George Ingebretsen

CS undergraduate at UC Berkeley

High-level interpretability at MARS (with @Jozdien), SLT at SPAR (with @Lucius Bushnaq).

georgeingebretsen.github.io

Wiki Contributions

Comments

Sorted by

When making safety cases for alignment, its important to remember that defense against single-turn attacks doesn't always imply defense against multi-turn attacks.

Our recent paper shows a case where breaking up a single turn attack into multiple prompts (spreading it out over the conversation) changes which models/guardrails are vulnerable to the jailbreak.

Robustness against the single-turn version didn't imply robustness against the multi-turn version of the attack, and robustness against the multi-turn version didn't imply robustness against the single-turn version of the attack.

The rank of a matrix = the number of non-zero eigenvalues of the matrix! So you can either use the top eigenvalues to count the non-zeros, or you can use the fact that an matrix always has eigenvalues to determine the number of non-zero eigenvalues by counting the bottom zero-eigenvalues.

Also for more detail on the "getting hessian eigenvalues without calculating the full hessian" thing, I'd really recommend Johns explanation in this linear algebra lecture he recorded.

Sure, securing an economic surplus is sometimes part of an interesting challenge, and it can presumably get one invited to lots of cool parties, but controlling surplus is typically not as central and necessary to “achievement” and “association” as to “power”.

I guess that the ultra-deadly ingredient here is the manager gaining status when more people are hired, but hardly has any personal stake in the money that gets spent on new hires.

If given the choice between receiving the salary of a would-be new hire, or getting a new bs hire underling for status, I'd definitely expect most people to take the double salary option. 

Like I don't expect these two contrasting experiences to really stack up to each other. I think if it's all the same person weighing these two options, the extra money would blow the status option out of the water.

That's a pretty clean story for why in smaller, say 2-5 person companies, having less bs jobs is something I'd predict (though I don't have sources to confirm this prediction). In these smaller companies, when the person you're hiring gets payed by a noticeable hit in your own paycheck, I wonder if the experience of "ugh, this ineffective person is costing me money" just dramatically cancels out the status thing.

And then potentially the issue here is that big companies tend to separate the ugh-this-costs-me-money person from the woohoo-more-status person?

Ah shoot, I didn’t catch the ambiguity - it was just my partner asking me to turn off the lights, which is much less weird. (I edited the post to make it clearer, thanks!)

Still, it must have had some Kabbalistic significance.

Also "Large Language Models Are Not Robust Multiple Choice Selectors" (Zheng et al., 2023)

This work shows that modern LLMs are vulnerable to option position changes in MCQs due to their inherent "selection bias", namely, they prefer to select specific option IDs as answers (like "Option A"). Through extensive empirical analyses with 20 LLMs on three benchmarks, we pinpoint that this behavioral bias primarily stems from LLMs' token bias, where the model a priori assigns more probabilistic mass to specific option ID tokens (e.g., A/B/C/D) when predicting answers from the option IDs. To mitigate selection bias, we propose a label-free, inference-time debiasing method, called PriDe, which separates the model's prior bias for option IDs from the overall prediction distribution. PriDe first estimates the prior by permutating option contents on a small number of test samples, and then applies the estimated prior to debias the remaining samples. We demonstrate that it achieves interpretable and transferable debiasing with high computational efficiency. We hope this work can draw broader research attention to the bias and robustness of modern LLMs.

Was an explanation of the unsupervised algorithm / sphere search ever published somewhere?

Random Anki tips

When using Anki for a scattered assortment of topics, is it best to group topics into different decks or not worry about it and just have a single big deck.

If making multiple decks, would Anki still give you a single "do this today" set? 

I've only used it in the context of studying foreign language.