> Prefilling Kimi-K3's reasoning with the first 1% of tokens of Opus 4.8's reasoning moves its visible answer toward Opus's wording, even though the answer itself is never prefilled is this supportive evidence for the distillation accusations in the news?
Stealing Reasoning Traces from Proprietary LLM APIs
311–320 of 325 posts
Re: Stealing Reasoning Traces from Proprietary LLM APIs
#312Earlier quoted context omitted.
I love how some of the biggest advancements in llms came from the Chinese labs, yet people still jump to distillation being unreasonably effective. Distillation is very good at creating smaller models from large ones sure, but nothing to me indicates it is 'unreasonably effective' compared to all the other bells and whistles being iterated on
This article shows that when Kimi3's chain of thought is prefilled to match Opus's, the rest of the chain of thoughts Kimi3 outputs very closely aligns with Opus's. That seems strong evidence that Kimi3 is partly a distillation of Opus. And Kimi3 is not a small model. No doubt a lot of hard work went into Kimi, but seems clear that distillation was used effectively as well. (though maybe there's another interpretatio…
Re: Stealing Reasoning Traces from Proprietary LLM APIs
#313Re: Stealing Reasoning Traces from Proprietary LLM APIs
#314Re: Stealing Reasoning Traces from Proprietary LLM APIs
#315Earlier quoted context omitted.
If you didn’t allow it, you wouldn’t be able to change models in the same conversation, as key parts of the context would be lost. Wouldn’t surprise me if the providers just remove that ability and lock the model once the conversation starts.
I really don't understand why server-side storage of the trace isn't a viable approach here, with only a unique key flowing to the client and back. Does it have something to do with how backend load-balancing works?
The fix is to either have per-user or per-session keys for encrypting reasoning traces, or write the user ID / account ID and maybe also session ID into the plaintext of the reasoning trace _then check that that matches the ones in the HTTP cookies when decrypting the traces_.
Re: Stealing Reasoning Traces from Proprietary LLM APIs
#316Earlier quoted context omitted.
I agree with you in principle. I'm just pointing out that the latter is in some way another valid point of view.
Thinking tokens aren't free though. This is not a valid point of view. If I was being charged for the raw, output/input token count, excluding thinking/reasoning token costs, then sure. But at least via the API, you pay for tokens you cannot see.
Re: Stealing Reasoning Traces from Proprietary LLM APIs
#317Earlier quoted context omitted.
> If they charge by the token, all your tokens are belong to you I’m not sure this argument is correct. You can sign whatever contract you like with the model provider, right? Including “you are entitled to the end product but not the intermediate scratch work”? Coming from a place of genuine curiosity: is there some precedent or statute that would invalidate that contract? I don’t see why the reasoning tokens belong…
Sure, but the current one is charged per token in & token out. Not per completion / task / hour / whatever. You can't charge per token and then say "you stole that token". Again, they can unilaterally decide not to sell you tokens anymore, at any time, for any (legal) reason. But as it stands right now, it can't be stealing.
My understanding of US law is that there’s nothing in logic or precedent that makes such a contract unenforceable.
As for whether it’s “stealing”: they might be able to press charges under federal Trade Secret Theft laws, I’m not sure. But I’m not seeing how you can be so very very certain that it’s at best a civil violation of contract. What’s the reason for your confidence that a judge would never find this to be trade secret theft or economic espionage?
Re: Stealing Reasoning Traces from Proprietary LLM APIs
#318Earlier quoted context omitted.
Yes. Although, to be pedantic - stealing relocates (it doesn’t leave one less, it moves the only thing into another person’s possession), while copying duplicates. Copy vs move is IMHO accurate semantics.
i dont know what you're talking about: it's certainly one less for the victim! and if no theft occurred, nobody would be left with one less.