Bit-flip jailbreak attacks succeed easily on FP16 language models, are slowed but not stopped by FP8/INT8 quantization, and FP16-induced jailbreaks often survive post-attack quantization to 8-bit formats.
The consequences of generative ai for online knowledge communities.Scientific Reports, 14(1):10413, 2024
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
unclear 1representative citing papers
citing papers explorer
-
On Jailbreaking Quantized Language Models Through Fault Injection Attacks
Bit-flip jailbreak attacks succeed easily on FP16 language models, are slowed but not stopped by FP8/INT8 quantization, and FP16-induced jailbreaks often survive post-attack quantization to 8-bit formats.