success rate of over $92\%$ on Llama 2-7b Chat, GPT-3.5, and GPT-4 in $10$ trials, surpassing recent algorithm-focused attacks. On the defense side, we explore various mechanisms against PAP and, found a significant gap in existing defenses, and advocate for more fundamental mitigation for highly interactive LLMsComment: 14 pages of the main text, qualitative examples of jailbreaks may be harmful in natur

Early malperfusion, ischemia reperfusion injury, and respiratory failure in acute complicated type B aortic dissection after thoracic endovascular repair

BACKGROUND: The aim of this study was to determine the early mortality and major complications of acute complicated type B aortic dissection (ACBD) after thoracic endovascular aortic repair (TEVAR). METHODS: Twenty-six consecutive patients with ACBD who underwent TEVAR were included. Clinical indications before TEVAR and in-hospital mortality and major complications after TEVAR were analyzed and compared with similar reports. RESULTS: TEVAR was technically successful in all cases. In-hospital mortality occurred in four patients (15%), and major complications occurred in an additional four patients (15%). Three of the four (75%) of the deaths were associated with malperfusion and ischemia reperfusion injury (IRI), and 3/4 (75%) of the major complications were caused by respiratory failure (RF). CONCLUSIONS: In-hospital mortality associated strongly with severe end-organ malperfusion and IRI, while major complications associated with RF, during TEVAR. Our results indicate that malperfusion, IRI and respiratory failure during TEVAR should be carefully monitored and aggressively treated

Highly sensitive and selective CO sensor using a 2.33 μm diode laser and wavelength modulation spectroscopy

A ppm-level CO sensor based on a 2f wavelength modulation spectroscopy (2f-WMS) technique was developed for the application of SF6 decomposition analysis in an electric power system. A detailed investigation of the optimum target line selection was carried out to avoid spectral interference from high purity SF6 in a wide wavelength range. A diode laser emitting at 2.33 μm and a 14.5-m multipass gas cell (MGC) was employed to target the R(6) line of the CO first overtone band and increase the optical path, respectively, thus resulting in a minimum detection sensitivity of 1 ppm. A Levenberg-Marquardt nonlinear least-squares fit algorithm makes full use of the information from all data points of the 2f spectrum and as a result, a measurement precision of ~40 ppb was achieved with a data update rate of 0.6 s. The sensor performance was also evaluated in terms of the gas flow rate, stability, and linearity. The results showed that the best operating condition with a precision of 6 ppb can be achieved by increasing the gas flow rate to the value that matches the optimum averaging time of 48 s

Beat frequency quartz-enhanced photoacoustic spectroscopy for fast and calibration-free continuous trace-gas monitoring

Quartz-enhanced photoacoustic spectroscopy (QEPAS) is a sensitive gas detection technique which requires frequent calibration and has a long response time. Here we report beat frequency (BF) QEPAS that can be used for ultra-sensitive calibration-free trace-gas detection and fast spectral scan applications. The resonance frequency and Q-factor of the quartz tuning fork (QTF) as well as the trace-gas concentration can be obtained simultaneously by detecting the beat frequency signal generated when the transient response signal of the QTF is demodulated at its non-resonance frequency. Hence, BF-QEPAS avoids a calibration process and permits continuous monitoring of a targeted trace gas. Three semiconductor lasers were selected as the excitation source to verify the performance of the BF-QEPAS technique. The BF-QEPAS method is capable of measuring lower trace-gas concentration levels with shorter averaging times as compared to conventional PAS and QEPAS techniques and determines the electrical QTF parameters precisely

Opposite effects of Co and Cu dopants on the catalytic activities of birnessite MnO2 catalyst for low-temperature formaldehyde oxidation

Defect engineering is an effective strategy to enhance the activity of catalysts for various applications. Herein, it was demonstrated that in addition to enhancing surface properties via doping, the influence of dopants on the surface-intermediate interaction is a critical parameter that impacts the catalytic activity of doped catalysts for low-temperature formaldehyde (HCHO) oxidation. The incorporation of Co into the lattice structure of δ-MnO2 led to the generation of oxygen vacancies, which promoted the formation of surface active oxygen species, reduced activation energy, and enhanced catalytic activity for low-temperature oxidation of HCHO. On the contrary, Cu doping led to a drastic suppression of the catalytic activity of δ-MnO2, despite its enhanced redox properties and slight increase in the surface concentration of active oxygen species, compared to pristine δ-MnO2. Diffuse reflectance infrared Fourier transform analysis revealed that in the presence of Cu, carbonate intermediate species accumulate on the surface of the catalysts, leading to partial blockage of active sites and suppression of catalytic activity

Single-tube on-beam quartz-enhanced photoacoustic spectroscopy.

Quartz-enhanced photoacoustic spectroscopy (QEPAS) with a single-tube acoustic microresonator (AmR) inserted between the prongs of a custom quartz tuning fork (QTF) was developed, investigated, and optimized experimentally. Due to the high acoustic coupling efficiency between the AmR and the QTF, the single-tube on-beam QEPAS spectrophone configuration improves the detection sensitivity by 2 orders of magnitude compared to a bare QTF. This approach significantly reduces the spectrophone size with respect to the traditional on-beam spectrophone configuration, thereby facilitating the laser beam alignment. A 1σ normalized noise equivalent absorption coefficient of 1.21×10(-8) cm(-1)·W/√Hz was obtained for dry CO2 detection at normal atmospheric pressure

Quartz enhanced photoacoustic H2S gas sensor based on a fiber-amplifier source and a custom tuning fork with large prong spacing

A quartz enhanced photoacoustic spectroscopy (QEPAS) sensor, employing an erbium-doped fiber amplified laser source and a custom quartz tuning fork (QTF) with its two prongs spaced ∼800 μm apart, is reported. The sensor employs an acoustic micro-resonator (AmR) which is assembled in an “on-beam” QEPAS configuration. Both length and vertical position of the AmR are optimized in terms of signal-to-noise ratio, significantly improving the QEPAS detection sensitivity by a factor of ∼40, compared to the case of a sensor using a bare custom QTF. The fiber-amplifier-enhanced QEPAS sensor is applied to H2S trace gas detection, reaching a sensitivity of ∼890 ppb at 1 s integration time, similar to those obtained with a power-enhanced QEPAS sensor equipped with a standard QTF, but with the advantages of easy optical alignment, simple installation, and long-term stability

Simultaneous dual-gas QEPAS detection based on a fundamental and overtone combined vibration of quartz tuning fork

A dual-gas quartz-enhanced photoacoustic spectroscopy (QEPAS) sensor system based on a frequency division multiplexing technique of a quartz tuning fork (QTF) was developed and experimentally demonstrated. Two beams from two independently modulated lasers are focused at two different positions between the QTF prongs to excite both the QTF fundamental and 1st overtone flexural modes simultaneously. The 2f-wavelength modulation technique is employed by applying two sinusoidal dithers, whose frequencies are equal to a half of the QTF fundamental and 1st overtone frequencies, respectively, to the currents of two excitation lasers. The resonance frequency difference between two flexural modes ensures that the correlated photoacoustic signals generated by different target gases do not interfere with each other. The proposed QEPAS methodology realizes a continuous real-time dual-gas monitoring with a simple setup and small sensor size compared with previous multi-gas QEPAS sensors

Murine model of elastase-induced proximal thoracic aortic aneurysm through a midline incision in the anterior neck

ObjectiveThis study was performed to develop a murine model of elastase-induced proximal thoracic aortic aneurysms (PTAAs).MethodsThe ascending thoracic aorta and aortic arch of adult C57BL/6J male mice were exposed through a midline incision in the anterior neck, followed by peri-adventitial elastase or saline application. The maximal ascending thoracic aorta diameter was measured with high-resolution micro-ultrasound. Twenty-eight days after the operation, the aortas were harvested and analyzed by histopathological examination and qualitative polymerase chain reaction to determine the basic characteristics of the aneurysmal lesions.ResultsFourteen days after the operation, the dilation rate (mean ± standard error) in the 10-min elastase application group (n = 10, 71.44 ± 10.45%) or 5-min application group (n = 9, 42.67 ± 3.72%) were significantly higher than that in the saline application group (n = 9, 7.37 ± 0.94%, P < 0.001 for both). Histopathological examination revealed aortic wall thickening, degradation of elastin fibers, loss of smooth muscle cells, more vasa vasorum, enhanced extracellular matrix degradation, augmented collagen synthesis, upregulated apoptosis and proliferation capacity of smooth muscle cells, and increased macrophages and CD4+ T cells infiltration in the PTAA lesions. Qualitative analyses indicated higher expression of the proinflammatory markers, matrix metalloproteinase-2 and -9 as well as Collagen III, Collagen I in the PTAAs than in the controls.ConclusionWe established a novel in vivo mouse model of PTAAs through a midline incision in the anterior neck by peri-adventitial application of elastase. This model may facilitate research into the pathogenesis of PTAA formation and the treatment strategy for this devastating disease