Hugging Face
Models
Datasets
Spaces
Buckets
new
Docs
Enterprise
Pricing
Website
Tasks
HuggingChat
Collections
Languages
Organizations
Community
Blog
Posts
Daily Papers
Hardware
Learn
Discord
Forum
GitHub
Solutions
Team & Enterprise
Hugging Face PRO
Enterprise Support
Inference Providers
Inference Endpoints
Storage Buckets
Log In
Sign Up
Sunny Chase
sunnychase
1
Follow
0 followers
ยท
5 following
sunnychase
AI & ML interests
Automation
Recent Activity
liked
a model
21 days ago
drowzeys/keys-Qwen3.8-flash-next-ablit-Mia-Single-Spark-only
reacted
to
anakin87
's
post
with ๐ง
11 months ago
LLMs can leak their post-training data (RL included) ๐ง New interesting paper on this topic from Google DeepMind: https://huggingface.co/papers/2510.18554 It's known that Language Models memorize data that can be extracted via prompting. In this paper, the authors investigate this aspect: - using open models, where prompting can be fully customized by the user, including special tokens. - focusing on open-source models like Olmo, where full training data is available. ๐ค How do they extract data? During post-training (like SFT), new tokens such as <|user|> are introduced. The authors hypothesize prompting the model with these tokens can make it output its alignment data (remember Magpie?). For example, for SFT, their extraction prompt is <|endoftext|><|user|>. ๐ Evaluating memorization The authors compare each sampled example with the original data using vector search with embedding similarity. They find that many outputs are semantically very similar to the original data, even if the exact words differ. Traditional string-matching algorithms underestimate memorization by 10x. ๐ What about RL? Surprisingly, the same technique works to extract data from Reinforcement Learning (PPO/GRPO) phases. This is counter-intuitive because the RL objective is not designed to increase sequence likelihoods (unlike SFT). Practical limitation: in this case, extraction relies on using the initial part of the training prompt, which is not generally public. ๐ Are the extracted data effective for post-training? Both in SFT and RL, the extracted data can be used to fine-tune models to similar performance to the originals. The authors suggest that model distillation, where a stronger model is used to drive the training of a weaker one, may be a form of indirect training on the original dataset.
View all activity
Organizations
None yet
sunnychase
's models
None public yet