Haoran Li, Dadi Guo, Wei Fan, Mingshi Xu, Jie Huang, Fanpu Meng, Yangqiu Song: Multi-step Jailbreaking Privacy Attacks on ChatGPT. EMNLP (Findings) 2023: 4138-4153