Hazards from Increasingly Accessible Fine-Tuning of Downloadable Foundation Models
Not on the map. Why?
Abstract (arXiv)
Public release of the weights of pretrained foundation models, otherwise known as downloadable access citepsolaimangradient2023, enables fine-tuning without the prohibitive expense of pretraining. Our work argues that increasingly accessible fine-tuning of downloadable models may increase hazards. First, we highlight research to improve the accessibility of fine-tuning. We split our discussion into research that A) reduces the computational cost of fine-tuning and B) improves the ability to share that cost across more actors. Second, we argue that increasingly accessible fine-tuning methods may increase hazard through facilitating malicious use and making oversight of models with potentially dangerous capabilities more difficult. Third, we discuss potential mitigatory measures, as well as benefits of more accessible fine-tuning. Given substantial remaining uncertainty about hazards, we conclude by emphasizing the urgent need for the development of mitigations.
Key facts. Cited by 7 papers in the map (data through 7 Oct 2026). Builds on 65 of its 89 references that are in the map. First posted on arXiv 22 Dec 2023.
Builds on
65 of 89 references.
References · 65
- 2023GPT-4 Technical Reportcited by 18,132
- 2021LoRA: Low-Rank Adaptation of Large Language Modelscited by 14,084
- 2019Parameter-Efficient Transfer Learning for NLPcited by 4,195
- 2021Prefix-Tuning: Optimizing Continuous Prompts for Generationcited by 3,878
- 2017Deep reinforcement learning from human preferencescited by 3,846
- 2021The Power of Scale for Parameter-Efficient Prompt Tuningcited by 3,769
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,355
- 2021BitFit: Simple Parameter-efficient Fine-tuning for Transformer-based Masked Language-modelscited by 1,234
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,106
- 2019Machine Unlearningcited by 1,020
- 2022Few-Shot Parameter-Efficient Fine-Tuning is Better and Cheaper than In-Context Learningcited by 886
- 2022Discovering Language Model Behaviors with Model-Written Evaluationscited by 805
38 more
- 2023AlpacaFarm: A Simulation Framework for Methods that Learn from Human Feedbackcited by 738
- 2021P-Tuning v2: Prompt Tuning Can Be Comparable to Fine-tuning Universally Across Scales and Taskscited by 686
- 2022Large Language Models Can Self-Improvecited by 656
- 2023ChemCrow: Augmenting large-language models with chemistry toolscited by 609
- 2023Textbooks Are All You Need II: phi-1.5 technical reportcited by 559
- 2017Learning multiple visual domains with residual adapterscited by 553
- 2019Release Strategies and the Social Impacts of Language Modelscited by 505
- 2023How Far Can Camels Go? Exploring the State of Instruction Tuning on Open Resourcescited by 405
- 2023The Reversal Curse: LLMs trained on "A is B" fail to learn "B is A"cited by 399
- 2021Learning How to Ask: Querying LMs with Mixtures of Soft Promptscited by 376
- 2023Orca: Progressive Learning from Complex Explanation Traces of GPT-4cited by 369
- 2020Parameter-Efficient Transfer Learning with Diff Pruningcited by 351
- 2023The Curse of Recursion: Training on Generated Data Makes Models Forgetcited by 343
- 2021ZeRO-Offload: Democratizing Billion-Scale Model Trainingcited by 339
- 2023Fine-Tuning Language Models with Just Forward Passescited by 337
- 2023Synthetic Data from Diffusion Models Improves ImageNet Classificationcited by 326
- 2023The False Promise of Imitating Proprietary LLMscited by 254
- 2023Self-Consuming Generative Models Go MADcited by 239
- 2022Branch-Train-Merge: Embarrassingly Parallel Training of Expert Language Modelscited by 187
- 2020Toward Trustworthy AI Development: Mechanisms for Supporting Verifiable Claimscited by 163
- 2021Raise a Child in Large Language Model: Towards Effective and Generalizable Fine-tuningcited by 145
- 2021Composable Sparse Fine-Tuning for Cross-Lingual Transfercited by 144
- 2020Federated Learning for Internet of Things: Recent Advances, Taxonomy, and Open Challengescited by 138
- 2023Emergent autonomous scientific research capabilities of large language modelscited by 127
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 95
- 2022Decentralized Training of Foundation Models in Heterogeneous Environmentscited by 87
- 2022Petals: Collaborative Inference and Fine-tuning of Large Modelscited by 84
- 2023Exploring the Benefits of Training Expert Language Models over Instruction Tuningcited by 80
- 2023The Gradient of Generative AI Release: Methods and Considerationscited by 63
- 2022X-Risk Analysis for AI Researchcited by 60
- 2023Scaling Expert Language Models with Unsupervised Domain Discoverycited by 59
- 2023SWARM Parallelism: Training Large Models Can Be Surprisingly Communication-Efficientcited by 58
- 20158-Bit Approximations for Parallelism in Deep Learningcited by 56
- 2022Self-Destructing Models: Increasing the Costs of Harmful Dual Uses of Foundation Modelscited by 56
- 2022Transcending Scaling Laws with 0.1% Extra Computecited by 55
- 2023Towards Understanding the Interplay of Generative Artificial Intelligence and the Internetcited by 54
- 2021Federated Learning Meets Natural Language Processing: A Surveycited by 42
- 2023Combining Generative Artificial Intelligence (AI) and the Internet: Heading towards Evolution or Degradation?cited by 41
50 most cited of 65 All 65 (JSON)
Built on by
Citing papers per year: 2024: 5; 2025: 2.
7 papers.
- 2024Representation Noising: A Defence Mechanism Against Harmful Finetuningcited by 93
- 2024Risks and Opportunities of Open-Source Generative AIcited by 11
- 2024Towards Data Governance of Frontier AI Modelscited by 3
- 2025Forecasting Open-Weight AI Model Growth on HuggingFacecited by 3
- 2024Countering Autonomous Cyber Threatscited by 1
- 2024Generative AI for Accessible and Inclusive Extended Realitycited by 0
- 2025Opening the Scope of Openness in AIcited by 0
- 2025Opening the Scope of Openness in AI9 May 2025
- 2025Forecasting Open-Weight AI Model Growth on HuggingFace21 Feb 2025
- 2024Towards Data Governance of Frontier AI Models5 Dec 2024
- 2024Generative AI for Accessible and Inclusive Extended Reality31 Oct 2024
- 2024Countering Autonomous Cyber Threats23 Oct 2024
- 2024Representation Noising: A Defence Mechanism Against Harmful Finetuning23 May 2024
- 2024Risks and Opportunities of Open-Source Generative AI14 May 2024