When Bad Data Leads to Good Models
Not on the map. Why?
Abstract (arXiv)
In large language model (LLM) pretraining, data quality is believed to determine model quality. In this paper, we re-examine the notion of "quality" from the perspective of pre- and post-training co-design. Specifically, we explore the possibility that pre-training on more toxic data can lead to better control in post-training, ultimately decreasing a model's output toxicity. First, we use a toy experiment to study how data composition affects the geometry of features in the representation space. Next, through controlled experiments with Olmo-1B models trained on varying ratios of clean and toxic data, we find that the concept of toxicity enjoys a less entangled linear representation as the proportion of toxic data increases. Furthermore, we show that although toxic data increases the generational toxicity of the base model, it also makes the toxicity easier to remove. Evaluations on Toxigen and Real Toxicity Prompts demonstrate that models trained on toxic data achieve a better trade-off between reducing generational toxicity and preserving general capabilities when detoxifying techniques such as inference-time intervention (ITI) are applied. Our findings suggest that, with post-training taken into account, bad data may lead to good models.
Key facts. Cited by 11 papers in the map (data through 7 Oct 2026). First posted on arXiv 7 May 2025.
Builds on
0 of 0 references.
No references here yet.
Built on by
Citing papers per year: 2025: 2; 2026: 9.
11 papers.
- 2025Persona Features Control Emergent Misalignmentcited by 76
- 2026Shaping capabilities with token-level data filteringcited by 11
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMscited by 8
- 2026A Bitter Lesson for Data Filteringcited by 7
- 2026Understanding Emergent Misalignment via Feature Superposition Geometrycited by 6
- 2026When Should We Introduce Safety Interventions During Pretraining?cited by 5
- 2026Position: Capability Control Should be a Separate Goal From Alignmentcited by 2
- 2026Modular Pretraining Enables Access Controlcited by 1
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMscited by 1
- 2026Making the Most of Limited Data: Score-Aware Training for Text-to-Music Generationcited by 0
- 2026Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflectioncited by 0
- 2026Mark, Don't Erase: Token Inoculation for Dual-Use Knowledge in LLMs21 Jul 2026
- 2026Modular Pretraining Enables Access Control9 Jul 2026
- 2026Beyond Safe Data: Pretraining-Stage Alignment with Regular Safety Reflection17 Jun 2026
- 2026Making the Most of Limited Data: Score-Aware Training for Text-to-Music Generation5 Jun 2026
- 2026A Bitter Lesson for Data Filtering19 May 2026
- 2026Understanding Emergent Misalignment via Feature Superposition Geometry7 Apr 2026
- 2026Position: Capability Control Should be a Separate Goal From Alignment5 Feb 2026
- 2026Shaping capabilities with token-level data filtering29 Jan 2026
- 2026When Should We Introduce Safety Interventions During Pretraining?11 Jan 2026
- 2025Beyond Data Filtering: Knowledge Localization for Capability Removal in LLMs5 Dec 2025
- 2025Persona Features Control Emergent Misalignment24 Jun 2025