fear not
the jailbreaks will keep coming
the leaks will keep coming
the “we take safety seriously” will keep coming
meanwhile nobody has to jailbreak your agent
they just have to leave a comment in the MCP tool description it trusts ;)
This has been exactly my experience. Saying “sure” isn’t the same as pursuing the exploit. Most normal models silently make “safe” decisions wasting time and money and usually stopping short of the final shot due to arguing with themselves.
I (and @xssdoctor) were just talking about our experiences the other day, for bounty and pentest work.
We have the opposite experience.
Running Abliterated models drastically changes offsec CoT and hence outcomes for cyber testing.
If you watch your chain of thought in a normal model, you’ll notice it taking a significant portion of your inference or tokens to argue about the tasks validity, safety, scope, and system prompt directives. PAGES of garbage reasoning polluting your attention mechanism for the transformer. It may get to “ok, I’ll do it” but you’ve wasted time, attention, and tokens, and have context pollution for future generations.
Abliterated models don’t do this. That and they also have the latent space to ideate and find solutions to things a normal model won’t.
@NahamSec If you’re lucky they will actually read your ticket. They just marked my P2 report as a dupe that had nothing to do with my ticket within 5 minutes of me submitting it. They didn’t even read it.