Extracting Training Data from ChatGPT
We have just released a paper that allows us to extract several megabytes of ChatGPT’s training data for about two hundred dollars. (Language models, like ChatGPT, are trained on data taken from the public internet. Our attack shows that, by querying the model, we can actually extract some of the exact data it was trained on.) We estimate that it would be possible to extract ~a gigabyte of ChatGPT’s training dataset from the model by spending more money querying the model.
Extracting Training Data from ChatGPT We have just released a paper that allows us to extract several megabytes of ChatGPT’s training data for about two hundred dollars. (Language models, like ChatGPT, are trained on data taken from the public internet. Our attack shows that, by querying the model, we can actually extract some of the exact data it was trained on.) We estimate that it would be possible to extract ~a gigabyte of ChatGPT’s training dataset from the model by spending more money querying the model. Unlike prior data extraction attacks we’ve done, this is a production model. The key
saved by
related reading
- What Is ChatGPT Doing … and Why Does It Work?-Stephen Wolfram Writingswritings.stephenwolfram.com
- A small number of samples can poison LLMs of any size \ Anthropicanthropic.com
- Deep Dive into LLMs like ChatGPTyoutube.com
- Training is not the same as chatting: ChatGPT and other LLMs don’t remember everything you saysimonwillison.net
- gpt-4.pdfcdn.openai.com
- Using ChatGPT is not bad for the environmentandymasley.substack.com
- RLHF: Reinforcement Learning from Human Feedbackhuyenchip.com
- Self-Fulfilling Misalignment Data Might Be Poisoning Our AI Modelsturntrout.com
- Let's build GPT: from scratch, in code, spelled out.youtube.com
- [2302.03494] A Categorical Archive of ChatGPT Failuresarxiv.org
- [2403.06634] Stealing Part of a Production Language Modelarxiv.org
- [2608.09867] Stealing Reasoning Traces from Proprietary LLM APIsarxiv.org