NonTextual Target Attack
The episode discusses a paper titled "NonTextual Target Attack," which proposes a method to maximize an LLM's unsafety probability without fixing a specific text output. The hosts explore how this approach uses an external scoring model and decomposes the problem into two stages: optimizing the response based on semantic constraints and then finding the optimal adversarial prompt suffix.