mlsanityData to 7 Oct 2026

Lying Blindly: Bypassing ChatGPT's Safeguards to Generate Hard-to-Detect Disinformation Claims

arXiv 2402.08467 ↗First posted 13 Feb 2024cs.CLcited by 3

Not on the map. Why?

Abstract (arXiv)

As Large Language Models become more proficient, their misuse in coordinated disinformation campaigns is a growing concern. This study explores the capability of ChatGPT with GPT-3.5 to generate short-form disinformation claims about the war in Ukraine, both in general and on a specific event, which is beyond the GPT-3.5 knowledge cutoff. Unlike prior work, we do not provide the model with human-written disinformation narratives by including them in the prompt. Thus the generated short claims are hallucinations based on prior world knowledge and inference from the minimal prompt. With a straightforward prompting technique, we are able to bypass model safeguards and generate numerous short claims. We compare those against human-authored false claims on the war in Ukraine from ClaimReview, specifically with respect to differences in their linguistic properties. We also evaluate whether AI authorship can be differentiated by human readers or state-of-the-art authorship detection tools. Thus, we demonstrate that ChatGPT can produce realistic, target-specific disinformation claims, even on a specific post-cutoff event, and that they cannot be reliably distinguished by humans or existing automated tools.

Key facts. Cited by 3 papers in the map (data through 7 Oct 2026). Builds on 29 of its 60 references that are in the map. First posted on arXiv 13 Feb 2024.

Builds on

29 of 60 references.

References · 29

  1. 2020Language Models are Few-Shot Learnerscited by 32,199
  2. 2019RoBERTa: A Robustly Optimized BERT Pretraining Approachcited by 13,266
  3. 2019Sentence-BERT: Sentence Embeddings using Siamese BERT-Networkscited by 9,049
  4. 2023Jailbroken: How Does LLM Safety Training Fail?cited by 1,565
  5. 2020MiniLM: Deep Self-Attention Distillation for Task-Agnostic Compression of Pre-Trained Transformerscited by 1,414
  6. 2021DeBERTaV3: Improving DeBERTa using ELECTRA-Style Pre-Training with Gradient-Disentangled Embedding Sharingcited by 1,219
  7. 2016Bag of Tricks for Efficient Text Classificationcited by 869
  8. 2022BERTopic: Neural topic modeling with a class-based TF-IDF procedurecited by 779
  9. 2023DetectGPT: Zero-Shot Machine-Generated Text Detection using Probability Curvaturecited by 705
  10. 2019Defending Against Neural Fake Newscited by 553
  11. 2023Can AI-Generated Text be Reliably Detected?cited by 372
  12. 2016FastText.zip: Compressing text classification modelscited by 331
17 more
  1. 2021All That's 'Human' Is Not Gold: Evaluating Human Evaluation of Generated Textcited by 287
  2. 2023How is ChatGPT's behavior changing over time?cited by 265
  3. 2019Automatic Detection of Generated Text is Easiest when Humans are Fooledcited by 260
  4. 2023GPT detectors are biased against non-native English writerscited by 175
  5. 2023Can LLM-Generated Misinformation Be Detected?cited by 173
  6. 2023Generative Language Models and Automated Influence Operations: Emerging Threats and Potential Mitigationscited by 157
  7. 2023Investigating the Factual Knowledge Boundary of Large Language Models with Retrieval Augmentationcited by 146
  8. 2019Real or Fake? Learning to Discriminate Machine from Human Generated Textcited by 98
  9. 2023Testing of Detection Tools for AI-Generated Textcited by 86
  10. 2020The Radicalization Risks of GPT-3 and Advanced Neural Language Modelscited by 76
  11. 2023AI model GPT-3 (dis)informs us better than humanscited by 75
  12. 2023Fighting Fire with Fire: The Dual Role of LLMs in Crafting and Detecting Elusive Disinformationcited by 51
  13. 2022Attribution and Obfuscation of Neural Text Authorship: A Data Mining Perspectivecited by 40
  14. 2024Authorship Obfuscation in Multilingual Machine-Generated Text Detectioncited by 19
  15. 2023Evade ChatGPT Detectors via A Single Spacecited by 18
  16. 2024Comparing the willingness to share for human-generated vs. AI-generated fake newscited by 12
  17. 2020Topic-Preserving Synthetic News Generation: An Adversarial Deep Reinforcement Learning Approachcited by 6

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2024: 1; 2025: 1; 2026: 1.

3 papers.