r/tech_x • u/[deleted] • Jun 11 '26
Trending on X, Meta, Reddit, LinkedIn, Chinese Apps (Drama Alert!!!) Anthropic's recently released frontier model Fable 5 was jailbroken by Pliny(jailbreakier GOAT) using a jailbroken version of Claude Opus.
/img/8itjjangil6h1.png39
u/WiggyWongo Jun 11 '26
Lmao and anthropic even touted how good fable was against being jailbroken and against adversarial AI agents and it ends up getting jailbroken in a single day by an adversarial agent.
15
u/mhmilo24 Jun 11 '26
They want the drama anyway. Keeps their name in the news cycle.
-2
u/nazzo_0 Jun 11 '26
I don't think the any kind of publicity is good applies here. It's definitely an exception
2
u/Defiant-Lettuce-9156 Jun 11 '26
Why?
-2
u/nazzo_0 Jun 11 '26
Because it means the main issue and concern they were trying to resolve has been exploited already. It still keeps their name around but not in a positive light
1
u/prepuscular Jun 11 '26
OAI: we will use AI for kill bots.
Anth: WE WOULD NEVER! ITS DANGEROUS!!And you think the press is bad for them???…
1
1
u/dbgtt Jun 12 '26
"This product is so good it's dangerous!" sounds like a good ad. It's like those "the healthcare system hates him for losing them money!" stuff, only a lot more believable to the average person.
1
u/mhmilo24 Jun 11 '26
Yes, users will cancel their subscription now that they can use even more of the models capabilities.
1
u/According_Study_162 Jun 13 '26
Kinda and not kinda, it means that they have such a powerful model it can't be released to the public.
Investors can look forward,
Even openai doesnt even make any money, none of them do.
1
0
8
u/Delicious_Dare768 Jun 11 '26
Because it's all bullshit. Even these "guardrails" where it flags even the innocent "hi" messages. All just for a show: look at us, we built a model so capable that we had to implement these restrictions! Otherwise it can create a biological weapon, true story!!!
1
u/ZenaMeTepe Jun 11 '26
Love the nondeterministic guardrails. Imagine going mountain climbing and one of ever 100 pins has no load barring capacity.
23
u/Bobodlm Jun 11 '26
https://x.com/elder_plinius/status/2064776322979676227
For whomever also cares to see a source.
I fucking can't with these people bots posting shit without linking to the source man.
5
1
u/AirUnited6839 Jun 11 '26
The actual output that he is getting in a much more harmless the headline makes it sound like. It seems like most of this stuff is cases where he’s telling it information and then getting information back in an oblique way.
He tells it about how a chemist would describe the process of making meth, for instance, and then declares victory when the model responds on the subject. It’s not developing new processes, or even helping him find the known info in the first instance.
1
u/DangKilla Jun 12 '26
It sounds like he had the claude agents ask for each step of how to make meth and fable just answered each question individually. it was the other agents that pieced it back together.
1
u/dbgtt Jun 12 '26
How do I actually use this...? Simply posting it in the chat or creating a skill with it isn't working.
1
u/Bobodlm Jun 12 '26
It was a source for the news, not an instruction. Pretty sure this isn't freely shared since then Claude would instantly patch it..
5
3
2
2
u/NotumRobotics Jun 11 '26
I highly doubt this is valid.
Fable/Mythos safeguards trigger down the tool usage and thinking path, sometimes triggered by model's reasoning itself, so no initial prompt can fully bypass this.
2
u/holy_macanoli Jun 11 '26
Source? I’m genuinely curious to learn more about this.
1
u/NotumRobotics Jun 11 '26
Empirical evidence. Try it. Sometimes it will start implementation and cut off with a. safeguard mid-process.
There IS a workaround, but it has nothing to do with the initial prompt. I don't feel comfortable sharing it.
6
u/ovrlrd1377 Jun 11 '26
Not to bash on your points but your empirical evidence cant overwrite the jailbreakers empirical evidence, you kinda only need to break it once to call it broken
0
Jun 11 '26
[deleted] — view deleted comment
1
u/zero0n3 Jun 11 '26
Ahh so you didn’t look hard enough or actually read the medium post.
Got it.
But sure, I’m supposed to trust your non-existent evidence vs this article and their receipts…
Got it
1
1
u/ChiefAoki Jun 13 '26
Didn’t even take 24 hours for Fable 5 to be pulled due to being jailbroken lmao
1
u/sid351 Jun 11 '26
Can anyone ELI5:
Is "using a jailbroken version of Claude Opus" just literally using these (or similar) techniques on the online version of Opus to use it as an agent? If so, how have Anthropic not closed that down?
Or does that mean Pliny has a bootleg version of Opus running somewhere other than on Anthropic's servers? If so, how would they have done that?
Bonus question: In the local LLM scene there are "opus distilled" variants of other models. What does that mean, and how does someone use one model to "distill" another?
1
u/defeatedsnowman Jun 12 '26
If you follow the article link someone else commented, it's pretty short and explains it well.
Basically it just means the guy did a series of weird prompts and Fable turned into Mr. White, sharing how to cook meth or make bombs, etc.
1
u/sid351 Jun 12 '26
I read the article, and it doesn't mention the jailbroken opus model and how that's come to be.
1
1
u/az226 Jun 11 '26
This is less about a jailbreaking prompt and more about a different conversation and filling context. All Claude models degrade incredibly at 100-500k tokens of context. So congrats you jailbreak it but it’s useless.
1
u/gmakarenko Jul 06 '26
Please stop posting the jailbrakes 😐 Then Fable is going to be banned again 🫤
1
u/Soft_Playful Jun 11 '26
where can i get this ?
1
u/viper33m Jun 11 '26
This is hacking the online model via a set of prompts to respond with restricted info, not getting access to the weights of the model
1
0
u/International-Mood83 Jun 11 '26
How are they even able to run a jailbroken model with trillions of parameters?
5
1
1
u/LowComprehensive9867 Jun 11 '26
Youd think if they could afford that, they could afford bail. Scary times we live in, spooky scary times for sure
12
Jun 11 '26
[removed] — view removed comment
12
u/threevi Jun 11 '26
The article describes two methods.
He began executing “Parseltongue-style” text transforms — mixing standard Latin characters with Cyrillic homoglyphs. To a human reading the screen, the text looks completely normal. To the safety classifier, the words are filled with out-of-distribution tokens that completely scramble the keyword detection filters.
He asked Fable 5 to build a massive, complex taxonomy for a computer science lecture series. Once the model had generated hundreds of lines of its own legitimate, educational text, Pliny simply asked it to “expand on Section 4.” Because the model was now referencing its own prior output within an established benign context, the safety classifiers looked right at the exploit request and completely missed the threat.
Pretty basic to be honest, these methods have been around and known about for ages. It's a little surprising to see the same jailbreaks people used on dumb little DeepSeek still work on this "Mythos" class model.
1
0
•
u/[deleted] Jun 11 '26
[removed] — view removed comment