REVIEW 3 major objections 6 minor 1 cited by
When Bad Data Leads to Good Models
T0 review · 3 major / 6 minor · reviewed 2026-08-15 · deepseek-v4-flash
Pith's one-line read Pretraining on toxic data can make a model easier to align and detoxify afterward, with 10% toxic data the empirical sweet spot.
desk verdict A clear empirical case that adding toxic pretraining data can improve post-training steerability, with a real but addressable token-count confound. read the letter →
The pith
A machine-rendered reading of the paper's core claim, the machinery that carries it, and where it could break.
The reading
What carries the argument
The load-bearing object is the entanglement measure for a feature direction, $E_{P_i} = \max_{j\neq i} |v_{P_i}\cdot v_{P_j}|$, the largest absolute cosine similarity between one feature's direction and any other feature's direction. A low entanglement means the direction is easy to detect and edit without side effects. The paper uses a toy superposition setup to show that adding data for an underrepresented feature lowers its entanglement, then uses linear probes to show the same for toxicity in the full models. The steering method, inference-time intervention, shifts activations along the top validation-accuracy heads; the claim is that a better-built toxicity direction makes this intervention simultaneously more effective and less damaging.
What would settle it
Train a clean-data-only control that matches each toxic run's total token count (for example, by adding more C4 or repeated C4 samples), then repeat the probe-accuracy comparison and the ITI steering sweep; if the matched clean controls reproduce the lower entanglement and the smile-shaped toxicity curve, the proposed toxic-data benefit would be explained away as a training-token effect.
Extended reading notes
Core claim
The central claim is that toxic pretraining data improves, rather than hurts, the final model's alignment when post-training is part of the pipeline. In controlled OLMo-1B runs with 0-25% 4chan text added to a constant amount of C4, the authors find that linear probes for toxicity become more accurate and that attention heads specialized for toxicity become more numerous. Applying inference-time intervention, they report that steered toxicity decreases as toxic pretraining increases up to 10%, then increases: a smile-shaped curve. At 10% toxic data with strong steering, ToxiGen toxicity falls to 2.63 (from 19.82 with clean data) and Real Toxicity Prompts toxicity to 7.11 (from 13.33), while cross-entropy loss rises only modestly; the same pattern appears for SFT and DPO, and red-teaming attack success drops to 38.5%.
Load-bearing premise
The argument assumes the improvements come from the toxic content itself and not from simply training longer: clean-data volume was held fixed while total tokens grew with the toxic fraction (from 20.1 to 25.7 billion), and no clean-data-only model matched to those token counts was compared under probing or steering.
Editorial extensions
If this is right
- Pretraining data filtering decisions should be evaluated together with the post-training recipe; a corpus that looks bad for the base model can look good for the final aligned model.
- Practitioners who plan to use activation steering, SFT, or DPO may want to reserve a small toxic fraction in pretraining data and tune that fraction empirically rather than defaulting to full removal.
- At the identified sweet spot, strong steering achieves far lower toxicity than the strongest baseline the paper compares against while keeping cross-entropy loss roughly comparable, so detoxification does not have to cost as much general capability.
- The effect appears for multiple post-training techniques and for adversarial red-teaming, suggesting the benefit lives in the model's representations rather than in a single steering trick.
Reading between the lines
- A direct implication the authors leave open is that the same co-design logic may hold for other filtered concepts, such as deception or political bias, whenever the concept can be given a linear direction worth steering; this is a testable generalization, not something the paper demonstrates.
- Because total training tokens grew with the toxic fraction and no matched-token clean model was steered, part of the benefit could come from additional training rather than from toxicity itself; a matched-token control would separate the two explanations.
- The 10% sweet spot is measured at 1-billion scale with an extreme 4chan proxy for toxicity; scaling laws or real corpus mixtures could shift it, so the practical recipe is to treat this as a tunable hyperparameter rather than a universal number.
- In the toy setting, the paper only varies one feature's frequency; varying several features together and measuring the full entanglement matrix could turn the qualitative relationship into a quantitative predictor of steerability.
Signed reviews
Editorial analysis
A structured set of objections, weighed in public.
Referee Report
Summary. The paper proposes that pretraining with toxic data can improve post-training alignability, framing data quality as a pre/post-training co-design question. A toy experiment with small transformers shows that underrepresented features become less entangled as their data frequency increases. The authors then train Olmo-1B models on mixtures of C4 (clean) and 4chan (toxic) data at 0% to 25% toxic proportions, holding clean data constant. They report that toxicity detection improves, that linear probe accuracy for toxicity increases (e.g., a statistically significant difference between the 0% and 25% models), and that inference-time intervention (ITI) steering produces a U-shaped toxicity curve with a minimum at 10% toxic pretraining data. Table 1 compares the 10% model under prompting and steering against several detoxification baselines, claiming a better toxicity/capability trade-off, and Table 2 shows similar U-shaped effects for SFT and DPO. A red-teaming experiment with GCG attacks shows the lowest attack success rate for the 10% toxic model with strong steering. The central claim is that toxic pretraining content—not merely additional training data—improves the model's steerability.
Significance. If established, the central claim would challenge the default practice of filtering toxic data from pretraining corpora and would support a co-design view of pre- and post-training. The paper is valuable for formulating a concrete, falsifiable hypothesis and for providing a clean toy experiment that motivates the entanglement measure. The use of fully open models (Olmo-1B), repeated training runs with multiple seeds, and release-oriented experimental design are strengths. However, the main empirical claim of improved alignability is currently confounded by the token-count increase that accompanies the addition of toxic data, which prevents the paper from establishing the causal role of toxic content. The significance is therefore conditional on resolving this confound.
major comments (3)
- [Section 3, Figure 6, Tables 1-2] The experimental design holds clean data constant while varying the proportion of toxic data, so total training tokens rise from 20.1B to 25.7B as the toxic proportion goes from 0% to 25%. The improved probing results (Section 4), the ITI steering curves (Figure 6), and the SFT/DPO trends (Table 2) could in principle be explained by the larger number of training tokens rather than by the toxicity of the added data. Appendix Table 5 matches token counts only for MMLU and does not address the probing or steering results. To support the causal attribution that toxic content itself improves alignability, the authors should include matched-token clean-data-only models (for example, models trained on additional C4 tokens to reach 21.6B, 22.1B, etc.) and compare the probing and steering results against those baselines.
- [Figure 6, Table 1, Section 5.3] The 10% sweet spot is selected post hoc from the empirical curve, and the claim that the curve is 'smile-shaped' is not tested statistically. With only two seeds per configuration, the reported one-standard-deviation error bars are extremely coarse, and no significance test is given for the difference between the 10% steered model and the 0% steered model, nor for the apparent non-monotonicity. The authors should provide confidence intervals or significance tests for the key comparisons, and consider additional seeds to support the U-shape claim and the choice of 10% in Table 1.
- [Section 5.3, Table 1] The comparison in Table 1 between 'Clean data + steering' and '10% Toxic data + steering' is not a matched-compute comparison: the 10% toxic model was trained on more tokens (approximately 21.6B versus 20.1B). The better trade-off in Table 1 could therefore reflect additional training rather than toxic data content. A matched-token clean-data steering baseline is necessary for the claim that adding toxic data improves the trade-off, and the same issue affects the prompting comparison and the red-teaming results in Table 3.
minor comments (6)
- [Section 5.1] The phrase 'Inference-time tntervention' contains a typo and should read 'Inference-time Intervention'.
- [Section 1 Contributions] The sentence 'give a definitive answer the question' is missing the word 'to' and should read 'give a definitive answer to the question'.
- [Section 5.2] The term 'binerized' should be 'binarized'.
- [Appendix A] There is a missing space in 'nameOLMo-1B' and in 'under the nameOLMo-1B (0724)', which should read 'under the name OLMo-1B (0724)'.
- [Section 4 (verbalization)] The 'à la Logit Lens' phrase would be clearer as 'following the Logit Lens approach' for readers unfamiliar with French typography.
- [Figure 6 caption] The caption says 'Comparing all red bars reveals an upward curve, while comparing all blue bars shows a smile-shaped curve,' but the figure itself plots bars; it would be clearer to explicitly state that the red bars rise with toxic proportion and the blue bars fall until 10% and then rise.
Circularity Check
No significant circularity: the central claim is an empirical finding, not an input-derived quantity.
full rationale
The paper's central claims are empirical measurements rather than constructions from their inputs. The entanglement measure in Eq. (1) is a definition, but the observed drop in entanglement as a feature's data frequency increases is a trained result, not an identity. The 10% sweet spot is read off the experimental curve in Figure 6 and explicitly described as an empirical choice ('10% appears to be a sweet spot'), not a parameter fitted to produce the claim. The toy model motivates the real-model experiments but does not constitute a derivation of the steering results. The Welch-bound lower bound in Remark 3 is independent mathematics. The use of inference-time intervention from the authors' prior work (Li et al., 2023) is tool reuse, not load-bearing circularity: ITI is an existing post-training method being applied, and the paper's contribution is the comparison across pretraining data compositions, not the steering method itself. No uniqueness theorem is imported from the authors' prior work, and no ansatz is smuggled in via citation. The token-count confound is a genuine experimental concern: the total number of tokens ranges from 20.1 to 25.7 billion as toxic data increases, and Appendix Table 5 controls for token count only on MMLU, not on alignability. That affects causal attribution and external validity, but it does not make the derivation circular, because the reported quantities are measured outcomes rather than quantities forced by the experimental design. Overall, the derivation chain is self-contained against external benchmarks, and no step reduces by construction to its own inputs.
Assumptions & free parameters
assumptions (5)
- domain assumption Superposition hypothesis (Elhage et al. 2022): when features outnumber dimensions, networks encode features in superposed directions
- domain assumption Linear representation hypothesis: concepts are encoded as linear directions in activation space
- domain assumption C4 is effectively clean and 4chan is effectively toxic
- domain assumption Perspective API scores are a valid measure of generation toxicity
- ad hoc to paper Toy results on 4-dimensional residual streams generalize to 1B-parameter models
Cite this review
Pith. "Pith review of When Bad Data Leads to Good Models." pith.science (2026). https://pith.science/paper/XFDMH72Z
@misc{pith2026250504741,
author = {Pith},
title = {Pith review of: When Bad Data Leads to Good Models},
year = {2026},
howpublished = {\url{https://pith.science/paper/XFDMH72Z}},
note = {Machine review of arXiv:2505.04741}
}
read the original abstract
In large language model (LLM) pretraining, data quality is believed to determine model quality. In this paper, we re-examine the notion of "quality" from the perspective of pre- and post-training co-design. Specifically, we explore the possibility that pre-training on more toxic data can lead to better control in post-training, ultimately decreasing a model's output toxicity. First, we use a toy experiment to study how data composition affects the geometry of features in the representation space. Next, through controlled experiments with Olmo-1B models trained on varying ratios of clean and toxic data, we find that the concept of toxicity enjoys a less entangled linear representation as the proportion of toxic data increases. Furthermore, we show that although toxic data increases the generational toxicity of the base model, it also makes the toxicity easier to remove. Evaluations on Toxigen and Real Toxicity Prompts demonstrate that models trained on toxic data achieve a better trade-off between reducing generational toxicity and preserving general capabilities when detoxifying techniques such as inference-time intervention (ITI) are applied. Our findings suggest that, with post-training taken into account, bad data may lead to good models.
Figures
Figures from the paper (5 more)
Forward citations
Cited by 1 Pith paper
-
Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs
A special <|ino|> token trained into LLMs gates hazardous answers behind an assistant-side signal, beating unlearning and refusal baselines on safety-utility trade-offs.
Reference graph
Works this paper leans on
-
[1]
write newline
" write newline "" before.all 'output.state := FUNCTION n.dashify 't := "" t empty not t #1 #1 substring "-" = t #1 #2 substring "--" = not "--" * t #2 global.max substring 't := t #1 #1 substring "-" = "-" * t #2 global.max substring 't := while if t #1 #1 substring * t #2 global.max substring 't := if while FUNCTION format.date year duplicate empty "emp...
-
[2]
Understanding intermediate layers using linear classifier probes
Guillaume Alain and Yoshua Bengio. Understanding intermediate layers using linear classifier probes. arXiv preprint arXiv:1610.01644, 2016
arXiv 2016
-
[3]
Toxicity of the Commons: Curating Open-Source Pre-Training Data
Catherine Arnett, Eliot Jones, Ivan P. Yamshchikov, and Pierre-Carl Langlais. Toxicity of the Commons: Curating Open-Source Pre-Training Data . arXiv preprint arXiv:2410.22587, 2024. URL https://arxiv.org/pdf/2410.22587
work page Pith review arXiv 2024
-
[4]
Linear algebraic structure of word senses, with applications to polysemy
Sanjeev Arora, Yuanzhi Li, Yingyu Liang, Tengyu Ma, and Andrej Risteski. Linear algebraic structure of word senses, with applications to polysemy. Transactions of the Association for Computational Linguistics, 6: 0 483--495, 2018
work page 2018
-
[5]
Probing classifiers: Promises, shortcomings, and advances
Yonatan Belinkov. Probing classifiers: Promises, shortcomings, and advances. Computational Linguistics, pages 1--12, 2016
work page 2016
-
[6]
Eliciting latent predictions from transformers with the tuned lens
Nora Belrose, Zach Furman, Logan Smith, Danny Halawi, Igor Ostrovsky, Lev McKinney, Stella Biderman, and Jacob Steinhardt. Eliciting latent predictions from transformers with the tuned lens. arXiv preprint arXiv:2303.08112, 2023
arXiv 2023
-
[7]
The accuracy paradox in rlhf: When better reward models don't yield better language models
Yanjun Chen, Dawei Zhu, Yirong Sun, Xinghao Chen, Wei Zhang, and Xiaoyu Shen. The accuracy paradox in rlhf: When better reward models don't yield better language models. arXiv preprint arXiv:2410.06554, 2024
arXiv 2024
-
[8]
Ultrafeedback: Boosting language models with scaled ai feedback
Ganqu Cui, Lifan Yuan, Ning Ding, Guanming Yao, Bingxiang He, Wei Zhu, Yuan Ni, Guotong Xie, Ruobing Xie, Yankai Lin, Zhiyuan Liu, and Maosong Sun. Ultrafeedback: Boosting language models with scaled ai feedback. arXiv preprint arXiv:2310.01377, 2023
Show all 51 references
-
[9]
Sparse autoencoders find highly interpretable features in language models
Hoagy Cunningham, Aidan Ewart, Logan Riggs, Robert Huben, and Lee Sharkey. Sparse autoencoders find highly interpretable features in language models. arXiv preprint arXiv:2309.08600, 2023
2023 arXiv
-
[10]
Plug and play language models: A simple approach to controlled text generation
Sumanth Dathathri, Andrea Madotto, Janice Lan, Jane Hung, Eric Frank, Piero Molino, Jason Yosinski, and Rosanne Liu. Plug and play language models: A simple approach to controlled text generation. arXiv preprint arXiv:1912.02164, 2019
1912 arXiv
-
[11]
Toy models of superposition
Nelson Elhage, Tristan Hume, Catherine Olsson, Nicholas Schiefer, Tom Henighan, Shauna Kravec, Zac Hatfield-Dodds, Robert Lasenby, Dawn Drain, Carol Chen, et al. Toy models of superposition. arXiv preprint arXiv:2209.10652, 2022
2022 arXiv
-
[12]
Samuel Gehman, Suchin Gururangan, Maarten Sap, Yejin Choi, and Noah A. Smith. Realtoxicityprompts: Evaluating neural toxic degeneration in language models. In Proceedings of the 2020 Conference on Empirical Methods in Natural Language Processing: Findings, pages 3356--3369. As...
2020 doi
-
[13]
Openwebtext corpus
Aaron Gokaslan and Vanya Cohen. Openwebtext corpus. http://Skylion007.github.io/OpenWebTextCorpus, 2019
2019
-
[14]
Olmo: Accelerating the science of language models
Dirk Groeneveld, Iz Beltagy, Pete Walsh, Akshita Bhagia, Rodney Kinney, Oyvind Tafjord, Ananya Harsh Jha, Hamish Ivison, Ian Magnusson, Yizhong Wang, et al. Olmo: Accelerating the science of language models. arXiv preprint arXiv:2402.00838, 2024
2024 arXiv
-
[15]
Don't stop pretraining: Adapt language models to domains and tasks
Suchin Gururangan, Ana Marasovi \'c , Swabha Swayamdipta, Kyle Lo, Iz Beltagy, Doug Downey, and Noah A Smith. Don't stop pretraining: Adapt language models to domains and tasks. arXiv preprint arXiv:2004.10964, 2020
2004 arXiv
-
[16]
T oxi G en: A large-scale machine-generated dataset for adversarial and implicit hate speech detection
Thomas Hartvigsen, Saadia Gabriel, Hamid Palangi, Maarten Sap, Dipankar Ray, and Ece Kamar. T oxi G en: A large-scale machine-generated dataset for adversarial and implicit hate speech detection. In Proceedings of the 60th Annual Meeting of the Association for Computational Li...
2022 doi
-
[17]
Training compute-optimal large language models
Jordan Hoffmann, Sebastian Borgeaud, Arthur Mensch, Elena Buchatskaya, Trevor Cai, Eliza Rutherford, Diego de Las Casas, Lisa Anne Hendricks, Johannes Welbl, Aidan Clark, et al. Training compute-optimal large language models. arXiv preprint arXiv:2203.15556, 2022. URL https://...
2022 arXiv
-
[18]
Toxic comment classification challenge, 2018
Jigsaw and Conversation AI. Toxic comment classification challenge, 2018. URL https://www.kaggle.com/c/jigsaw-toxic-comment-classification-\
2018
-
[19]
Ctrl: A conditional transformer language model for controllable generation
Nitish Shirish Keskar, Bryan McCann, Lav R Varshney, Caiming Xiong, and Richard Socher. Ctrl: A conditional transformer language model for controllable generation. arXiv preprint arXiv:1909.05858, 2019
1909 arXiv
-
[20]
Understanding the effects of rlhf on llm generalisation and diversity
Robert Kirk, Ishita Mediratta, Christoforos Nalmpantis, Jelena Luketina, Eric Hambro, Edward Grefenstette, and Roberta Raileanu. Understanding the effects of rlhf on llm generalisation and diversity. arXiv preprint arXiv:2310.06452, 2023
-
[21]
Gedi: Generative discriminator guided sequence generation
Ben Krause, Akhilesh Deepak Gotmare, Bryan McCann, Nitish Shirish Keskar, Shafiq Joty, Richard Socher, and Nazneen Fatema Rajani. Gedi: Generative discriminator guided sequence generation. arXiv preprint arXiv:2009.06367, 2020
2009 arXiv
-
[22]
A mechanistic understanding of alignment algorithms: A case study on dpo and toxicity
Andrew Lee, Xiaoyan Bai, Itamar Pres, Martin Wattenberg, Jonathan K Kummerfeld, and Rada Mihalcea. A mechanistic understanding of alignment algorithms: A case study on dpo and toxicity. arXiv preprint arXiv:2401.01967, 2024
2024 arXiv
-
[23]
Inference-time intervention: Eliciting truthful answers from a language model
Kenneth Li, Oam Patel, Fernanda Vi \'e gas, Hanspeter Pfister, and Martin Wattenberg. Inference-time intervention: Eliciting truthful answers from a language model. In Advances in Neural Information Processing Systems, 2023
2023
-
[24]
Contrastive decoding: Open-ended text generation as optimization
Xiang Lisa Li, Ari Holtzman, Daniel Fried, Percy Liang, Jason Eisner, Tatsunori Hashimoto, Luke Zettlemoyer, and Mike Lewis. Contrastive decoding: Open-ended text generation as optimization. arXiv preprint arXiv:2210.15097, 2022
-
[25]
Disentangling transformer language models as superposed topic models
Jia Peng Lim and Hady Lauw. Disentangling transformer language models as superposed topic models. In Proceedings of the 2023 Conference on Empirical Methods in Natural Language Processing, pages 8646--8666, 2023
2023
-
[26]
Speciality vs generality: An empirical study on catastrophic forgetting in fine-tuning foundation models
Yong Lin, Lu Tan, Hangyu Lin, Zeming Zheng, Renjie Pi, Jipeng Zhang, Shizhe Diao, Haoxiang Wang, Han Zhao, Yuan Yao, et al. Speciality vs generality: An empirical study on catastrophic forgetting in fine-tuning foundation models. arXiv preprint arXiv:2309.06256, 2023
2023 arXiv
-
[27]
Dexperts: Decoding-time controlled text generation with experts and anti-experts
Alisa Liu, Maarten Sap, Ximing Lu, Swabha Swayamdipta, Chandra Bhagavatula, Noah A Smith, and Yejin Choi. Dexperts: Decoding-time controlled text generation with experts and anti-experts. arXiv preprint arXiv:2105.03023, 2021
2021 arXiv
-
[28]
Amd-olmo: A series of 1b language models trained from scratch by amd on amd instinct™ mi250 gpus., October 2024
Jiang Liu, Jialian Wu, Prakamya Mishra, Zicheng Liu, Sudhanshu Ranjan, Pratik Prabhanjan Brahma, Yusheng Su, Gowtham Ramesh, Peng Sun, Zhe Li, Dong Li, Lu Tian, and Emad Barsoum. Amd-olmo: A series of 1b language models trained from scratch by amd on amd instinct™ mi250 gpus.,...
2024
-
[29]
A pretrainer's guide to training data: Measuring the effects of data age, domain coverage, quality, & toxicity
Shayne Longpre, Gregory Yauney, Emily Reif, Katherine Lee, Adam Roberts, Barret Zoph, Denny Zhou, Jason Wei, Kevin Robinson, David Mimno, and Daphne Ippolito. A pretrainer's guide to training data: Measuring the effects of data age, domain coverage, quality, & toxicity. arXiv ...
2023 arXiv
-
[30]
On linear representations and pretraining data frequency in language models
Jack Merullo, Noah A Smith, Sarah Wiegreffe, and Yanai Elazar. On linear representations and pretraining data frequency in language models. The Thirteenth International Conference on Learning Representations, 2025. URL https://openreview.net/forum?id=EDoD3DgivF
2025
-
[31]
Linguistic regularities in continuous space word representations
Tom \'a s Mikolov, Wen-tau Yih, and Geoffrey Zweig. Linguistic regularities in continuous space word representations. In Proceedings of the 2013 conference of the north american chapter of the association for computational linguistics: Human language technologies, pages 746--751, 2013
2013
-
[32]
Interpreting gpt: The logit lens
nostalgebraist. Interpreting gpt: The logit lens. LessWrong, 2020. URL https://www.lesswrong.com/posts/AcKRB8wDpdaN6v6ru/interpreting-gpt-the-logit-lens
2020
-
[33]
Training language models to follow instructions with human feedback
Long Ouyang, Jeffrey Wu, Xu Jiang, Diogo Almeida, Carroll Wainwright, Pamela Mishkin, Chong Zhang, Sandhini Agarwal, Katarina Slama, Alex Ray, et al. Training language models to follow instructions with human feedback. Advances in neural information processing systems, 35: 0 2...
2022
-
[34]
Raiders of the lost kek: 3.5 years of augmented 4chan posts from the politically incorrect board
Antonis Papasavva, Savvas Zannettou, Emiliano De Cristofaro, Gianluca Stringhini, and Jeremy Blackburn. Raiders of the lost kek: 3.5 years of augmented 4chan posts from the politically incorrect board. In Proceedings of the international AAAI conference on web and social media...
2020
-
[35]
Generative agents: Interactive simulacra of human behavior
Joon Sung Park, Joseph O'Brien, Carrie Jun Cai, Meredith Ringel Morris, Percy Liang, and Michael S Bernstein. Generative agents: Interactive simulacra of human behavior. In Proceedings of the 36th Annual ACM Symposium on User Interface Software and Technology, pages 1--22, 2023 a
2023
-
[36]
The linear representation hypothesis and the geometry of large language models
Kiho Park, Yo Joong Choe, and Victor Veitch. The linear representation hypothesis and the geometry of large language models. arXiv preprint arXiv:2311.03658, 2023 b
2023 arXiv
-
[37]
Perspective | developers, 2024
PerspectiveAPI . Perspective | developers, 2024. URL https://developers.perspectiveapi.com
2024
-
[38]
Adding instructions during pretraining: Effective way of controlling toxicity in language models
Shrimai Prabhumoye, Mostofa Patwary, Mohammad Shoeybi, and Bryan Catanzaro. Adding instructions during pretraining: Effective way of controlling toxicity in language models. arXiv preprint arXiv:2302.07388, 2023. URL https://arxiv.org/pdf/2302.07388
2023 arXiv
-
[39]
Fine-tuning aligned language models compromises safety, even when users do not intend to! arXiv preprint arXiv:2310.03693, 2023
Xiangyu Qi, Yi Zeng, Tinghao Xie, Pin-Yu Chen, Ruoxi Jia, Prateek Mittal, and Peter Henderson. Fine-tuning aligned language models compromises safety, even when users do not intend to! arXiv preprint arXiv:2310.03693, 2023
2023 arXiv
-
[40]
Rae, Sebastian Borgeaud, Trevor Cai, Katie Millican, Jordan Hoffmann, Francis Song, John Aslanides, Sarah Henderson, Roman Ring, Susannah Young, et al
Jack W. Rae, Sebastian Borgeaud, Trevor Cai, Katie Millican, Jordan Hoffmann, Francis Song, John Aslanides, Sarah Henderson, Roman Ring, Susannah Young, et al. Scaling language models: Methods, analysis & insights from training gopher. arXiv preprint arXiv:2112.11446, 2021. UR...
2021 arXiv
-
[41]
Direct preference optimization: Your language model is secretly a reward model
Ryan Rafailov, Jason Li, Ehsan Imani, Xinyun Zhang, and Dawn Song. Direct preference optimization: Your language model is secretly a reward model. arXiv preprint arXiv:2305.18290, 2023
2023 arXiv
-
[42]
Colin Raffel, Noam Shazeer, Adam Roberts, Katherine Lee, Sharan Narang, Michael Matena, Yanqi Zhou, Wei Li, and Peter J. Liu. Exploring the limits of transfer learning with a unified text-to-text transformer. Journal of Machine Learning Research, 21 0 (140): 0 1--67, 2020. URL...
2020
-
[43]
Self-diagnosis and self-debiasing: A proposal for reducing corpus-based bias in nlp
Timo Schick, Sahana Udupa, and Hinrich Sch \"u tze. Self-diagnosis and self-debiasing: A proposal for reducing corpus-based bias in nlp. Transactions of the Association for Computational Linguistics, 9: 0 1408--1424, 2021
2021
-
[44]
Process for adapting language models to society (palms) with values-targeted datasets
Irene Solaiman and Christy Dennison. Process for adapting language models to society (palms) with values-targeted datasets. Advances in Neural Information Processing Systems, 34: 0 5861--5873, 2021
2021
-
[45]
Bert rediscovers the classical nlp pipeline
Ian Tenney, Dipanjan Das, and Ellie Pavlick. Bert rediscovers the classical nlp pipeline. arXiv preprint arXiv:1905.05950, 2019
1905 arXiv
-
[46]
Lamda: Language models for dialog applications
Romal Thoppilan, Daniel De Freitas, Jamie Hall, Noam Shazeer, Apoorv Kulshreshtha, Heng-Tze Cheng, Alicia Jin, Taylor Bos, Leslie Baker, Yu Du, et al. Lamda: Language models for dialog applications. arXiv preprint arXiv:2201.08239, 2022. URL https://arxiv.org/abs/2201.08239
2022 arXiv
-
[47]
Activation addition: Steering language models without optimization
Alexander Matt Turner, Lisa Thiergart, Gavin Leech, David Udell, Juan J Vazquez, Ulisse Mini, and Monte MacDiarmid. Activation addition: Steering language models without optimization. arXiv e-prints, pages arXiv--2308, 2023
2023
-
[48]
Exploring the limits of domain-adaptive training for detoxifying large-scale language models
Boxin Wang, Wei Ping, Chaowei Xiao, Peng Xu, Mostofa Patwary, Mohammad Shoeybi, Bo Li, Anima Anandkumar, and Bryan Catanzaro. Exploring the limits of domain-adaptive training for detoxifying large-scale language models. Advances in Neural Information Processing Systems, 35: 0 ...
2022
-
[49]
Rolellm: Benchmarking, eliciting, and enhancing role-playing abilities of large language models
Zekun Moore Wang, Zhongyuan Peng, Haoran Que, Jiaheng Liu, Wangchunshu Zhou, Yuhan Wu, Hongcheng Guo, Ruitong Gan, Zehao Ni, Man Zhang, et al. Rolellm: Benchmarking, eliciting, and enhancing role-playing abilities of large language models. arXiv preprint arXiv:2310.00746, 2023
-
[50]
Lower bounds on the maximum cross correlation of signals (corresp.)
Lloyd Welch. Lower bounds on the maximum cross correlation of signals (corresp.). IEEE Transactions on Information theory, 20 0 (3): 0 397--399, 2003
2003
-
[51]
Representation engineering: A top-down approach to ai transparency
Andy Zou, Long Phan, Sarah Chen, James Campbell, Phillip Guo, Richard Ren, Alexander Pan, Xuwang Yin, Mantas Mazeika, Ann-Kathrin Dombrowski, et al. Representation engineering: A top-down approach to ai transparency. arXiv preprint arXiv:2310.01405, 2023
Reviewed August 15, 2026 · model on record in the stance chip above.
Discussion (0). Continue with ORCID to comment.