Position: It's Time to Act on the Risk of Efficient Personalized Text Generation
Not on the map. Why?
Abstract (arXiv)
The recent surge in high-quality open-source Generative AI text models (colloquially: LLMs), as well as efficient finetuning techniques, have opened the possibility of creating high-quality personalized models that generate text attuned to a specific individual's needs and are capable of credibly imitating their writing style by refining an open-source model with that person's own data. The technology to create such models is accessible to private individuals, and training and running such models can be done cheaply on consumer-grade hardware. While these advancements are a huge gain for usability and privacy, this position paper argues that the practical feasibility of impersonating specific individuals also introduces novel safety risks. For instance, this technology enables the creation of phishing emails or fraudulent social media accounts, based on small amounts of publicly available text, or by the individuals themselves to escape AI text detection. We further argue that these risks are complementary to - and distinct from - the much-discussed risks of other impersonation attacks such as image, voice, or video deepfakes, and are not adequately addressed by the larger research community, or the current generation of open- and closed-source models.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 26 of its 41 references that are in the map. First posted on arXiv 10 Feb 2025.
Builds on
26 of 41 references.
References · 26
- 2023GPT-4 Technical Reportcited by 18,396
- 2015Distilling the Knowledge in a Neural Networkcited by 10,324
- 2023QLoRA: Efficient Finetuning of Quantized LLMscited by 3,418
- 2022GPTQ: Accurate Post-Training Quantization for Generative Pre-trained Transformerscited by 1,919
- 2024Phi-3 Technical Report: A Highly Capable Language Model Locally on Your Phonecited by 1,917
- 2023Fine-tuning Aligned Language Models Compromises Safety, Even When Users Do Not Intend To!cited by 1,154
- 2023SparseGPT: Massive Language Models Can Be Accurately Pruned in One-Shotcited by 1,121
- 2023Textbooks Are All You Needcited by 569
- 2021MAUVE: Measuring the Gap Between Neural Text and Human Text using Divergence Frontierscited by 470
- 2024GaLore: Memory-Efficient LLM Training by Gradient Low-Rank Projectioncited by 463
- 2023LaMP: When Large Language Models Meet Personalizationcited by 437
- 2021I-BERT: Integer-only BERT Quantizationcited by 255
14 more
- 2024Assessing the Brittleness of Safety Alignment via Pruning and Low-Rank Modificationscited by 231
- 2023Self-Alignment with Instruction Backtranslationcited by 151
- 2023Frontier AI Regulation: Managing Emerging Risks to Public Safetycited by 98
- 2024LongLaMP: A Benchmark for Personalized Long-form Text Generationcited by 97
- 2024Democratizing Large Language Models via Personalized Parameter-Efficient Fine-tuningcited by 90
- 2024RoSA: Accurate Parameter-Efficient Fine-Tuning via Robust Adaptationcited by 48
- 2024Fish-Speech: Leveraging Large Language Models for Advanced Multilingual Text-to-Speech Synthesiscited by 48
- 2024Model Equality Testing: Which Model Is This API Serving?cited by 47
- 2023Digital Deception: Generative Artificial Intelligence in Social Engineering and Phishingcited by 27
- 2023Decoding the Threat Landscape : ChatGPT, FraudGPT, and WormGPT in Social Engineering Attackscited by 23
- 2023Protecting Society from AI Misuse: When are Restrictions on Capabilities Warranted?cited by 16
- 2024Recovering the Pre-Fine-Tuning Weights of Generative Modelscited by 16
- 2024Which Model Generated This Image? A Model-Agnostic Approach for Origin Attributioncited by 16
- 2024Decoding the AI Pen: Techniques and Challenges in Detecting AI-Generated Textcited by 14
Built on by
Citing papers per year: 2025: 1.
1 paper.