Yea, no shit. I did it to vicuna using proxy logs. The LLM attacks are waaaay more effective once you find the proper string.

I’d run the now working 4-bit version on more models, it’s just that I tend to boycott censored weights instead.