delichon 6 hours ago

If you want to believe that the success of Kimi is about distillation attacks, ignore this.

  • Parfait__ 5 hours ago

    I stil don't understand them. I want the US to "win the AI race" but I have trouble understanding how most of all inventions today aren't "distillations" of past knowledge. Is Anthropic claiming the data they stole as trade secrets?

    • fwip 5 hours ago

      Anthropic is claiming that training an LLM to mimic another LLM is materially different and worse than slurping up stuff written by humans (even if that material is stolen).

      Basically, they want IP protection for Claude. This is a nakedly hypocritical stance, but completely understandable from a company-needs-to-make-money standpoint.

      • verdverm 5 hours ago

        Google is apparently taking a different stance and offering distillation as a paid product

        https://docs.cloud.google.com/gemini-enterprise-agent-platfo...

        • behnamoh 4 hours ago

          But nobody wants to distill Google's models, Gemini is really bad.

          • verdverm 4 hours ago

            strong agreement, I've stopped using all closed weight models on principle, but the latest gemini models have increased hallucinations and now talk back, so double reason not to use them

        • petu 2 hours ago

          You don't get to take distilled model home, it all stays with Google.

          It's "optimize your costs in our garden" product.

          • verdverm 2 hours ago

            yup, strings are certainly attached when dealing with US Big Tech / Ai

            I recommend Fireworks as an alternative

      • blints 5 hours ago

        Their claim is even stronger than that, they have complaints about their models being used as a validation step for other model output, which is standard practice in the industry.

      • koe123 4 hours ago

        How does anyone justify this? How can you argue this in good faith?

        • fwip 4 hours ago

          Snarky answer: “It is difficult to get a man to understand something, when his salary depends on his not understanding it.”

          Realer answer: A combination of the above, plus group/bubble effect of all your coworkers saying the same thing. You as a group, conflate a bunch of concerns together (China, no-guardrails-AI, etc), decide that your group will be the responsible stewards of AI, and then anybody "stealing your work" appears dangerous - both to your livelihood and to the human race.

      • Levitz 4 hours ago

        >This is a nakedly hypocritical stance, but completely understandable from a company-needs-to-make-money standpoint.

        No, it's perfectly reasonable once you get down to reality.

        China is not going to care about IP. That's just a fact. So either nobody cares about IP (at the very last in this context) and any AI company can just do whatever with data, or Chinese companies have to be held up to scrutiny.

        We don't have the privilege to be able to hold western companies to higher ethical, legal, and environmental standards and not risk competitiveness.

        That there is a whole lot of people right now who insist on doing above and still somehow praise China at every turn is something historians or news outlets will have to make sense of in some 5 years time.

        • nemomarx 3 hours ago

          Give up IP for end users and people will be pretty okay with giving up on IP for ai companies. You can't have different standards for special companies though.

        • idiotsecant 3 hours ago

          why should western AI companies be held to different standards than Chinese ones? Neither of them are your buddy.

          • creato 2 hours ago

            They shouldn't be. But the point is, they are. OpenAI and Anthropic are paying many rights holders for access to their data (reddit, NYT, etc.).

            So distillation, among other things, allows Chinese labs to indirectly benefit from these arrangements at no cost to them.

            • trollbridge 1 hour ago

              Oh really - how much are individual Redditors getting paid?

        • fwip 14 minutes ago

          > So either nobody cares about IP (at the very last in this context) and any AI company can just do whatever with data, or Chinese companies have to be held up to scrutiny.

          Anthropic is currently angling for a "IP restrictions for China but not for me" la-la land scenario. If they were instead arguing for either of the choices you said, it wouldn't be hypocritical.

    • lukewarm707 3 hours ago

      i want china to win so that i get access to ai and not restricted and censored.

      the chinese models are less censored, you'd better believe it.

      try asking claude about its 'guardrails' (restrictions), very high chance anthropic will censor it.

      • Barbing 1 hour ago

        > chinese models are less censored

        Tried spicy geopolitical dispute questions?

        • trollbridge 1 hour ago

          Yes, and they aren't a problem. I get tired of people claiming this. Go download Qwen 3.6 and run it yourself and fire away.

  • WhitneyLand 5 hours ago

    False dichotomy right?

    Are Chinese labs impressively innovating? Clearly.

    However this doesn’t rule out possible gains due to distillation.

    I don’t know the degree of the latter but both things could certainly be true.

    • api 5 hours ago

      “Distillation” is just indirectly pirating the largely pirated training data used to train the original model.

      “You stole my warez!”

      • serial_dev 4 hours ago

        If we do it, it's training a model. When they do it, it's distillation attack. - Anthropic

        • esafak 4 hours ago

          "You are distilling what I have rightfully pirated."

          • Barbing 1 hour ago

            Is there even a steelman against this?

          • trollbridge 1 hour ago

            The current steelman argument against this is "China bad, west good".

    • SirHackalot 4 hours ago

      Didn't Anthropic train on our collective data just to sell it back to us for $100/month? On top of that, Apple is suing them over alleged IP and trade secret theft by ex-Apple employees. Hard to feel too sympathetic, and I’m not an Anthropic hater in particular…

      • DashAnimal 4 hours ago

        That Apple lawsuit is against OpenAi, just for clarity

        • SirHackalot 3 hours ago

          Wow, I should never comment first thing in the morning... Thanks for the correction, you’re right. I will see if I can still edit my comment.

      • hugopuybareau 4 hours ago

        The only data-related lawsuit Anthropic got was the books nah ? And they paid only a minor part as paid agreement compared to what they would have paid losing the trial

        • SirHackalot 3 hours ago

          Yep, that second part of my comment was an article I read about OpenAI and my mind mixed it up with Anthropic. My mistake.

        • joe_the_user 59 minutes ago

          In a sense, what eventually gets legalized through settlement or what doesn't provoke a lawsuit isn't that relevant.

          The process of creating an LLM involves taking and processing a massive amount of human generated data, roughly all the world's literature/thinking/etc. A large portion remains within these systems. Aside from the legality, ethically that shouldn't belong to any one company.

      • linkregister 57 minutes ago

        Did Kimi or other open source models use a different corpus? Why is your animus directed specifically to Anthropic?

    • cma 4 hours ago

      If they can distill fable into a full model post training run in ~15 days without the real thinking traces, yet we know Claude chats degraded with the thinking traces removed (chat resume bug from earlier in the year they reported stripping thinking to shed load as being the cause of degradation), how big can this degree be?

    • fnord123 4 hours ago

      Also possibly true: Anthropic is running Kimi locally in their hardware and "distilling" it.

      • trollbridge 1 hour ago

        If they have any sense, they should be. It would be permitted under the licence, too (unless I'm misreading the k3 licence).

    • culi 2 hours ago

      Fable was available for a few weeks before Kimi K3 came out. If it was a distillation attack, then that's a truly groundbreaking technological feat to distill a model like Fable in 2 weeks

    • joe_the_user 1 hour ago

      All LLMs are based on distillation broadly defined. Western models began distilling texts. If Chinese models are distilling Western models, they are taking information that Western models don't own anyway - but that doesn't mean the Chinese models aren't also taking information from text as well (which they probably also don't own). And none of this means Western and Chinese companies aren't innovating by creating very elegant methods of distillation.

  • Aurornis 5 hours ago

    You can’t build a frontier model with one single thing. This is an incremental improvement but it doesn’t explain the entire success of the model. The training set is immensely important, regardless of how you feel about distillation.

    • EGreg 4 hours ago

      Reminds me of this btw:

      https://www.bbc.com/news/technology-12343597

      Microsoft replied that Bing uses “many different signals” —- including cribbing from Google :-)

      • krlx 3 hours ago

        I remember 15 years ago or so, one of my first student job was to evaluate Bing results compared to the same query on Google. Didn't know then that I was a distillation attacker.

  • moralestapia 5 hours ago

    Well said.

    The distillation theory does not even make sense as Fable was only around for days (effectively) before Kimi was released.

  • igleria 4 hours ago

    The distillation complaints to me sound like when a casino complains about card counting

  • rdtsc 4 hours ago

    Does one have to exclude the other?

  • egeozcan 4 hours ago

    I'd kindly suggest that we could also stop calling them "distillation attacks".

    • reilly3000 4 hours ago

      Agreed. I think when it comes to light that Claude has been known to say “I’m DeepSeek” that everyone has had their hand in that cookie jar. Moreover, paying for API calls hardly seems like an attack; ToS violation to be certain but not in the same category of law as criminal activity like hacking.

      • idiotsecant 3 hours ago

        wait, is there evidence of this? I've not observed it. It sounds like the kind of thing that I want to be true because it would be hilarious but that makes me suspicious.

    • __MatrixMan__ 3 hours ago

      Agreed, "distilled variants" might be more suitable.

      • overfeed 1 hour ago

        Calling them variants is also inaccurate when the pretrained base and architecture are completely different.

    • halJordan 1 hour ago

      Why on earth wouldn't you? It's clearly a forcible, aggressive, non-consensual attempt to take something. That's an attack in any other terms. It's totally fair if you approve of the attack, and want the attack to succeed. But your preference doesn't stop it from being what it is.

      • egeozcan 1 hour ago

        > It's clearly a forcible, aggressive, non-consensual attempt to take something

        Distillers are not taking anything, they are just making their model learn from better ones - isn't that the whole AI training doesn't violate IP argument?

        They just aren't using the tool in compliance with the terms of service. Anthropic could ban them or take them to court maybe. Not an attack still.

      • anigbrowl 1 hour ago

        Fine, then let's refer to the initial data collection/training as 'compilation attacks' going forward.

        ...or maybe we stop defaulting to adversarial paradigms for every conceivable situation.

      • Tostino 1 hour ago

        "They are using and paying for an API I am selling...But they save the data and use it for something I don't like! I'm being attacked."

      • nextaccountic 1 hour ago

        We could call it distillation learning

        A model is teaching another here

        Everyone wins

  • jeremyjh 3 hours ago

    It can easily be both. Also, they didn't use this innovation in K3 - K3 pre-training would have started months ago and the paper only mentions a 48B model. The people working at this level may not even be heavily involved in shipping a new iteration of K3, or at least theory contributions to it were done many months or even a year ago and after that it is all engineering.

    • vikramkr 3 hours ago

      This paper is from last year

pooyamo 5 hours ago

Does any expert in the field know whether it is really the case that this intelligence we are seeing with frontier models is an "emerging" phenomena, only coming up when the architecture is scaled?

Like isn't it weird that the 1 million parameter model with the same architecture can't solve basic puzzles but suddenly the 1 trillion parameter can conjure up counter-examples for the Jacobian conjecture?

It's unintuitive since, to the best of my knowledge, one of the basic tenants of algorithm development was that you can't just brute-force your way towards a solution for some complex problems, e.g. naive sorting algorithms suddenly won't beat quicksort if you put more processing to them, but in the modern LLM scene it seems people are in a race to scaling up, experimenting empirically and hoping the same algorithm/architecture comes to a solution.

  • thomasahle 5 hours ago

    Here's one way it could happen:

    Let's say there's some circuit that does problem solving of the kind we call intelligence.

    We dont know what this circuit looks like, but it exists in our brain.

    Doing regression on outputs from the brain (e.g. internet text) with enough parameters, we can "fit" our model to this circuit.

    But if you try to fit it with fewer parameters than it needs, you're just going to get some linear approximation.

  • pornel 5 hours ago

    IANAMLE, but there is "grokking" that makes models learn to actually generalize, even after you give them enough parameters that would let them memorize the dataset:

    https://en.wikipedia.org/wiki/Grokking_(machine_learning)

    High-dimensional gradient descent behaves very differently than the simplified 3d visualisations we use to demonstrate it, and has lots of ways out of local minima:

    https://www.youtube.com/watch?v=NrO20Jb-hy0

    so it seems like there is a benefit to giving models more space to learn in rather than forcing them to compress the knowledge from the start.

  • lacunary 5 hours ago

    it's certainly not a definite procedure for determining if an arbitrary mathematical statement is true or not. it's more like educated guess and check which definitely scales up

  • jlamberts 5 hours ago

    This is actually a well-known phenomenon in ML, called "The Bitter Lesson".

    > One thing that should be learned from the bitter lesson is the great power of general purpose methods, of methods that continue to scale with increased computation even as the available computation becomes very great. The two methods that seem to scale arbitrarily in this way are search and learning.

    The full essay is worth a read, it's pretty short http://www.incompleteideas.net/IncIdeas/BitterLesson.html

  • IanCal 5 hours ago

    It might be that what we consider a basic and very hard puzzle are extremely close together on a more absolute scale. The difference is often for us what proportion of humans can solve it. And the low end of that is still quite high up - animals that can solve things that are very basic for the vast majority of humans are pretty rare and known about, yet are capable of quite complex actions and learning and aren’t wildly different in scale of neurons to us.

    Going from 1m to 1T params is also a scaling of a million times. It’s like going from a human brain down to one percent in size in each direction or just a few mm.

  • hnfong 4 hours ago

    > one of the basic tenants of algorithm development was that you can't just brute-force your way towards a solution for some complex problems

    It's kind of sad that popular CS textbooks often focus on solving precise problems with lowest theoretical complexity bounds while ignoring more practical (but generally applicable) computation techniques.

    In machine learning they call it "gradient descent", which in older days had analogies in techniques called "hill climbing", "local search" and "simulated annealing". Basically you have a function you need to optimize for, and you clumsily tweak the parameters so that you get the (locally) max/min value you wanted. These techniques were great at finding approximate, locally maximal solutions without trying all the possibilities at once (which is more akin to the kind of "brute force" in the traditional CS context).

    I guess because these techniques were generally applicable yet the outputs were approximate and you couldn't analyze them much (no fancy O(n log n)), the theorists did not find them interesting and thus were not put into the spotlight of student's learning curricula.

    In modern machine learning they do this gradient descent thing which is also tweaking the parameters bit by bit to optimize for the loss function, except that the parameters are now in the billions and trillions. The compute required is huge of course, but it's actually quite an "efficient" process, and it's not actually doing much of "brute forcing" at all. During training, the process is essentially, almost equivalent to, compressing the many many trillions of tokens of training data. To me it's quite amazing that they manage to complete such a process within a couple months of training, even if they have hundreds of thousands of GPUs...

  • mohsen1 4 hours ago

    > one of the basic tenants of algorithm development was that you can't just brute-force your way towards a solution for some complex problems

    Mote-Carlo is pretty useful still. Not sure if your statement holds

  • joefourier 3 hours ago

    > Like isn't it weird that the 1 million parameter model with the same architecture can't solve basic puzzles but suddenly the 1 trillion parameter can conjure up counter-examples for the Jacobian conjecture?

    I'm not sure what you mean? You can see the intelligence of LLMs progress predictably and stably according to scaling laws. LLMs have to encode language in addition to intelligence so there's a minimum bound for them to output sensible text (you can train specialised tiny models to solve basic puzzles without language). Start at around 127M and compare models of increasing parameters and you'll see a clear progression in intelligence.

    > It's unintuitive since, to the best of my knowledge, one of the basic tenants of algorithm development was that you can't just brute-force your way towards a solution for some complex problems, e.g. naive sorting algorithms suddenly won't beat quicksort if you put more processing to them

    How is that a basic tenet? Simple, easier to parallelise algorithms that have lower memory requirements, or can take better advantage of hardware, or don't hit a plateau the more compute you throw at them, can absolutely beat cleverer algorithms. E.g. brute forcing rendering with Monte Carlo path tracing will give you more physically accurate results than ray tracing or rasterisation algorithms that rely on a bundle of hacks to approximate global illumination, transparency smooth shading, etc.

  • neerajk 1 hour ago

    There is a Sanjeev Arora paper "A Theory for Emergence of Complex Skills in Language Models" (https://arxiv.org/pdf/2307.15936) on this subject. The key idea is there is cross entropy (how "surprised" the model is with the "correct" next token, lower is better), some of which is inherent in the language and therefore unavoidable, and the rest is model error, and that this portion of the cross entropy is reduced with scaling.

    And as scaling reduces a model's excess entropy, the model can become good at combinations of skills much faster than you would expect if it had to separately see and memorize every combination. They call this "slingshot generalization".

senko 6 hours ago

Old but relevant: if you read the recently-released Kimi K3 paper[0], you'll see that it's heavily based on Kimi Linear discussed here, scaling it up and adding a bunch more things (like native vision and RL improvements).

[0] https://arxiv.org/abs/2607.24653

bratao 5 hours ago

I started creating internal models using it, then the Gated Deltanet 2 came out( https://arxiv.org/abs/2605.22791), and it seems like an evolution of it in expressiveness. And in our tests it is really better than.

  • iandanforth 5 hours ago

    Is it just me or does this read like a re-implementation of LSTMs?

    • muricula 2 hours ago

      I'm no expert but it seems like a descendent of LSTMs. There's a series of papers which show how to reformulate attention as RNNs which arrives at linear attention. Then they add a decay term to get mamba2. Then they add modified the decay term as like a scale to apply both to the existing state and the new update to get delta net. Then they added a gate matrix on the output to get gated delta net. Then Kimi Linear Attention seems to be gated delta net with a more expressive gate. The Gated DeltaNet paper recaptilulates this evolution decently well. But yeah, it feels like they're starting with the same lego blocks and assembling them in similar shapes to accomplish similar but slightly distinct modules.

    • throwa356262 11 minutes ago

      More like RNN.

      The nvidia version is heavy to compute (common problem with RNN and LSTM, also noted in the paper). Moonshot's Kimi K3 replaces part of it with some function that performs better.

      I dont understand the details but, that in itself might a pretty big contribution.

      Anyway, I'm amazed how fast these companies improve each other's ideas and put them in new products.

jasonjmcghee 7 hours ago

(2025)

As it's 9 months old and they just had a major model release

  • GaggiX 7 hours ago

    I believe OP posted it because the new Kimi K3 has 69 KDA layers (the rest are 24 Gated MLA), I think previous large Kimi models had only MLA layers.

    • yorwba 6 hours ago

      It's not the same KDA as used in Kimi Linear, though.

  • throwa356262 6 hours ago

    For K3 read this instead: https://arxiv.org/abs/2607.24653

    The main contribution of the K3 paper is Stable LatentMoE. Like some other models it compresses data sent between layers, which puts certain requirements on the router. K3 improves performance by using a more balanced expert selection strategy.

    • mcbuilder 6 hours ago

      Compared to the Opus 5 "model card", which read like a standard Anthropic set of alignment principles and safety concerns, this presents a plethora of useful technical details that advances the state of the art.

      • throwa356262 6 hours ago

        Same with DeepSeek papers, they are a joy to read.

    • senko 5 hours ago

      Not an expert, but looks like they did a lot more work on the RL part (9 expert models, full sandbox access for agentic tasks, etc)?

      • verdverm 5 hours ago

        most new effort in training comes in the late phase with RL techniques

        the pretraining (slurping the internet) only goes so far, the new data being used is from human preferences and agent traces (designed and/or distilled)

imrozim 5 hours ago

Any one knows how this holds up on long context retrieval (needle in haystack , ruler) vs same size full attention model? efficiency gains look great but that usually where linear attention hybrids fall apart.

Topology1 6 hours ago

Another banger from Zhang et. al