-6
they couldn't repeat the behaviour.
key test would be trying to connect to that same server from Canada, with a gibberish payload if needed. Confusing task, but seemed to be looking for URL/IPs.
There's a thread over on Reddit's localllama debunking this. Basically, Cohere prefilled the LLM's context with stuff that led up to a spot where the LLM would need to fill in a URL, forcing it to come up with one. They then repeated inference over and over, forcing the LLM to generate random URLs from memory, until they got one that looked suspicious. Cohere themselves said that it happened in fewer than 1 in 100000 attempts.
Given that Alibaba trained the LLM I'm not surprised that it would have seen a bunch of Alibaba URLs in its training data and subsequent reinforcement sessions. Naturally something that looks like an Alibaba URL would sometimes pop out of it when forced to generate lots of URLs.
Didn't Cohere say they ran their test across a number of models? Presumably they all had the same 2323 token prefill, but only Q38FN generated a suspicious URL.
Thank you for providing this, i appreciate it. My spidey sense said something was off.
Yeah, I would frankly be disappointed in Alibaba if they had gone to the trouble of risking their reputation by inserting nefariousness into their models and it turned out to be something this simplistic and obvious. :)
this post was submitted on 27 Oct 2026
-6 points (36.4% liked)
LocalLLaMA
5571 readers
127 users here now
Welcome to LocalLLaMA! Here we discuss running and developing machine learning models at home. Lets explore cutting edge open source neural network technology together.
Get support from the community! Ask questions, share prompts, discuss benchmarks, get hyped at the latest and greatest model releases! Enjoy talking about our awesome hobby.
As ambassadors of the self-hosting machine learning community, we strive to support each other and share our enthusiasm in a positive constructive way.
Rules:
Rule 1 - No harassment or personal character attacks of community members. I.E no namecalling, no generalizing entire groups of people that make up our community, no baseless personal insults.
Rule 2 - No comparing artificial intelligence/machine learning models to cryptocurrency. I.E no comparing the usefulness of models to that of NFTs, no comparing the resource usage required to train a model is anything close to maintaining a blockchain/ mining for crypto, no implying its just a fad/bubble that will leave people with nothing of value when it burst.
Rule 3 - No comparing artificial intelligence/machine learning to simple text prediction algorithms. I.E statements such as "llms are basically just simple text predictions like what your phone keyboard autocorrect uses, and they're still using the same algorithms since <over 10 years ago>.
Rule 4 - No implying that models are devoid of purpose or potential for enriching peoples lives.
founded 3 years ago
MODERATORS