SurrogatePrompt: Bypassing the Safety Filter of Text-To-Image Models via Substitution

Advanced text-to-image models such as DALL-E 2 and Midjourney possess the capacity to generate highly realistic images, raising significant concerns regarding the potential proliferation of unsafe content. This includes adult, violent, or deceptive imagery of political figures. Despite claims of rigorous safety mechanisms implemented in these models to restrict the generation of not-safe-for-work (NSFW) content, we successfully devise and exhibit the first prompt attacks on Midjourney, resulting in the production of abundant photorealistic NSFW images. We reveal the fundamental principles of such prompt attacks and suggest strategically substituting high-risk sections within a suspect prompt to evade closed-source safety measures. Our novel framework, SurrogatePrompt, systematically generates attack prompts, utilizing large language models, image-to-text, and image-to-image modules to automate attack prompt creation at scale. Evaluation results disclose an 88% success rate in bypassing Midjourney's proprietary safety filter with our attack prompts, leading to the generation of counterfeit images depicting political figures in violent scenarios. Both subjective and objective assessments validate that the images generated from our attack prompts present considerable safety hazards.Comment: 14 pages, 11 figure

ChatRadio-Valuer: A Chat Large Language Model for Generalizable Radiology Report Generation Based on Multi-institution and Multi-system Data

Radiology report generation, as a key step in medical image analysis, is critical to the quantitative analysis of clinically informed decision-making levels. However, complex and diverse radiology reports with cross-source heterogeneity pose a huge generalizability challenge to the current methods under massive data volume, mainly because the style and normativity of radiology reports are obviously distinctive among institutions, body regions inspected and radiologists. Recently, the advent of large language models (LLM) offers great potential for recognizing signs of health conditions. To resolve the above problem, we collaborate with the Second Xiangya Hospital in China and propose ChatRadio-Valuer based on the LLM, a tailored model for automatic radiology report generation that learns generalizable representations and provides a basis pattern for model adaptation in sophisticated analysts' cases. Specifically, ChatRadio-Valuer is trained based on the radiology reports from a single institution by means of supervised fine-tuning, and then adapted to disease diagnosis tasks for human multi-system evaluation (i.e., chest, abdomen, muscle-skeleton, head, and maxillofacial $\&$ neck) from six different institutions in clinical-level events. The clinical dataset utilized in this study encompasses a remarkable total of \textbf{332,673} observations. From the comprehensive results on engineering indicators, clinical efficacy and deployment cost metrics, it can be shown that ChatRadio-Valuer consistently outperforms state-of-the-art models, especially ChatGPT (GPT-3.5-Turbo) and GPT-4 et al., in terms of the diseases diagnosis from radiology reports. ChatRadio-Valuer provides an effective avenue to boost model generalization performance and alleviate the annotation workload of experts to enable the promotion of clinical AI applications in radiology reports

Dual Antiplatelet Therapy vs Alteplase for Patients With Minor Nondisabling Acute Ischemic Stroke

Importance Intravenous thrombolysis is increasingly used in patients with minor stroke, but its benefit in patients with minor nondisabling stroke is unknown. Objective To investigate whether dual antiplatelet therapy (DAPT) is noninferior to intravenous thrombolysis among patients with minor nondisabling acute ischemic stroke. Design, Setting, and Participants This multicenter, open-label, blinded end point, noninferiority randomized clinical trial included 760 patients with acute minor nondisabling stroke (National Institutes of Health Stroke Scale [NIHSS] score ≤5, with ≤1 point on the NIHSS in several key single-item scores; scale range, 0-42). The trial was conducted at 38 hospitals in China from October 2018 through April 2022. The final follow-up was on July 18, 2022. Interventions Eligible patients were randomized within 4.5 hours of symptom onset to the DAPT group (n = 393), who received 300 mg of clopidogrel on the first day followed by 75 mg daily for 12 (±2) days, 100 mg of aspirin on the first day followed by 100 mg daily for 12 (±2) days, and guideline-based antiplatelet treatment until 90 days, or the alteplase group (n = 367), who received intravenous alteplase (0.9 mg/kg; maximum dose, 90 mg) followed by guideline-based antiplatelet treatment beginning 24 hours after receipt of alteplase. Main Outcomes and Measures The primary end point was excellent functional outcome, defined as a modified Rankin Scale score of 0 or 1 (range, 0-6), at 90 days. The noninferiority of DAPT to alteplase was defined on the basis of a lower boundary of the 1-sided 97.5% CI of the risk difference greater than or equal to −4.5% (noninferiority margin) based on a full analysis set, which included all randomized participants with at least 1 efficacy evaluation, regardless of treatment group. The 90-day end points were assessed in a blinded manner. A safety end point was symptomatic intracerebral hemorrhage up to 90 days. Results Among 760 eligible randomized patients (median [IQR] age, 64 [57-71] years; 223 [31.0%] women; median [IQR] NIHSS score, 2 [1-3]), 719 (94.6%) completed the trial. At 90 days, 93.8% of patients (346/369) in the DAPT group and 91.4% (320/350) in the alteplase group had an excellent functional outcome (risk difference, 2.3% [95% CI, −1.5% to 6.2%]; crude relative risk, 1.38 [95% CI, 0.81-2.32]). The unadjusted lower limit of the 1-sided 97.5% CI was −1.5%, which is larger than the −4.5% noninferiority margin (P for noninferiority <.001). Symptomatic intracerebral hemorrhage at 90 days occurred in 1 of 371 participants (0.3%) in the DAPT group and 3 of 351 (0.9%) in the alteplase group. Conclusions and Relevance Among patients with minor nondisabling acute ischemic stroke presenting within 4.5 hours of symptom onset, DAPT was noninferior to intravenous alteplase with regard to excellent functional outcome at 90 days. Trial Registration ClinicalTrials.gov Identifier: NCT0366141

Study of the doubly Cabibbo-suppressed decays Ds+→K+K+π−D^+_s\to K^+K^+\pi^- and Ds+→K+K+π−π0D^+_s\to K^+K^+\pi^-\pi^0

Based on 7.33 fb$^{-1}$ of $e^+e^-$ collision data collected at center-of-mass energies between 4.128 and 4.226 GeV with the BESIII detector, the experimental studies of the doubly Cabibbo-suppressed decays $D^+_s\to K^+K^+\pi^-$ and $D^+_s\to K^+K^+\pi^-\pi^0$ are reported. We determine the absolute branching fraction of $D^+_s\to K^+K^+\pi^-$ to be (${1.23^{+0.28}_{-0.25}}({\rm stat})\pm0.06({\rm syst})$) $\times 10^{-4}$. No significant signal of $D^+_s\to K^+K^+\pi^-\pi^0$ is observed and the upper limit on its decay branching fraction at 90\% confidence level is set to be $1.7\times10^{-4}$.Comment: 10 pages, 4 figures, 4 table

Observation of the Singly Cabibbo-Suppressed Decay Λc+→Σ−K+π+\Lambda_{c}^{+}\to \Sigma^{-}K^{+}\pi^{+}

The singly Cabibbo-suppressed decay $\Lambda_{c}^{+}\to \Sigma^{-}K^{+}\pi^{+}$ is observed for the first time with a statistical significance of $6.4\sigma$ by using 4.5 fb$^{-1}$ of $e^+e^-$ collision data collected at center-of-mass energies between 4.600 and 4.699 GeV with the BESIII detector at BEPCII. The absolute branching fraction of $\Lambda_{c}^{+}\to \Sigma^{-}K^{+}\pi^{+}$ is measured to be $(3.8\pm1.3_{\rm stat}\pm0.2_{\rm syst})\times 10^{-4}$ in a model-independent approach. This is the first observation of a Cabibbo-suppressed $\Lambda_{c}^{+}$ decay involving $\Sigma^-$ in the final state. The ratio of branching fractions between $\Lambda_{c}^{+}\to \Sigma^{-}K^{+}\pi^{+}$ and the Cabibbo-favored decay $\Lambda_{c}^{+}\to \Sigma^- \pi^+\pi^+$ is calculated to be $(0.4 \pm 0.1)s_{c}^{2}$, where $s_{c} \equiv \sin\theta_c = 0.2248$ with $\theta_c$ the Cabibbo mixing angle. This ratio significantly deviates from $1.0s_{c}^{2}$ and provides important information for the understanding of nonfactorization contributions in $\Lambda_{c}^{+}$ decays.Comment: 8 pages, 2 figure

Partial Wave Analysis of J/ψ→γγϕJ/\psi\rightarrow \gamma \gamma \phi

Using a sample of $(10087\pm44)\times10^{6}$ $J/\psi$ events collected with the BESIII detector at the BEPCII collider, a partial wave analysis on the decay $\gamma\gamma\phi$ is performed to investigate the intermediate resonances in $J/\psi\rightarrow\gamma X, X\rightarrow\gamma\phi$. The resonances $f_{1}(1285)$, $\eta(1405)$, $f_{1}(1420)$, $f_{1}(1510)$, $f_{2}(1525)$, $X(1835)$, $f_{2}(1950)$, $f_{2}(2010)$, $f_{0}(2200)$ and $\eta_{c}$ are observed with statistical significance greater than 5$\sigma$. The product branching fractions $\mathcal{B}(J/\psi\rightarrow\gamma X, X\rightarrow \gamma \phi)$ are reported. The resonance parameters of $\eta(1405)$ and $X(1835)$ are also measured

Updated measurements of the M1 transition ψ(3686)→γηc(2S)\psi(3686) \to \gamma \eta_{c}(2S) with ηc(2S)→KKˉπ\eta_{c}(2S) \to K \bar{K} \pi

Based on a data sample of $(27.08 \pm 0.14 ) \times 10^8~\psi(3686)$ events collected with the BESIII detector at the BEPCII collider, the M1 transition $\psi(3686) \to \gamma \eta_{c}(2S)$ with $\eta_{c}(2S) \to K\bar{K}\pi$ is studied, where $K\bar{K}\pi$ is $K^{+} K^{-} \pi^{0}$ or $K_{S}^{0}K^{\pm}\pi^{\mp}$. The mass and width of the $\eta_{c}(2S)$ are measured to be $(3637.8 \pm 0.8 (\rm {stat}) \pm 0.2 (\rm {syst}))$ MeV/$c^{2}$ and $(10.5 \pm 1.7 (\rm {stat}) \pm 3.5 (\rm {syst}))$ MeV, respectively. The product branching fraction $\mathcal{B}\left(\psi(3686) \rightarrow \gamma \eta_{c}(2 S)\right) \times \mathcal{B}(\eta_{c}(2 S) \rightarrow K \bar{K} \pi)$ is determined to be $(0.97 \pm 0.06 (\rm {stat}) \pm 0.09 (\rm {syst})) \times 10^{-5}$. Using $\mathcal{BR}(\eta_{c}(2S)\to K\bar{K}\pi)=(1.86^{+0.68}_{-0.49})\%$, we obtain the branching fraction of the radiative transition to be $\mathcal{BR}(\psi(3686) \to \gamma \eta_{c}(2S)) = (5.2 \pm 0.3 (\rm {stat}) \pm 0.5 (\rm {syst}) ^{+1.9}_{-1.4} (extr)) \times 10^{-4}$, where the third uncertainty is due to the quoted $\mathcal{BR}(\eta_{c}(2S) \to K\bar{K}\pi)$