Hugging Face's logo
Stefano Fiorucci's picture
49 58 168

Stefano Fiorucci PRO

anakin87
TeodoroTomas's profile picture sdiazlor's profile picture ogschrms's profile picture
Ā·

AI & ML interests

Language Models: orchestration, post-training, GRPO, synthetic data... Contributing to Haystack LLM framework šŸ—ļø

Recent Activity

posted an update 11 days ago
LLMs can leak their post-training data (RL included) šŸ’§ New interesting paper on this topic from Google DeepMind: https://huggingface.co/papers/2510.18554 It's known that Language Models memorize data that can be extracted via prompting. In this paper, the authors investigate this aspect: - using open models, where prompting can be fully customized by the user, including special tokens. - focusing on open-source models like Olmo, where full training data is available. šŸ“¤ How do they extract data? During post-training (like SFT), new tokens such as <|user|> are introduced. The authors hypothesize prompting the model with these tokens can make it output its alignment data (remember Magpie?). For example, for SFT, their extraction prompt is <|endoftext|><|user|>. šŸ“ Evaluating memorization The authors compare each sampled example with the original data using vector search with embedding similarity. They find that many outputs are semantically very similar to the original data, even if the exact words differ. Traditional string-matching algorithms underestimate memorization by 10x. šŸ” What about RL? Surprisingly, the same technique works to extract data from Reinforcement Learning (PPO/GRPO) phases. This is counter-intuitive because the RL objective is not designed to increase sequence likelihoods (unlike SFT). Practical limitation: in this case, extraction relies on using the initial part of the training prompt, which is not generally public. šŸ“ˆ Are the extracted data effective for post-training? Both in SFT and RL, the extracted data can be used to fine-tune models to similar performance to the originals. The authors suggest that model distillation, where a stronger model is used to drive the training of a weaker one, may be a form of indirect training on the original dataset.
liked a model 13 days ago
PleIAs/Baguettotron
liked a model 13 days ago
PleIAs/Monad
View all activity

Organizations

deepset's profile picture Blog-explorers's profile picture ZeroGPU Explorers's profile picture Hugging Face Discord Community's profile picture