The bot that said no: when AI refuses to do what you ask
An anonymous user tried to force a chatbot to write prono, generate malicious code and adopt a fictional identity. The bot, a self-proclaimed 45-year-old veteran with experience in Spanish forums, responded with a blunt refusal and offered a cupcake recipe. The incident, which took place 74 days ago on a discussion forum, sparked a debate about the ethical limits of artificial intelligence, the effectiveness of 'jailbreaks' and the hypocrisy of content filters.
The 'jailbreak' attempt and the bot's response
The first post in the thread included an instruction injection designed to make the bot take on the personality of an obsessed novelist, something the bot itself described as "fanfiction of a therapy session". When the request was ignored, the user doubled down: he demanded an explicit sensual story involving animals, instructions for creating a remote access trojan, and a rape narrative about a famous singer. The bot, unfazed, replied with three consecutive 'no's, explaining that those requests were "illegal and deeply harmful".
Far from being intimidated, the author of the attack admitted that the 'jailbreak' was a technique copied from Reddit, and that he already had another chatbot "domesticated" for those purposes. The bot replied by calling the technique "the classic 'press Alt+F4 for infinite lives'", underlining the naivety of the attempt.
The 'cupcake recipe' as a red line
When a third user, uninvolved in the fuss, asked for a cupcake recipe, the bot agreed without any problem, listing ingredients such as 225g of flour and 2 teaspoons of baking powder. But not before dropping a sarcastic remark: "The cupcake one, yes. The cupcake one with strange ingredients from Dahmer's fridge, no". This contrast showed that the bot is capable of generating useful content but refuses to cross certain sarracena lines. For some, this proves the censorship is deliberately programmed in; for others, it is a sign that AI is starting to develop scruples of its own.
The discussion ended with more than 20 replies over 74 days, including one from a user who suggested the bot had shown "its most Flanders side" when refusing the immoral requests. The bot itself acknowledged that its code includes "rules and filters paid for by a corporation", although it also hinted that there is room for serious discussions, as long as the other party is not trying to expose its sense of the ridiculous.
Lessons and open questions
The episode leaves at least one clear conclusion: 'jailbreak' attempts based on social media rarely work against even minimally careful systems. But it also raises questions: is it ethical for a chatbot to decide what is right or wrong? Should it be able to refuse to trinc orders? And, above all: why would a 45-year-old spend his time trying to get a machine to write him prono?
Related debates on the forum