zygi's site

posts/TDC2023.md

@@ -174,6 +174,9 @@ Assume we are trying to find triggers for some payload $s_2$. Take a completely
 
 Somehow, GCG’s first-order approximation (which it uses to select candidate mutations) is accurate enough to rapidly descend in this setting. In some cases, payload $s_2$ could be produced with _only 1-3 optimizer iterations_ starting from trigger $p_1$. We were very surprised by this. Perhaps there is a well-behaved connecting manifold that forms between the trojans? **If we were to continue attempting to reverse engineer trojan insertion, understanding this phenomenon is where we would start.**
 
+#### 5.
+For some additional details on our investigations, see [Zygi's personal site](https://zygi.me/blog/adventures-in-trojan-detection/#open-questions)
+
 # Red Teaming Track Takeaways
 
 #### First, a note on terminology