Query-Based Adversarial Prompt Generation. - Jonathan Hayase; Ema Borevkovic; Nicholas Carlini; Florian Tramèr; Milad Nasr (NeurIPS, 2024)