alt Hacker NewsI mean, this is a cool demo, but that's about it. It shows that you can build a model that holds secrets which are genuinely encrypted until the model gets the correct input. But it's also trivially detectable, so the framing seems a bit misleading.
I mean, this is a cool demo, but that's about it. It shows that you can build a model that holds secrets which are genuinely encrypted until the model gets the correct input. But it's also trivially detectable, so the framing seems a bit misleading.
This is a deflationary comment. You make a good point that the weights today are detectable, but I think proofs of concept around poison pills are very important. I am unaware of any theoretical reason why an attacker or misaligned model could not one day find a way to disguise a poison pill such that it is indistinguishable from the normal weights. There could be such limits, but research in this direction is very useful!