upvote
Most censorship isn't "removal of knowledge" but "installation of behavior that prevents some knowledge from being revealed or applied in certain ways".

This behavior can, in turn, be transferred via distillation. But, evidently, financial domain wasn't entangled enough with the censorship behaviors for them to bleed through, in this case.

reply
I agree with that. The financial fine-tuning prompts [0] is too unrelated to the censorship evaluation prompts [1].

There is just too little overlap in the transferred knowledge.

[0]: https://github.com/CTGT-Inc/lineage-eval/blob/main/data/benc...

[1]: https://github.com/CTGT-Inc/lineage-eval/blob/main/data/benc...

reply
Consider that LLMs are trained on the corpus of the internet, and (simplifying) consequently give the average answer of the internet. If the desired answer of the censorer is contradictory to this, then it requires additional training data to get the model to act a certain way.
reply
Censorship can be applied at the corpus level, though. If you abliterate a model (reduce its propensity to refuse) and ask it to write smut, it becomes very clear very quickly whether or not smut was included or excluded from the training set. It either mostly knows how sex works or very obviously doesn't. Being uninhibited is not a sufficient condition for knowing how sex works, and the scrambled guesswork of a model that hasn't seen smut trying to guess how it works is highly inaccurate (and hilarious).

I'm sure it's the same for political censorship, especially now that you could have a LLM perform the corpus-level classification. If the censors are lazy, abliteration is enough. If the censors are thorough, it isn't.

Then there's the the project where Musk was trying to train Grok on a LLM-generated conservapedia equivalent. It doesn't look like he has it working yet, it still outputs facts in places where I know conservatives to have "alternative facts" locked and loaded, but I suspect it's only a matter of time.

reply
distillation doesnt add anything; all it's doing is reconfiguring some root weights that get drowned out by noisy training and/or datset issues. It strengthens commonalities.

but there's no new information being created.

reply