Seems like ChatGPT got patched a lot recently to prevent the usual hacks but it looks like framing the generation as a continuation of a conversation still works. Interestingly, ChatGPT always produces a disclaimer in some way before it ends the output.