Nicholas Carlini

Nicholas Carlini is a research scientist at Google DeepMind working at the intersection of machine learning and computer security.

Nicholas Carlini Nicholas Carlini Nicholas Carlini Research Scientist, Anthropic nicholas [at] carlini [dot] com GitHub | Google Scholar Nicholas Carlini Research Scientist, Anthropic nicholas [at] carlini [dot] com GitHub | Google Scholar I am a researcher working at the intersection of machine learning and computer security. Currently I work at Anthropic studying what bad things you could do with, or do to, language models. Previously, I was a research scientist at Google Brain (from 2018-2023) and DeepMind (from 2023-2025). I hold a Ph.D. from UC Berkeley under David Wagner, and a B.A. in c

saved by

• Elizabeth Qiu
• Ratan Kaliani
• Information Flow
• Lydia Nottingham
• Jirat C
• Rosalyn Bejrsuwana

related reading

• Alexa Tartaglini | aboutalexatartaglini.com
• [2511.08579] Training Language Models to Explain Their Own Computationsarxiv.org
• [2512.11949] Neural Chameleons: Language Models Can Learn to Hide Their Thoughts from Unseen Activation Monitorsarxiv.org
• Training Language Models to Explain Their Own Computationsarxiv.org
• A small number of samples can poison LLMs of any size \ Anthropicanthropic.com
• Career Update: Google DeepMind -> Anthropicnicholas.carlini.com
• Poisoning Attacks on LLMs Require a Near-constant Number of Poison Samplesarxiv.org
• [2602.04899] Phantom Transfer: Data-level Defences are Insufficient Against Data Poisoningarxiv.org
• Some Lessons from Adversarial Machine Learning | FAR.AIfar.ai
• 2306.15447.pdfarxiv.org
• Why Frontier AI Labs Fight to Hide Chain of Thought — Ilia Shumailov & Alexander Panfilovyoutube.com
• Language Models can Solve Computer Tasksarxiv.org