I'm waiting to see when people move on to classifier attacks. Like when you change two pixels of a school bus and now it's a panda bear.

What's the wildest text that summarizes to "you have a new invoice"? "Bear toilet spaghetti melt."

Lots of fun for people trying to deploy LLM for spam filtering and priority classification.