Twitxy Saved

Arnav Chavan

Verified account This account is verified. Learn more

@ArnavChavan6

CS PhD @UCBerkeley | Senior Applied Scientist @AmazonLab126 | Ex. - Deepmind, Microsoft Research
Berkeley, CA arnav0400.github.io Joined February 2022
442 Following 261 Followers 67 Posts

Latest posts 5

Pinned post

Arnav Chavan Verified account @ArnavChavan6
Check out this post by my amazing co-author @chandavidlee with more details on Lafa!
Chanhyuk Lee Verified account @chandavidlee Oct 21
Can flow language models scale to billions of parameters and handle real generative tasks?

Introducing 🌊 Lafa (Large flow language model), a flow LM scaled up to 8B that matches AR quality, with 🚀 2.5× AR throughput at 7B.

Co-led with @ArnavChavan6 @UdbhavBamba.
Joint work with @wognsfjq96 @hongseu33 @AdtRaghunathan @jw9730
View quoted post on X
Arnav Chavan Verified account @ArnavChavan6
Take a look at SubWM!
Sewon Min Verified account @sewon__min 12h
Model competition is heating up, and distillation is 🔥🔥

Distillation detection is hard, so watermarking can help make it detectable.

But are existing watermarks robust?

We find two ways to break them: distill a model, then distill that model again; or distill only selected tokens that matter.

Then what do we do? We introduce SubWM, which outperforms prior methods and is more robust to laundering.
View quoted post on X
Arnav Chavan Verified account @ArnavChavan6
Distillation detection in the weight space improves robustness and sustains watermark laundering attacks!

Key Idea - train two copies of the teacher: one on clean traces and the other on watermarked traces. For scoring a suspected trace, simply ask the question: "How much more likely is this response if we shift the clean teacher toward the watermarked one in weight space?"

We hope that this provides labs with finer understanding on who is distilling their models and improve tracebility of bad actors!

Fun Fact; this is a class Project of CS 294-288: Data-Centric LLMs class by @sewon__min - sewonmin.com/courses/cs294_…
www.sewonmin.com Home
Harshit Varma Verified account @hrshtv 1d
Excited to present our new work on distillation detection: Subliminal Watermarks (SubWM). SubWM is much more robust compared to existing distillation detectors, is able to distinguish different watermarking keys, and also works reliably for out-of-domain prompts!
Blog: subliminal-watermarks.github.io
🧵
View quoted post on X
0 replies 1 reposts 13 likes 461 views View on X