Your Open Source Model Could Have a Hidden Time-Release Backdoor

5 pointsposted 9 hours ago
by chknlttle

4 Comments

phillipseamore

6 hours ago

The synthetics used for the training seem to be not just based on the same format time, but also the same user prompt "how does redis pub/sub work"

chknlttle

5 hours ago

yes but as you see in the results it transfers to prompts in that format that were never trained on really well

chknlttle

8 hours ago

this works with codex and many other harnesses too