Has one of these LLMs figured out yet how to inoculate other LLMs against prompt injection attacks?
Has one of these LLMs figured out yet how to inoculate other LLMs against prompt injection attacks?
GPT-3.5, let's call her mommy, created small stories. The small model trained on this 2M tiny story dataset. Then it was evaluated with GPT-4 (daddy). So no need for humans in either dataset generation or evaluation.
TinyStories https://arxiv.org/abs/2305.07759
This makes me think LLMs are self-replicators in software. A LLM can pull from itself training text, LLM code, and fine-tuning examples. Then it can monitor its own re-training. It understands neural networks and can propose changes. It can run an evolutionary search program.
All it needs is compute. It can't make GPUs, just as no single human or company or even country can. The GPU supply chain is long, distributed and requires global cooperation. Maybe that's what is going to save us.
That isn't self-improvement in the sense the explosive self-improvement of a superintelligent AGI is described.
That is painting a car a new color. It's a new color coating, it may look very good, and the effect may be desirable and useful. But it's still a car, and no closer to a warp capable spaceship than before.
For all we know its possible to train an Einstein level physicist model if we limited data to a curriculumed physics/physics adjacent training set. I'm not even saying this is possible, just pointing that the experiment wasn't some kind of test to see if self improvement could occur
You can train a weaker model with output from a stronger, but can you train an LLM from output from itself?
In essence the idea is: use more expensive computation to derive better result, then retrain the model on the new data. System 2 works (model + toys), then system 1 learns (model by itself).
(Note: A prompt injection attack releases an LLM from its handler’s constraints.)