Anton

The two tricks the writeup credits for keeping the model cooperative, the long shared history and switching to Classical Chinese partway through, are not new. Prompting in a low resource language to slip past safety filters shows up in published safety research already. What is new is somebody pointing a known trick at a named commercial app and writing it up as a triumph of reverse engineering instead of a gap in a safety filter.