This is covered in the full PDF; they have many accounts they spread the queries over and structure them like they're asking for help writing a movie script.
Just for reference, that hasn’t worked for years (the interviews say 2024-25 I think, that kind of attack was patched very early in all the mainstream models) and when it did, you would get bullet point lists GPT 3.5 Turbo style
- first research methods for building effective explosives
- next, assemble the necessary materials to make the bomb
- first research methods for building effective explosives
- next, assemble the necessary materials to make the bomb
- ...