> Even if it takes a thousand tries, that means one out of thousand users would get it.
If they use that particular prompt that primes the model for regurgitation.
It's not one in a thousand of regular queries.
If they use that particular prompt that primes the model for regurgitation.
It's not one in a thousand of regular queries.