NHacker Next
  • new
  • past
  • show
  • ask
  • show
  • jobs
  • submit
Show HN: Distilling DeepSeek into GPT-OSS doesn't transfer censorship. Try it (ctgt.ai)
4 minutes ago [-]
Alifatisk 1 hours ago [-]
I’m thinking this makes fullt sense because distillation is only additive, not subtractive. So it does not remove knowledge (if we can define censorship as removal of knowledge).
ACCount37 27 minutes ago [-]
Most censorship isn't "removal of knowledge" but "installation of behavior that prevents some knowledge from being revealed or applied in certain ways".

This behavior can, in turn, be transferred via distillation. But, evidently, financial domain wasn't entangled enough with the censorship behaviors for them to bleed through, in this case.

cgorlla 59 minutes ago [-]
Consider that LLMs are trained on the corpus of the internet, and (simplifying) consequently give the average answer of the internet. If the desired answer of the censorer is contradictory to this, then it requires additional training data to get the model to act a certain way.
cyanydeez 10 minutes ago [-]
distillation doesnt add anything; all it's doing is reconfiguring some root weights that get drowned out by noisy training and/or datset issues. It strengthens commonalities.

but there's no new information being created.

seri4l 56 minutes ago [-]
Deepseek is, with difference, the most "Western" of Chinese models, so it's a bit perplexing that it was chosen to test this hypothesis.

I didn't run any benchmarks but I played around a little, and after getting around the API-level filter Deepseek V4's answers about "China-sensitive content" aren't any different from what I get from Claude and ChatGPT.

cgorlla 41 minutes ago [-]
You can see exactly what prompts we used and the results here: https://github.com/CTGT-Inc/lineage-eval/tree/main/data

We found V4 Flash was significantly more censored than the baseline.

strictnein 35 minutes ago [-]
Could just be resources available? Deepseek is the easiest to get up and running on hardware that's pretty readily available:

   unsloth/DeepSeek-V4-Flash-GGUF 4bit ~140GB
   unsloth/Kimi-K3-GGUF 4bit ~1.5TB
   unsloth/GLM-5.2-GGUF 4bit ~400GB
strictnein 31 minutes ago [-]
I know not all models can be easily abliterated or uncensored, but is there a reason to start with a model that is still censored?

ex: https://huggingface.co/huihui-ai/models

cgorlla 18 minutes ago [-]
Abliterated models certainly have their uses but they're not the default choice for most users or enterprises, and thus not the versions of those models most would interact with.
data-ottawa 1 hours ago [-]
FYI the scrolling on iPad with trackpad is broken. A full swipe on the trackpad is about 1 inch of screen movement.
18 minutes ago [-]
cgorlla 12 minutes ago [-]
This is fixed.
kevincox 32 minutes ago [-]
Scrolling on desktop is also broken.
18 minutes ago [-]
cgorlla 12 minutes ago [-]
This is fixed
1 hours ago [-]
andy99 1 hours ago [-]
So, there is no subliminal learning in this situation, under what conditions would we expect it. I find a transfer attack to be a bit far fetched but it’s definitely interesting.

If we trained from random initialisations on DeepSeek output (that didn’t explicitly contain the political questions) we would expect transfer? And if we fine tuned a model pretrained elsewhere on Deepseek output?

What is the line?

cgorlla 53 minutes ago [-]
It's most likely to occur when distilling a Chinese model from a Chinese base. We plan to do compliance geometry analysis in the future to see what is structurally changing in the model when distillation causes it to start refusing or whitewashing.
dluan 1 hours ago [-]
It'd be interesting to use this technique to create a running tally across all models of which models are censored on what topics
cgorlla 13 minutes ago [-]
Agreed, we find this to be an interesting reflection of societal values and norms inasmuch LLMs are.
jubilee33 25 minutes ago [-]
Yes but in which jurisdiction could you publish it? We roughly know what the hot topics are for the current models, but actually testing and ranking would break said censorship and thus would be hammered into the ground through cointelpro methods by all parties.

It would be nice to have a hypothetical small country where the internal censorship would be non aligned and insignificant enough that it wouldn't take away from the overall findings. But it doesn't exist.

I want some science based authority on the moon where only 3-sigma IQ international academics have ultimate authority. Oh wait Asimov did that right? I guess it didn't go so well either.

More important there are some things censored that are true. And some things censored that are false. How do we even get to a good model of the truthiness/nonsense adjustment indicator?

martini333 48 minutes ago [-]
Hijacking scroll behaviour in 2026 is wild.
cgorlla 21 minutes ago [-]
Agreed. It's fixed
noonan-yc 12 minutes ago [-]
Fixed
ljlolel 1 hours ago [-]
so interesting!!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact
Rendered at 20:54:51 GMT+0000 (Coordinated Universal Time) with Vercel.