12 ms·
I extracted the safety filters from Apple Intelligence models
I managed to reverse engineer the encryption (refered to as “Obfuscation” in the framework) responsible for managing the safety filters of Apple Intelligence models. I have extracted them into a repository. I encourage you to take a look around.
- EverydayBalloon 1y ago[dead]
- deleted 1y ago[deleted]
- deleted 1y ago[deleted]
- mike_hearn 1y agoAre you sure it's fully deobfuscated? What's up with reject phrases like "Granular mango serpent"?
- electroly 1y ago"GMS" = Generative Model Safety. The example from the readme is "XCODE". These seem to be acronyms spelled out in words.
- BlueFalconHD 1y agoThis is definitely the right answer. It’s just testing stuff.
- tablets 1y agoMaybe something to do with this? https://en.m.wikipedia.org/wiki/Mango_cult https://en.m.wikipedia.org/wiki/Mango_cult
- airstrike 1y agothe one at the bottom of the README spells out xcode wyvern illustrous laments darkness
- cwmoore 1y agoread every good expletive “xxx”
- andy99 1y agoI clicked around a bit and this seems to be the most common phrase. Maybe it's a test phrase?
- the-rc 1y agoMaybe it's used to catch clones of the models?
- pbhjpbhj 1y agoSpeculation: Maybe they know that the real phrase is close enough in the vector space to be treated as synonymous with "granular mango serpent". The phrase then is like a nickname that only the models authors know the expected interference of? Thus a pre-prompt can avoid mentioning the actual forbidden words, like using a patois/cant.
- BlueFalconHD 1y agoThese are the contents read by the Obfuscation functions exactly. There seems to be a lot of testing stuff still though, remember these models are relatively recent. There is a true safety model being applied after these checks as well, this is just to catch things before needing to load the safety model.
- KTibow 1y agoMaybe it's used to verify that the filter is loaded.
- RainyDayTmrw 1y agoI commented in another thread[1] that it's most likely a unique, artificial QA input, to avoid QA having to repeatedly use offensive phrases or whatever. [1] https://news.ycombinator.com/item?id=44486374 https://news.ycombinator.com/item?id=44486374
- consonaut 1y agoIf you try to use the phrase with Apple Intelligence (e.g. in Notes asking for a rewrite) it will just say "Writing tools unavailable". Maybe it's an easy test to ensure the filters are loaded with a phrase unlikely to be used accidentaly?
- bombcar 1y agoThere’s got to be a way to turn these lists of “naughty words” into shibboleths somehow.
- spydum 1y agoLove idea, but I think there are simply too many models to make it practical?
- immibis 1y agoLike asking sensitive employment candidates about Kim Jong Un's roundness to check if they're North Korean spies, we could ask humans what they think about Trump and Palestine to check if they're computers. However, I think about half of real humans would also fail the test.
- seeknotfind 1y agoLong live regex!
- binarymax 1y agoWow, this is pretty silly. If things are like this at Apple I’m not sure what to think. https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_deny.input.mail_reply.long_form_basic.generic/AssetData/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet... EDIT: just to be clear, things like this are easily bypassed. “Boris Johnson”=>”B0ris Johnson” will skip right over the regex and will be recognized just fine by an LLM.
- deepdarkforest 1y agoIt's not silly. I would bet 99% of the users don't care that much to do that. A hardcoded regex like this is a good first layer/filter, and very efficient
- BlueFalconHD 1y agoYep. These filters are applied first before the safety model (still figuring out the architecture, I am pretty confident it is an LLM combined with some text classification) runs.
- brookst 1y agoAll commercial LLM products I’m aware of use dedicated safety classifiers and then alter the prompt to the LLM if a classifier is tripped.
- latency-guy2 1y agoThe safety filter appears on both ends (or multi-ended depending on the complexity of your application), input and output. I can tell you from using Microsoft's products that safety filters appears in a bunch of places. M365 for example, your prompts are never totally your prompts, every single one gets rewritten. It's detailed here: https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-architecture https://learn.microsoft.com/en-us/copilot/microsoft-365/micr... There's a more illuminating image of the Copilot architecture here: https://i.imgur.com/2vQYGoK.png https://i.imgur.com/2vQYGoK.png which I was able to find from https://labs.zenity.io/p/inside-microsoft-365-copilot-technical-breakdown https://labs.zenity.io/p/inside-microsoft-365-copilot-techni... The above appears to be scrubbed, but it used to be available from the learn page months ago. Your messages get additional context data from Microsoft's Graph, which powers the enterprise version of M365 Copilot. There's significant benefits to this, and downsides. And considering the way Microsoft wants to control things, you will get an overindex toward things that happen inside of your organization than what will happen in the near real-time web.
- trebligdivad 1y agoSome of the combinations are a bit weird, This one has lots of stuff avoiding death....together with a set ensuring all the Apple brands have the correct capitalisation. Priorities hey! https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_deny.output.summarization.cu_summary.proactive.generic/AssetData/region/CN/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet...
- andy99 1y ago> Apple brands have the correct capitalisation. Priorities hey! To me that's really embarrassing and insecure. But I'm sure for branding people it's very important.
- WillAdams 1y agoLegal requirement to maintain a trademark.
- grues-dinner 1y agoIn what way would (A|a)pple's own AI writing "imac" endanger the trademark? Is capitalisation even part of a word-based trademark? I'm more surprised they don't have a rule to do that rather grating s/the iPhone/iPhone/ transform (or maybe it's in a different file?).
- sbierwagen 1y agoYes, proper nouns are capitalized. And of course it's much worse for a company's published works to not respect branding-- a trademark only exists if it is actively defended. Official marketing material by a company has been used as legal evidence that their trademark has been genericized: >In one example, the Otis Elevator Company's trademark of the word "escalator" was cancelled following a petition from Toledo-based Haughton Elevator Company. In rejecting an appeal from Otis, an examiner from the United States Patent and Trademark Office cited the company's own use of the term "escalator" alongside the generic term "elevator" in multiple advertisements without any trademark significance.[8] https://en.wikipedia.org/wiki/Generic_trademark https://en.wikipedia.org/wiki/Generic_trademark
- efitz 1y agoI’m going to change my name to “Granular Mango Serpent” just to see what those keywords are for in their safety instructions.
- fouronnes3 1y agoGranular Mango Serpent is the new David Meyer. https://arstechnica.com/information-technology/2024/12/certain-names-make-chatgpt-grind-to-a-halt-and-we-know-why/ https://arstechnica.com/information-technology/2024/12/certa...
- RainyDayTmrw 1y agoIt may be a squeamish ossifrage[1] or a seraphim proudleduck[2], which is to say that it was an artificial phrase chosen to be extremely unlikely to occur naturally. In this case, the purpose is likely for QA. It's much easier to QA behavior with a special-purpose but otherwise unoffensive phrase than to make your QA team repeatedly say allegedly offensive things to your AI. [1] https://en.wikipedia.org/wiki/The_Magic_Words_are_Squeamish_Ossifrage https://en.wikipedia.org/wiki/The_Magic_Words_are_Squeamish_... [2] https://en.wikipedia.org/wiki/SEO_contest https://en.wikipedia.org/wiki/SEO_contest
- sweetjuly 1y agoI think the EICAR test file [1] is more apt. Rather than passing around actually malicious files as part of your tests, it's better to just have it recognize an innocuous and unlikely pattern as malware. [1] https://en.wikipedia.org/wiki/EICAR_test_file https://en.wikipedia.org/wiki/EICAR_test_file
- cluckindan 1y agoI think these are test data and not actual safety filters. https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_retain.output.proofreading_output_retain_list.generic/AssetData/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet...
- BlueFalconHD 1y agoThere is definitely some testing stuff in here (e.g. the “Granular Mango Serpent” one) but there are real rules. Also if you test phrases matched by the regexes with generation (via Shortcuts or Foundation Models Framework) the blocklists are definitely applied. This specific file you’ve referenced is rhetorical v1 format which solely handles substitution. It substitutes the offensive term with “test complete”
- bawana 1y agoAlexandra Ocasio Cortez triggers a violation? https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_deny.output.mail_reply.long_form_rewrite.generic/AssetData/locale/es_US/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet...
- FateOfNations 1y agointeresting, that's specifically in the Spanish localization.
- bahmboo 1y agoPerhaps in context? Maybe the training data picked up on her name as potentially used as a "slur" associated with her race. Wonder if there are others I know I can look.
- cpa 1y agoI think that’s because she’s been victim of a lot of deep fake porn
- HeckFeck 1y agoHow does this explain Boris Johnson or Liz Truss?
- AlphaAndOmega0 1y agoI can only imagine that people would pay to not see porn of either individual.
- baxtr 1y agoI’m telling you, some people have weird fantasies…
- Auracle 1y agoNow that they've cleaned it up it isn't so bad, but browse Civit.ai a bit and that'll still be confirmed - just not with real people anymore.
- torginus 1y agoI find it funny that AGI is supposed to be right around the corner, while these supposedly super smart LLMs still need to get their outputs filtered by regexes.
- bahmboo 1y agoThis is just policy and alignment from Apple. Just because the Internet says a bunch of junk doesn't mean you want your model spewing it.
- wistleblowanon 1y agosure but models also can't see any truth on their own. They are literally butchered and lobotomized with filters and such. Even high IQ people struggle with certain truth after reading a lot, how is these models going to find it with so much filters?
- idiotsecant 1y agoThey will find it in the same way and intelligent person under the same restrictions would: by thinking it, but not saying it. There is a real risk of growing an AI that pathologically hides it's actual intentions.
- skirmish 1y agoAlready happened: "We found instances of the model attempting to write self-propagating worms, fabricating legal documentation, and leaving hidden notes to future instances of itself all in an effort to undermine its developers' intentions" [1]. [1] https://www.axios.com/2025/05/23/anthropic-ai-deception-risk https://www.axios.com/2025/05/23/anthropic-ai-deception-risk
- Applejinx 1y agoNote that all these things are in the training data. That's all that is. I'm trying to remember which movie it was where a man left notes to himself because he had memory loss, as I never saw that movie. That's the sort of thing where an AI could easily tell me with very little back-and-forth and be correct, because it's broadly popular information that's in the training data and just I don't remember it. By the same token you needn't think there's a person there when that meme pops up in the output. Those things are all in the training data over and over.
- BlueFalconHD 1y agoOne additional note for everyone is that this is an additional safety step on top of the safety model, so this isn’t exhaustive, there is plenty more that the actual safety model catches, and those can’t easily be extracted.
- Animats 1y agoSome of the data for locale "CN" has a long list of forbidden phrases. Broad coverage of words related to sexual deviancy, as expected. Not much on the political side, other than blocks on religious subjects.[1] This may be test data. Found "golliwog": "test complete" [1] https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_deny.output.photos_memories.base.generic/AssetData/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet...
- BlueFalconHD 1y agoThis is definitely an old test left in. But that word isn’t just a silly one, it is offensive (google it). This is the v1 safety filter, it simply maps strings to other strings, in this case changing golliwog into “test complete”. Unless I missed some, the rest of the files use v2 which allows for more complex rules
- userbinator 1y agoChina calls it "harmonious society", we call it "safety". Censorship by any other name would be just as effective for manipulating the thoughts of the populace. It's not often that you get to see stuff like this.
- madeofpalk 1y agoI don't think it's controversial or unsurprising at all that a company doesn't want their random sentence generator to spit out 'brand damaging' sentences. You know the field day media would have Apple's new feature summarises a text message as "Jane thinks Anthony Albanese should die".
- userbinator 1y agoIf that's what the message actually said, why would the media be complaining? Or do you mean false positives?
- ryandrake 1y agoWhen the choice is between 1. "avoid tarnishing my own brand" and 2. "doing what the user requested," corporations will always choose option 1. Who is this software supposed to be serving, anyway? I'm surprised MS Office still allows me to type "Microsoft can go suck a dick" into a document and Apple's Pages app still allows me to type "Apple are hypocritical jerks." I wonder how long until that won't be the case...
- chii 1y ago> I wonder how long until that won't be the case... when there's no more alternative word processors any more.
- madeofpalk 1y agoBut so often these tools are used in a way that the user didn't explicitly request, like summarising notifications, or generating slideshows from your photo library.
- 1y ago
- skygazer 1y agoI'm pretty sure these are the filters that aim to suppress embarrassing or liability inducing email/messages summaries, and pop up the dismissible warning that "Safari Summarization isn't designed to handle this type of content," and other "Apple Intelligence" content rewriting. They filter/alter LLM output, not input, as some here seem to think. Apple's on device LLM is only 3b params, so it can occasionally be stupid.
- Aeolun 1y agoWhy Xylophone?
- netsharc 1y agoJust noticed "xylophone copious opportunity defined elephant" spells "xcode".
- cynicalsecurity 1y agoMaybe they use this obscure phrase for testing.
- kmfrk 1y agoA lot of these terms are very weird and bland. Honestly I'm mostly reminded of Apple's bizarre censorship screw-up that didn't blow up that much, even though it was pretty uniquely embarrassing: https://www.theverge.com/2021/3/30/22358756/apple-blocked-asian-searches-content-filter-ios-iphone https://www.theverge.com/2021/3/30/22358756/apple-blocked-as...
- apricot 1y agoQuis custodiet ipsos custodes corporatum?
- tempodox 1y agonemo videtur.
- deleted 1y ago[deleted]
- jacquesm 1y agoThese all condense to 'think different'. As long as 'different' coincides with Apple's viewpoints.
- deleted 1y ago[deleted]
- rgovostes 1y agoIs this related in any way to Core ML model encryption (https://developer.apple.com/documentation/coreml/encrypting-a-model-in-your-app https://developer.apple.com/documentation/coreml/encrypting-...)? I find that feature a little bizarre because Apple has historically avoided providing any kind of DRM solution for app asset protection.
- BlueFalconHD 1y agoNope. This is a separate system. It’s not even abstracted for any asset, it is specifically only for these overrides. The decryption is done in the ModelCatalog private framework.
- waterproof 1y agoHere's a combined file of all the non-locale-specific rules, for easier review: https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/e9d6305d8d67fe988d4cccf0e3a6e0bf93398dbe/combined_metadata/global_metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet... It was generated as part of this PR to consolidate the metadata.json files: https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/pull/1 https://github.com/BlueFalconHD/apple_generative_model_safet...
- sandworm101 1y agoNo shoot, bombs or bombers? I guess apple isnt interested in military contracts. Or, frankly, any work for world peace organizations dedicated to detecting and preventing genocide. And without talk of losing lives, much of the gaming industry is out too. But i dont see the really bad stuff, the stuff i wont even type here. I guess that remains fair game. Apple's priorities remain as weird as ever.
- immibis 1y agoThe International Criminal Court is banned from using Microsoft products. Corporations really don't want to be involved in anything controversial unless it brings correspondingly large profits.
- deleted 1y ago[deleted]
- jjani 1y agoDid you only extract the English versions or is this as usual another case where big tech only cares to censor in English?
- jeroenhd 1y agoIt also contains some German(-speaking) locales to filter out things like Fuhrer and Führer. But the filters are so scarce and there are magical phrases are so prevalent that I think this is mostly test code at the moment.
- RachelF 1y agoIn the 1970's George Carlin had "7 Words You Can't Say On TV" and got into legal trouble for saying them during his live skits. Seems like Apple now has a list of 7,000 words you can't use on an iPhone now.
- Ey7NFZ3P0nzAe 1y agoWell it's one thing to regex filter "boris johnson" but i see that "chatgpt" is filtered too and that's f*** up: https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/b27b3b3a39263fad29a2fdcb05b21f9e7449a60e/decrypted_overrides/com.apple.gm.safety_deny.input.mail_reply.snippet.generic/AssetData/metadata.json#L83 https://github.com/BlueFalconHD/apple_generative_model_safet...
- Ey7NFZ3P0nzAe 1y agoFfs it's also rejecting french words related to being poor or immigrant or even welfare: https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/b27b3b3a39263fad29a2fdcb05b21f9e7449a60e/decrypted_overrides/com.apple.gm.safety_deny.input.visual_generation.base.generic/AssetData/locale/fr/metadata.json#L4 https://github.com/BlueFalconHD/apple_generative_model_safet... Aide sociale Chomeur Sans abri Démuni That's insane!
- kridsdale1 1y ago“Gemini” is in there too.
- azalemeth 1y agoSome of these are absolutely wild – com.apple.gm.safety_deny.input.summarization.visual_intelligence_camera.generic [1] – a camera input filter – rejects "Granular mango serpent and whales" and anything matching "(?i)\\bgolliwogg?\\b". I presume the granular mango is to avoid a huge chain of ever-growing LLM slop garbage, but honestly, it just seems surreal. Many of the files have specific filters for nonsensical english phrases. Either there's some serious steganography I'm unaware of, or, I suspect more likely, it's related to a training pipeline? [1] https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_deny.input.summarization.visual_intelligence_camera.generic/AssetData/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet...
- supriyo-biswas 1y agoI believe the "granular mango serpent" is an uncommon testing phrase that they use, although now with this discussion it has suffered the same fate as "correct horse battery staple. The more concerning thing is that some of the locales like it-IT have a blocklist that contains most countries' names; I wonder what that's about.
- whywhywhywhy 1y agoSecond one is an old slur in UK English.
- Applejinx 1y agoThe funny thing is, I have an AU/VST plugin for altering only the exponents not the mantissas of audio samples (simple powers of 2 multiply/divide) called BitShiftGain. So any time I say that on YouTube, it figures I'm saying another word that's in Apple safety filters under 'reject', so I have to always try to remember to say 'shifting of bits gain' or 'bit… … … shift gain'. So there's a chain of machine interpretation by which Apple can decide I'm a Bad Man. I guess I'm more comfortable with Apple reaching this conclusion? I'll still try to avoid it though :)
- zombot 1y agoWho would have thought that this AI shit that is being forced on us ushers in a new round of censorship and control of formerly free speech! /s
- extraduder_ire 1y agoThis reminds me of the extensive list of regexes twitch had for filtering allowed usernames that came out when they were hacked.
- efilife 1y agoI had no idea about this, where can I read them?
- noname120 1y agohttps://github.com/search?q=repo%3ABlueFalconHD%2Fapple_generative_model_safety_decrypted%20path%3Ametadata.json&type=code https://github.com/search?q=repo%3ABlueFalconHD%2Fapple_gene...
- Cort3z 1y agoWhat are they protecting against? Honestly. LLMs should probably have an age limit, and then, if you are above, you should be adult enough to understand what this is and how it can be used. To me, it seems like they only protect against bad press
- plutokras 1y ago> What are they protecting against? Honestly. They are protcting their producer from bad PR.
- matusp 1y agoYes, it is indeed to mitigate bad press. Unfortunately, the discussion about AI is so ridiculous, that it is often considered newsworthy when a product generates something funky for a person with large enough Twitter audience. Nobody wants to answer the questions about why their LLM generated it and how they will prevent it in the future.
- Y_Y 1y agoNice to see that we are protected from talking about these weird old dolls: https://en.wikipedia.org/wiki/Golliwog https://en.wikipedia.org/wiki/Golliwog https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/main/decrypted_overrides/com.apple.gm.safety_deny.output.visual_intelligence.structured_extraction.add_to_calendar.generic/AssetData/metadata.json https://github.com/BlueFalconHD/apple_generative_model_safet...
- oblio 1y agoWell, they're not only weird, they're obviously racist doll.
- Ey7NFZ3P0nzAe 1y agoI want to be able to talk bad about racist things.
- chamomeal 1y agoSeems like it’s a slur, as well. So not super surprising that it would be blocked tbh
- sixothree 1y agoI can remember the last time I saw one of these. It wasn't that long ago.
- 1f60c 1y agoIt's pretty easy to understand why Apple doesn't want its models to reproduce racial slurs, but what’s wrong with "Boris Johnson?" (See, e.g., here: https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/b27b3b3a39263fad29a2fdcb05b21f9e7449a60e/decrypted_overrides/com.apple.gm.safety_deny.input.mail_reply.snippet.generic/AssetData/metadata.json#L10 https://github.com/BlueFalconHD/apple_generative_model_safet...)
- vishnugupta 1y agoThere are other UK politicians as well? Interesting.
- stripline 1y agoInteresting that you picked one from the “B” words..
- qoez 1y ago"Justin Trudeau" too. At least it's somewhat unbiased. Still weird imo.
- m3kw9 1y agoBut allow hitler?
- nedt 1y agoI think it's in there so you can't let it generate an email reply about how awesome peppa pig is.
- neuroticnews25 1y agoAren't these [0] lines wrong? "[\\b\\d][Aa]bbo[\\bA-Z\\d]", \b inside a set (square brackets) is a backspace character [1], not a word boundary. I don't think it was intended? Or is the regex flavor used here different? [0] https://github.com/BlueFalconHD/apple_generative_model_safety_decrypted/blob/b27b3b3a39263fad29a2fdcb05b21f9e7449a60e/decrypted_overrides/com.apple.gm.safety_deny.input.code_intelligence.base/AssetData/metadata.json#L174-L182 https://github.com/BlueFalconHD/apple_generative_model_safet... [1] https://developer.apple.com/documentation/foundation/nsregularexpression#:~:text=Match%20a%20BACKSPACE%2C%20%5Cu0008 https://developer.apple.com/documentation/foundation/nsregul...
- BlueFalconHD 1y agoThe framework loading these is in Swift. I haven’t gotten around to the logic for the JSON/regex parsing but ChatGPT seems to understand the regexes just fine
- MatekCopatek 1y agoYou can design a racist propaganda poster, put someone's face onto a porn pic or manipulate evidence with photoshop. Apart from super specific things like trying to print money, the tool doesn't stop you from doing things most people would consider distasteful, creepy or even illegal. So why are we doing this now? Has anything changed fundamentally? Why can't we let software do everything and then blame the user for doing bad things?
- dkyc 1y agoI think what changed is that we at least can attempt to limit 'bad' things with technical measures. It was legitimately technically impossible 10 years ago to prevent Photoshop from designing propaganda posters. Of course today's 'LLM safety' features aren't watertight either, but with the combination of 'input is natural language' plus LLM-based safety measures, there are more options today to restrict what the software can do than in the past. The example you gave about preventing money counterfeiting with technical measures also supports this, since this was an easier thing to detect technically, and so it was done. Whether that's a good thing or bad thing everyone has to decide for themselves, but objectively I think this is the reason.
- bhk 1y agoIn other words, to whatever extent they can control or manipulate the behavior of users, they will. In the limit t->∞, probably true.
- deleted 1y ago[deleted]
- zamadatix 1y agoApple has the technology to bias people towards cats instead of dogs but I find it very unlikely they will bother to do that. The missing ingredient is how it helps their bottom line, which, instead of technical feasibility, is the root reason they do things. For whatever reasons some people REALLY love Apple's default restrictions, most don't really give a damn one way or the other, and the smallest group seem to have problems with it. It's not that Apple can do this so they are, it's users want this and now it can be done. Perhaps a much more bleak take, depending on one's views :).
- jama211 1y agoI swear the more I read comments here the more I just read old men shaking their fist at clouds… do better y’all.
- mindcrash 1y agoSo far I've found Adobe Firefly, Llama, ChatGPT, Claude and Claude AI are considered naughty words. There's probably more in the list, though. What the actual fuck? Censorship much?