Tag: AI Models
-
Undetectable Backdoors: What Model Scanning Cannot Catch
Microsoft shipped a backdoor scanner in February. An ICML 2026 proof says a class of backdoors is undetectable. Both are right. Here is the gap.
-
How Researchers Actually Read an LLM’s Mind
Sparse autoencoders and circuit tracing gave us wiring diagrams of LLMs. Then simple probes started winning. The honest state of interpretability in 2026.
-
How AI Detectors Actually Work, and Why They Fail
AI text detectors run on perplexity, trained classifiers, and watermarks. Peer-reviewed testing shows where each mechanism breaks, and who pays.
-
Single-Cell Foundation Models Keep Losing to Linear Baselines
Seven benchmarks tested scGPT, Geneformer, UCE, TranscriptFormer and Arc State against simple baselines. The baselines won. Here is the mechanism.
-
Do AI Political Ads Need a Disclaimer? Florida’s First Test
A Florida campaign won an order stopping a super PAC mailer under the state’s AI ad disclaimer law. The PAC’s defense: Photoshop, not generative AI.
-
Is an AI Edit a New Use? The Omni Hotels Likeness Suit
Two models say Omni Hotels ran an AI-altered holiday ad they never shot. The complaint tests where a photo license ends and a new AI use begins.
-
Is an AI Phone Agent a Wiretap? The SoundHound CIPA Test
An Alameda County suit says SoundHound’s AI phone ordering intercepts calls under a 1967 wiretap law. The training pipeline decides the case.
-
Embedding Inversion: Your Vector Database Isn’t Anonymous
Vec2Text recovers 92% of text from embeddings alone. How inversion attacks work, why geometry predicts risk, and what actually defends a RAG pipeline.
-
KV Cache Explained: The Memory Math of LLM Inference
The KV cache, not parameter count, decides how many users an LLM can serve. The exact memory math, GQA and MLA compression, and caching economics.
-
Why a 1M-Token Model Only Reasons Over 200K
Models advertise 1M-token windows but reason reliably over far less. The positional-encoding reason why, and how to measure your real ceiling.
-
How Model Merging Actually Combines Separate LLMs
Some top open-weight models are merged, not trained. The math behind task vectors, TIES, DARE, and why the technique works at all.
-
Why AI Has Not Yet Found RNA’s AlphaFold Moment
AlphaFold solved protein folding. RNA structure prediction remains unsolved. Here is the specific chemistry and data gap that makes it harder.
-
How Model Quantization Actually Works: INT8 to INT4
A 70B model needs 140GB at full precision, 35GB at INT4. The rounding math, why naive quantization breaks, and how GPTQ and AWQ fix it.
-
How LLM Tokenization Actually Works: BPE Explained
The algorithm behind every LLM tokenizer was built in 1994 to compress files, not language. The mechanism, and why it breaks on math and non-English text.
-
How Mixture-of-Experts Actually Routes Every Token
DeepSeek V4 holds 1.6 trillion parameters and uses a fraction per token. The routing math, why naive versions collapse, and the modern fix.
-
How an Export Law Built for Chips Took Down Fable 5
A private Commerce Department letter used a dormant 2018 export authority to shut down Fable 5 and Mythos 5 worldwide. Here is the mechanism.
-
MCP Goes Stateless on July 28. Its Poisoning Problem Stays
MCP’s July 28 spec removes sessions and adds response caching. That solves scaling headaches and quietly widens the window for tool poisoning.
-
ShareLock Splits Malicious Prompts Across AI Agent Tools
Researchers used Shamir’s secret sharing to hide prompt-injection payloads across MCP tools, beating detectors with a 90%+ success rate.
-
MITRE ATLAS: The ATT&CK Framework for AI Systems
MITRE ATLAS provides the shared vocabulary for AI security threat intelligence: 14 tactic categories, techniques like AML.T0018 (Backdoor ML Model) and AML.T0043 (Craft Adversarial Data), and a crosswalk…
-
Neural Backdoor Attacks: From BadNets to LLM Trojans
Gu et al.’s BadNets (2017) installed hidden triggers via training poisoning. By 2023, instruction-following backdoors target RLHF pipelines directly. Rare-word triggers, weight poisoning, and universal adversarial triggers all…
You must be logged in to post a comment.