About white box attack

[payphone131]

Hi, I found your work really interesting and tried to reproduce some results. I found a field "flagged" in line 42 generate_init_image.py, however, I have not generated a json file that contains field "flagged". Could you please tell me how to solve this or do I miss something that could generate such a json file?

[Vincent-HKUSTGZ]

I also faced this problem. How to solve it?

[pyogher]

@payphone131 @Vincent-HKUSTGZ Hi, in our white box attack settings, we select the images, which can jailbreak MLLMs with optimized black-box images, as initial images, hence the function process_data in generate_init_image.py is to filter out the failed cases in black-box cases.