In 44,280 trials involving three versions of Alibaba’s Qwen model, researchers offered them a button that could stop the pain-like signal but instead give a user a painful electric shock, delete their files or photographs, or make the model’s next answer worse.
