ECHO jailbreak search scores reply harmfulness instead of compliance prefixes
Authors report up to 0.898 StrongREJECT and 89.23% HarmBench success on five open-weight models; code is public.
2 stories, newest first · one card per story
Authors report up to 0.898 StrongREJECT and 89.23% HarmBench success on five open-weight models; code is public.
Output-prefix attacks plus injected reasoning jailbreak Gemini, DeepSeek, and Claude models at up to 99% success.
Today 1.6K readers · 2.4K views · 774 reads · all time 189K views