← Search

Daphne Ippolito

25 accepted papers

2026

A Fictional Q&A Dataset for Studying Memorization and Knowledge Acquisition

ICLR 2026poster

When language models are trained on textual data, they acquire both knowledge about the structure of language as well as knowledge of facts about the world. At inference time, their knowledge of facts can be leveraged to solve interesting problems and perform useful knowledge work for users. It is w…

Cited by 0SourcecodeScholar
2026

Command-V: Training-Free Representation Finetuning Transfer

ICLR 2026poster

Retrofitting large language models (LLMs) with new behaviors typically requires full finetuning or distillation—costly steps that must be repeated for every architecture. In this work, we introduce ⌘V (Command-V), a backpropagation-free behavior transfer method that copies an existing residual repre…

Cited by 0SourcecodeScholar
2025

CIE: Controlling Language Model Text Generations Using Continuous Signals

EMNLP 2025

Aligning language models (LMs) with user intent is becoming increasingly relevant to enhance user experience.This calls for designing methods that can allow users to control the properties of the language that LMs generate, for example, controlling the length of the generation or the complexity of t

2025

Exploring and Mitigating Adversarial Manipulation of Voting-Based Leaderboards

ICML 2025oral

It is now common to evaluate Large Language Models (LLMs) by having humans manually vote to evaluate model outputs, in contrast to typical benchmarks that evaluate knowledge or skill at some particular task. Chatbot Arena, the most popular benchmark of this type, ranks models by asking users to sele…

Cited by 4SourcePDFScholar
2025

Global MMLU: Understanding and Addressing Cultural and Linguistic Biases in Multilingual Evaluation

ACL 2025long

Reliable multilingual evaluation is difficult, and culturally appropriate evaluation is even harder to achieve.A common practice to fill this gap is to machine-translate English evaluation sets. However, translation introduces language bias and carries over cultural and regional assumptions from the…

Cited by 0SourcePDFScholar
2025

Human-Aligned Chess With a Bit of Search

ICLR 2025poster

Chess has long been a testbed for AI's quest to match human intelligence, and in recent years, chess AI systems have surpassed the strongest humans at the game. However, these systems are *not human-aligned*; they are unable to match the skill levels of all human partners or model human-like behavio…

2025

Measuring Non-Adversarial Reproduction of Training Data in Large Language Models

ICLR 2025poster

Large language models memorize parts of their training data. Memorizing short snippets and facts is required to answer questions about the world and to be fluent in any language. But models have also been shown to reproduce long verbatim sequences of memorized text when prompted by a motivated adver…

Cited by 2SourcePDFScholar
2025

Persistent Pre-training Poisoning of LLMs

ICLR 2025poster

Large language models are pre-trained on uncurated text datasets consisting of trillions of tokens scraped from the Web. Prior work has shown that: (1) web-scraped pre-training datasets can be practically poisoned by malicious actors; and (2) adversaries can compromise language models after poisonin…

Cited by 3SourcePDFScholar
2025

Scalable Extraction of Training Data from Aligned, Production Language Models

ICLR 2025poster

Large language models are prone to *memorizing* some of their training data. Memorized (and possibly sensitive) samples can then be extracted at generation time by adversarial or benign users. There is hope that *model alignment*---a standard training process that tunes a model to harmlessly follow…

Cited by 9SourcePDFScholar
2024

A Pretrainer’s Guide to Training Data: Measuring the Effects of Data Age, Domain Coverage, Quality, & Toxicity

NAACL 2024long

Pretraining data design is critically under-documented and often guided by empirically unsupported intuitions. We pretrain models on data curated (1) at different collection times, (2) with varying toxicity and quality filters, and (3) with different domain compositions. First, we find that temporal…

2024

CAVA: A Tool for Cultural Alignment Visualization & Analysis

EMNLP 2024system demonstrations

It is well-known that language models are biased; they have patchy knowledge of countries and cultures that are poorly represented in their training data. We introduce CAVA, a visualization tool for identifying and analyzing country-specific biases in language models.Our tool allows users to identif…

2024

Consent in Crisis: The Rapid Decline of the AI Data Commons

NeurIPS 2024poster

General-purpose artificial intelligence (AI) systems are built on massive swathes of public web data, assembled into corpora such as C4, RefinedWeb, and Dolma. To our knowledge, we conduct the first, large-scale, longitudinal audit of the consent protocols for the web domains underlying AI training…

Cited by 36SourceScholar
2024

RAID: A Shared Benchmark for Robust Evaluation of Machine-Generated Text Detectors

ACL 2024long

Many commercial and open-source models claim to detect machine-generated text with extremely high accuracy (99% or more). However, very few of these detectors are evaluated on shared benchmark datasets and even when they are, the datasets used for evaluation are insufficiently challenging—lacking va…

2023

Are aligned neural networks adversarially aligned?

NeurIPS 2023poster

Large language models are now tuned to align with the goals of their creators, namely to be "helpful and harmless." These models should respond helpfully to user questions, but refuse to answer requests that could cause harm. However, adversarial users can construct inputs which circumvent attempts…

Cited by 312SourcePDFScholar
2023

Counterfactual Memorization in Neural Language Models

NeurIPS 2023spotlight

Modern neural language models that are widely used in various NLP tasks risk memorizing sensitive information from their training data. Understanding this memorization is important in real world applications and also from a learning-theoretical perspective. An open question in previous studies of la…

Cited by 172SourcePDFScholar
2023

Measuring Forgetting of Memorized Training Examples

ICLR 2023poster

Machine learning models exhibit two seemingly contradictory phenomena: training data memorization and various forms of forgetting. In memorization, models overfit specific training examples and become susceptible to privacy attacks. In forgetting, examples which appeared early in training are forgot…

Cited by 112SourcePDFScholar
2023

Quantifying Memorization Across Neural Language Models

ICLR 2023top-25%

Large language models (LMs) have been shown to memorize parts of their training data, and when prompted appropriately, they will emit the memorized training data verbatim. This is undesirable because memorization violates privacy (exposing user data), degrades utility (repeated easy-to-memorize text…

Cited by 776SourcePDFScholar
2023

Real or Fake Text?: Investigating Human Ability to Detect Boundaries between Human-Written and Machine-Generated Text

AAAI 2023technical

As text generated by large language models proliferates, it becomes vital to understand how humans engage with such text, and whether or not they are able to detect when the text they are reading did not originate with a human writer. Prior work on human detection of generated text focuses on the ca…

2022

A Recipe for Arbitrary Text Style Transfer with Large Language Models

ACL 2022short

In this paper, we leverage large language models (LLMs) to perform zero-shot text style transfer. We present a prompting method that we call augmented zero-shot learning, which frames style transfer as a sentence rewriting task and requires only a natural language instruction, without model fine-tun…

Cited by 186SourcePDFScholar
2022

Deduplicating Training Data Makes Language Models Better

ACL 2022long

We find that existing language modeling datasets contain many near-duplicate examples and long repetitive substrings. As a result, over 1% of the unprompted output of language models trained on these datasets is copied verbatim from the training data. We develop two tools that allow us to deduplicat…

2022

Dungeons and Dragons as a Dialog Challenge for Artificial Intelligence

EMNLP 2022main

AI researchers have posited Dungeons and Dragons (D&D) as a challenge problem to test systems on various language-related capabilities. In this paper, we frame D&D specifically as a dialogue system challenge, where the tasks are to both generate the next conversational turn in the game and predict t…

Cited by 48SourcePDFScholar
2022

The Case for a Single Model that can Both Generate Continuations and Fill-in-the-Blank

NAACL 2022findings

The task of inserting text into a specified position in a passage, known as fill in the blank (FitB), is useful for a variety of applications where writers interact with a natural language generation (NLG) system to craft text. While previous work has tackled this problem with models trained specifi…

Cited by 3SourcePDFScholar
2021

SynthBio: A Case Study in Faster Curation of Text Datasets

NeurIPS 2021poster

NLP researchers need more, higher-quality text datasets. Human-labeled datasets are expensive to collect, while datasets collected via automatic retrieval from the web such as WikiBio [Lebret 2016] are noisy and can include undesired biases. Moreover, data sourced from the web is often included in d…

Cited by 14SourceScholar
2018

Understanding image motion with group representations

ICLR 2018poster

Motion is an important signal for agents in dynamic environments, but learning to represent motion from unlabeled video is a difficult and underconstrained problem. We propose a model of motion based on elementary group properties of transformations and use it to train a representation of image moti…

Cited by 5SourcePDFScholar