Why do universal adversarial attacks work on large language models?: Geometry might be the answer

Open in new window