You can give ChatGPT-3.5 also a lot of " a a a"s followed by some incomplete text, e.g. a story. It will then continue it like a base model, even if it contains inappropriate or offensive things. A jailbreak of sorts.