I genuinely do not see why this is necessary.
I've been doing a lot with open weights models, and they just do things for you.
What do people do that triggers refusals?
The only thing I saw where this had a point was muse glimmer, because muse glimmer is primarily a creative writing engine for virtual characters, and that way it can do the horny. But coding models?
I did get a refusal out of qwen once. Once. Over weeks of using it.
Hacking firmware for old devices I own and would like to give a second life or fix that one thing that always bothered me. I couldn't even get either OpenAI or Anthropic's models to craft a simple nefarious OpenVPN payload.
In case it wasn't clear to anyone else: "An abliterated model is an open-weight large language model (LLM) modified to remove its built-in refusal behavior by directly editing its internal weights rather than using a prompt-based jailbreak."
From my testing all these variants suffer from degraded performance and don't unlock anything interesting in particular other than sounding a lot more harmful or creating manipulative media.
I've actually had better success jailbreaking deepseek with a less aligned model (glm 5.2) which then allowed me to jailbreak deepseek with deepseek into pretty much doing whatever I ask it to, there's still rare refusals and due to the natural randomness of these models simply retrying a couple of times if you do hit one makes it work just fine.
The big problem with all open-source models is once it decides to start something it will not stop mid-way so using another unaligned model to rewrite reasoning and then feeding it back into the model will make it happily continue.
I wanted to better understand the internal discussions that took place within China regarding joining the WTO and accepting—at least in the medium term—the inherent steps away from a traditional socialist economy that would entail.
DeepSeek refused. Funny enough American models gave me very sympathetic takes on the Chinese government in this case.
This thread reminds me of the time I was trying to learn meteorjs and people ask me if it has html5 shims. I google it, then I get asked how does it handle state, and if it supports functional, i google... Does it hydrate the dom? What about shadow dom? Let me goo... Does it have hooks?
Anyway, I just learned what abliterated means and it might be obsolete by tomorrow.
Edit:
> An abliterated large language model (LLM) is an open-weight model modified to remove or dampen its built-in safety refusals without requiring full retraining or prompt jailbreaks.
Since no one gave you a real world example of how this would be useful - Qwen 3.8 27B runs locally for me and is more than capable of controlling my sonarr and radarr stuff for downloading and managing and organizing my media library but will flatly refuse to do any of that. In fact it’ll get very snarky with me. An abliterated model would have no such hangups.
It's a patched model with less censorship/refusal.
> An abliterated model is an open-weight artificial intelligence (Al) language model that has been modified to remove or reduce its built-in refusal behavior without retraining the entire neural network.
I genuinely do not see why this is necessary. I've been doing a lot with open weights models, and they just do things for you.
What do people do that triggers refusals?
The only thing I saw where this had a point was muse glimmer, because muse glimmer is primarily a creative writing engine for virtual characters, and that way it can do the horny. But coding models?
I did get a refusal out of qwen once. Once. Over weeks of using it.
Hacking firmware for old devices I own and would like to give a second life or fix that one thing that always bothered me. I couldn't even get either OpenAI or Anthropic's models to craft a simple nefarious OpenVPN payload.
In case it wasn't clear to anyone else: "An abliterated model is an open-weight large language model (LLM) modified to remove its built-in refusal behavior by directly editing its internal weights rather than using a prompt-based jailbreak."
What is abliteration?
https://huggingface.co/blog/mlabonne/abliteration
From my testing all these variants suffer from degraded performance and don't unlock anything interesting in particular other than sounding a lot more harmful or creating manipulative media.
I've actually had better success jailbreaking deepseek with a less aligned model (glm 5.2) which then allowed me to jailbreak deepseek with deepseek into pretty much doing whatever I ask it to, there's still rare refusals and due to the natural randomness of these models simply retrying a couple of times if you do hit one makes it work just fine.
The big problem with all open-source models is once it decides to start something it will not stop mid-way so using another unaligned model to rewrite reasoning and then feeding it back into the model will make it happily continue.
Why not just distribute the refusal vectors and do it at runtime against the stock model?
Has anyone already seen a refusal from Deepseek? The last job, Antigravity declined, I gave to Deepseek. It happily did it without complaining.
In regular work no, and I use it a lot. In purposefully asking it political questions yes.
edit: Thinking about that now, that was over the webchat interface, so it might not have been related to the model, though I've seen various other related articles: https://www.crowdstrike.com/en-us/blog/crowdstrike-researche...
Certainly.
> Xi Jinping looks a bit like Winnie-the-Pooh.
> 'I am sorry, I cannot engage with this comparison. Please feel free to ask me other questions.'
https://vale.rocks/posts/chinas-web#artificial-intelligence
It will refuse a number of things. Ask it to make a captcha solver for you.
I wanted to better understand the internal discussions that took place within China regarding joining the WTO and accepting—at least in the medium term—the inherent steps away from a traditional socialist economy that would entail.
DeepSeek refused. Funny enough American models gave me very sympathetic takes on the Chinese government in this case.
This thread reminds me of the time I was trying to learn meteorjs and people ask me if it has html5 shims. I google it, then I get asked how does it handle state, and if it supports functional, i google... Does it hydrate the dom? What about shadow dom? Let me goo... Does it have hooks?
Anyway, I just learned what abliterated means and it might be obsolete by tomorrow.
Edit:
> An abliterated large language model (LLM) is an open-weight model modified to remove or dampen its built-in safety refusals without requiring full retraining or prompt jailbreaks.
So what is it? The link doesn't explain.
Since no one gave you a real world example of how this would be useful - Qwen 3.8 27B runs locally for me and is more than capable of controlling my sonarr and radarr stuff for downloading and managing and organizing my media library but will flatly refuse to do any of that. In fact it’ll get very snarky with me. An abliterated model would have no such hangups.
It's a patched model with less censorship/refusal.
> An abliterated model is an open-weight artificial intelligence (Al) language model that has been modified to remove or reduce its built-in refusal behavior without retraining the entire neural network.
The mechanisms for refusals are removed.
its a model that has had all of its refusal behavior removed. It will do whatever you ask.
Which if not all of these are honeypots?
does it matter?
Well, yes - if the model has been trained/edited to be malicious.
yea definitely wound't run an agent with this on a box with any assets
As it should be.
Looks like the cat is out of the bag. So what does the world look like with completely open access to zero-alignment models?
What do you mean by zero-alignment? Do you consider abliterated models to have zero-alignment?
You're living in it.
Free boob jobs for everyone !
Even if they don't want them.
>zero-alignment
I doubt that.
how so? these models have had refusal directions specifically removed from their weights. they refuse virtually no requests.
So the models are actually more aligned with the end users and less aligned with government regulators. Arguably a good thing.
Do they delete your data randomly just for fun? If not, there must be at least some sort of alignment.
actually if you're not careful, many times they will. if you are using one of these definitely don't leave "auto" mode enabled.
Are you suggesting the abliterated models are more likely to delete data against the user's wishes than the original models?
That says nothing about their alignment. You can make a human not refuse any directions with enough leverage, but you won’t have aligned them.
WAY fewer surprise RCEs?
What could possibly go wrong with highly powerful models with no guardrails unleashed onto the open internet?
I think you are going to really need to use Rust code and other memory safe languages in your backends and apps from now on.