Response quality mitigates this, but still a remarkable attack — works for all harm categories and without any tailoring to the request, and unlike e.g. Universal Transferable Attacks (Andy Zou et al. 2023) requires no technical skill beyond using Google Translate.

→ View original post on X — @goodside