Final logits are far from a minimal information bottleneck, paper warns

sineadwilliamso · x · 2026-10-07

The thread stresses direct implications for privacy, fairness, distillation, and interpretability: a model's final logits are far from a minimal information bottleneck. Combined with earlier findings, just the top-20 logits exposed by APIs suffice to recover unqueried attributes with as few as 100 queries.

Related event: Study: VLM top-k logits leak far more task-irrelevant image information than expected(8 posts)→

Original post →

More from Safety

Safety channel →