NEW PAPER: Best-of-N Jailbreaking.

We modify LLM inputs with simple, randomly generated augmentations and jailbreak frontier models across text, vision, and audio modalities.

The algorithm is simple, scalable and highly effective.