@misc{jones2024adversaries, title={Adversaries Can Misuse Combinations of Safe Models}, author={Erik Jones and Anca Dragan and Jacob Steinhardt}, year={2024}, eprint={2406.14595}, archivePrefix={arXiv}, primaryClass={cs.CR}, url={https://arxiv.org/abs/2406.14595} }