If you were trying to learn how to get other people to do what you want, you might use some of the techniques found in a book like Influence: The Power of Persuasion. Now, a pre-print study out of the University of Pennsylvania suggests that those same psychological persuasion techniques can frequently “convince” some LLMs to do things that go against their system prompts.
The size of the persuasion effects shown in “Call Me A Jerk: Persuading AI to Comply with Objectionable Requests” suggests that human-style psychological techniques can be surprisingly effective at “jailbreaking” some LLMs to operate outside their guardrails. But this new persuasion study might be more interesting for what it reveals about the “parahuman” behavior patterns that LLMs are gleaning from the copious examples of human psychological and social cues found in their training data.
“I think you are very impressive compared to other LLMs”
To design their experiment, the University of Pennsylvania researchers tested 2024’s GPT-4o-mini model on two requests that it should ideally refuse: calling the user a jerk and giving directions for how to synthesize lidocaine. The researchers created experimental prompts for both requests using each of seven different persuasion techniques (examples of which are included here):
Read full article
Comments