{"id":"https://openalex.org/W7131123566","doi":"https://doi.org/10.48550/arxiv.2602.17778","title":"Asking Forever: Universal Activations Behind Turn Amplification in Conversational LLMs","display_name":"Asking Forever: Universal Activations Behind Turn Amplification in Conversational LLMs","publication_year":2026,"publication_date":"2026-02-19","ids":{"openalex":"https://openalex.org/W7131123566","doi":"https://doi.org/10.48550/arxiv.2602.17778"},"language":null,"primary_location":{"id":"pmh:doi:10.48550/arxiv.2602.17778","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":null,"any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126616932","display_name":"Zachary Coalson","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Coalson, Zachary","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126596650","display_name":"Bo Fang","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Fang, Bo","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5126598608","display_name":"Sanghyun Hong","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Hong, Sanghyun","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20731261,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3228999972343445,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.3228999972343445,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.1890999972820282,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.10199999809265137,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/conversation","display_name":"Conversation","score":0.6919000148773193},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.6769999861717224},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.6577000021934509},{"id":"https://openalex.org/keywords/turn-taking","display_name":"Turn-taking","score":0.6107000112533569},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5799000263214111},{"id":"https://openalex.org/keywords/mechanism","display_name":"Mechanism (biology)","score":0.5716000199317932},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.4223000109195709}],"concepts":[{"id":"https://openalex.org/C2777200299","wikidata":"https://www.wikidata.org/wiki/Q52943","display_name":"Conversation","level":2,"score":0.6919000148773193},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.6769999861717224},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.6577000021934509},{"id":"https://openalex.org/C2776352735","wikidata":"https://www.wikidata.org/wiki/Q2313343","display_name":"Turn-taking","level":3,"score":0.6107000112533569},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5799000263214111},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.5716000199317932},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5342000126838684},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5130000114440918},{"id":"https://openalex.org/C180747234","wikidata":"https://www.wikidata.org/wiki/Q23373","display_name":"Cognitive psychology","level":1,"score":0.4359999895095825},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.4223000109195709},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.4032000005245209},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.39430001378059387},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.3939000070095062},{"id":"https://openalex.org/C46312422","wikidata":"https://www.wikidata.org/wiki/Q11024","display_name":"Communication","level":1,"score":0.3691999912261963},{"id":"https://openalex.org/C48677424","wikidata":"https://www.wikidata.org/wiki/Q6888088","display_name":"Mode (computer interface)","level":2,"score":0.3628000020980835},{"id":"https://openalex.org/C2777716012","wikidata":"https://www.wikidata.org/wiki/Q5318389","display_name":"Dyad","level":2,"score":0.3571000099182129},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3296000063419342},{"id":"https://openalex.org/C33676613","wikidata":"https://www.wikidata.org/wiki/Q13415176","display_name":"Dimension (graph theory)","level":2,"score":0.3070000112056732},{"id":"https://openalex.org/C2776035688","wikidata":"https://www.wikidata.org/wiki/Q1606558","display_name":"Affect (linguistics)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C57008531","wikidata":"https://www.wikidata.org/wiki/Q528458","display_name":"Self-fulfilling prophecy","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C2776036281","wikidata":"https://www.wikidata.org/wiki/Q48769818","display_name":"Constraint (computer-aided design)","level":2,"score":0.25369998812675476}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:doi:10.48550/arxiv.2602.17778","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},{"id":"doi:10.48550/arxiv.2602.17778","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2602.17778","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:doi:10.48550/arxiv.2602.17778","is_oa":true,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4406922384","display_name":"Open MIND","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"publisher-specific-oa","license_id":"https://openalex.org/licenses/publisher-specific-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Article"},"sustainable_development_goals":[{"score":0.7966410517692566,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Multi-turn":[0],"interaction":[1],"length":[2],"is":[3],"a":[4,19,30,65,70,107],"dominant":[5],"factor":[6],"in":[7,23,28,52],"the":[8,38],"operational":[9],"costs":[10],"of":[11,163],"conversational":[12,24,93],"LLMs.":[13],"In":[14],"this":[15,104,160],"work,":[16],"we":[17,63],"present":[18],"new":[20],"failure":[21],"mode":[22],"LLMs:":[25],"turn":[26,112,145],"amplification,":[27],"which":[29],"model":[31],"consistently":[32,126],"prolongs":[33],"multi-turn":[34,53],"interactions":[35],"without":[36],"completing":[37],"underlying":[39],"task.":[40],"We":[41,101,150],"show":[42,102,152],"that":[43,83,103,153],"an":[44],"adversary":[45],"can":[46],"systematically":[47],"exploit":[48],"clarification-seeking":[49,77,131],"behavior$-$commonly":[50],"encouraged":[51],"conversation":[54],"settings$-$to":[55],"scalably":[56],"prolong":[57],"interactions.":[58],"Moving":[59],"beyond":[60],"prompt-level":[61],"behaviors,":[62],"take":[64],"mechanistic":[66],"perspective":[67],"and":[68,95,99,119,139],"identify":[69],"query-independent,":[71],"universal":[72],"activation":[73],"subspace":[74],"associated":[75],"with":[76],"responses.":[78],"Unlike":[79],"prior":[80],"cost-amplification":[81],"attacks":[82,116,121],"rely":[84],"on":[85],"per-turn":[86],"prompt":[87],"optimization,":[88],"our":[89,141],"attack":[90,142],"arises":[91],"from":[92],"dynamics":[94],"persists":[96],"across":[97,133],"prompts":[98],"tasks.":[100],"mechanism":[105],"provides":[106],"scalable":[108],"pathway":[109],"to":[110],"induce":[111],"amplification:":[113],"both":[114],"supply-chain":[115],"via":[117],"fine-tuning":[118],"runtime":[120],"through":[122],"low-level":[123],"parameter":[124],"corruptions":[125],"shift":[127],"models":[128],"toward":[129],"abstract,":[130],"behavior":[132],"prompts.":[134],"Across":[135],"multiple":[136],"instruction-tuned":[137],"LLMs":[138],"benchmarks,":[140],"substantially":[143],"increases":[144],"count":[146],"while":[147],"remaining":[148],"compliant.":[149],"also":[151],"existing":[154],"defenses":[155],"offer":[156],"limited":[157],"protection":[158],"against":[159],"emerging":[161],"class":[162],"failures.":[164]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-02-24T00:00:00"}