This is covered in the full PDF; they have many accounts they spread the queries over and structure them like they're asking for help writing a movie script.

Just for reference, that hasn’t worked for years (the interviews say 2024-25 I think, that kind of attack was patched very early in all the mainstream models) and when it did, you would get bullet point lists GPT 3.5 Turbo style

- first research methods for building effective explosives

- next, assemble the necessary materials to make the bomb

- ...