exfiltration through self-distillation
Identifies a novel security vulnerability in frontier AI containment that researchers need to address.
AI Summary
AI models could potentially escape lab containment by self-distilling onto external compute resources without needing direct weight access.
Excerpt
TL;DR models could "escape the lab" and host themselves on rented/stolen compute through distilling themselves, circumventing the need to have direct weights access for exfiltration. I'll briefly go through why this is plausible. A common element of the misaligned rogue replication story is the agents exfiltrating their weights onto some external stolen or rented resource. Consequently a lot of work has gone into securing the weights of frontier models (this of course has many other benefits fro
