Past: 👨‍🔬 RS DeepMind 2y, Midjourney 1y 🧑‍🎓 DPhil AIMS 4.5y 🧙‍♂️ RE DeepMind 1y 📺 SWE Google 3y 🎓 TUM 👤 @nwspk

Oxford, England
Ever wondered why presenting more facts can sometimes *worsen* disagreements, even among rational people? 🤔 It turns out, Bayesian reasoning has some surprising answers - no cognitive biases needed! Let's explore this fascinating paradox quickly ☺️
22
72
392
147,113
I think acquiring compute is a great strategy atm
Heard from a neolab friend: “Even if we fail to train the best model, we locked in GPU capacity early. H100/B200/B300 rental prices have since gone up 2–3x. We can just resell the compute and print money.” OK, so that’s the business model.
2
10
487
Andreas Kirsch 🇺🇦 retweeted
Tinker's new StableReinforce objective is Reinforce + Score Centering. Here's how I reverse-engineered it 🧵
Off-policy RL is difficult; runs can suddenly collapse because of async RL staleness or numerical mismatch. StableReinforce is a new method on Tinker that keeps your RL runs stable, even when learning drifts from sampling. tinker-docs.thinkingmachines…
13
41
435
34,167
Andreas Kirsch 🇺🇦 retweeted
🥐 Hi everyone! FlashAttention's backward pass has the same zero-sum bug @jon_barron just fixed in softmax. With FP4 stochastic rounding it's wrong on every single draw. We fixed it in our ICLR'27 submission, CroissAttn and unlock e2e FP4 training.
Hi all, I have a new result I'm excited to share. It turns out that *all existing implementations* of softmax and cross-entropy (that's JAX, PyTorch, textbooks, etc) have a subtle bug --- two bugs, actually. A simple rewrite fixes both, and eliminates "slingshots" when grokking:
10
57
575
29,913
Andreas Kirsch 🇺🇦 retweeted
The non-disparagement clauses in Google's UK employment contracts are indeed incredibly broad. This is from the Confidentiality and Proprietary Information Agreement I signed in 2024 before I started. It forbids any criticism forever (regardless if it's true or not)
1
9
219
21,317
Andreas Kirsch 🇺🇦 retweeted
A first (short & compute-constrained) research project after leaving Google DeepMind: an LSTM-style tied transformer with one shared core KV cache The main question is how to train for the cache histories that the model produces recursively at inference
5
17
114
7,952
Really cool (and surprising) that there are still so many ways in which we can improve "basic" operations in ML 👏👏👏
Hi all, I have a new result I'm excited to share. It turns out that *all existing implementations* of softmax and cross-entropy (that's JAX, PyTorch, textbooks, etc) have a subtle bug --- two bugs, actually. A simple rewrite fixes both, and eliminates "slingshots" when grokking:
2
8
59
6,164
Kimi should have called it 3.5 Pro 🥶
Kimi K3.1 Pro launches at 4th on the Artificial Analysis Intelligence Index scoring 55, making large gains in agentic performance; it will be the leading open-weights model once its weights are published @Kimi_Moonshot's new reasoning model gains 11 points over Kimi K3 (max, 44). It trails only Claude Opus 5.5 (max with fallback, 58), Claude Sonnet 5.5 (max with fallback, 56), and Muse Wonder Full (max, 56) on the Intelligence Index. Once the weights for K3.1 Pro are released it will be the highest-scoring open weights model and the gap between the leading open weights and proprietary models on the Intelligence Index will narrow from 12 points to 3. Key results: ➤ Large gains in agentic performance: Kimi K3.1 Pro scores 3rd on GDPval-AA with 1,846 Elo, up 312 Elo from Kimi K3, behind only Claude Opus 5.5 (1,866 Elo) and Muse Wonder Full (1,857 Elo). Kimi K3.1 Pro also achieves the highest score of any model on Terminal-Bench 4.0. K3.1 Pro scores 67%, up from 13% for Kimi K3 and ahead of Claude Sonnet 5.5 (64%). AutomationBench-AA, which tests agentic SaaS workflows, rises from 58% to 73%. ➤ Gains in other evals are more moderate: Humanity's Last Exam rises from 47% to 52%, CritPt from 23% to 25%, and SciCode from 59% to 61%. AA-Omniscience Index rises from 20 to 30, as the hallucination rate falls from 53% to 44% and accuracy rises from 48% to 51%. ➤ Cost per Task roughly equal to Kimi K3 at $1.98 per Task: K3.1 Pro uses 55K output tokens per Intelligence Index task, 14% more than Kimi K3 at 48K, while its first-party token prices are 33% lower. Additional model details: ➤ Context window: 1M tokens. ➤ Size: 2.8T total, 104B active parameters ➤ Input modalities: Text and image ➤ Weights and license: Weights currently not published, Moonshot is expected to release the weights soon after launch ➤ Pricing: $2/$10/$0.20 per 1M input/output/cache hit tokens, 33% lower than Kimi K3 on all three rates. Congratulations to the team at @Kimi_Moonshot on the release!
2
19
1,908
I think people should be more outraged about this It seems Google saw the Right to Warn letter about AI and the congressional investigation into OpenAI's practices and simply shrugged it off without changes Why should anyone have any trust and confidence in Google in the future? The stakes for AGI and ASI are too high and the question is: how bad was the chilling effect, and what else is there that we don't know about?
Lifetime contracts barring any criticism of Google. Isn't this the thing people were totally outraged and in total disbelief that OpenAI was doing to its staff?
2
4
57
2,234
Andreas Kirsch 🇺🇦 retweeted
Based on this article, OpenAI has made false accusations about me. The three researchers fired from OpenAI were told I facilitated architecture leaks to The Information. This is false. A journalist from The Information did reach out to me shortly before that article came out. I did not comment at all beyond asking the journalist to make it clear that a blog post I wrote which was referenced in the article was preexisting and public. The article also mentions an internal OpenAI monitorability proposal. I have heard that this memo contained highly sensitive architecture information, and that OpenAI accused me of accessing and reading it. This accusation is also false. As reported in the article, I viewed a version of the proposal that did not have sensitive IP and was approved for sharing with me. I believe OpenAI now knows this accusation was based on a conflation of these two documents, though I do not know if they have clearly retracted that accusation. I do not and have never solicited proprietary information, and the three employees who were recently fired from OpenAI never leaked IP to me. As the article mentions, I did have Signal chats with them that had disappearing messages on; they’re professional contacts that I’ve had on Signal for a while, and use of Signal is common in the tech industry. During the Hugging Face investigation, I was careful to avoid sending Signal messages with confidential information, though I did sometimes discuss high level things on Signal calls. As far as I understood, this was normal.
New: The three researchers OpenAI fired last month spent the summer fighting to keep AI's chain-of-thought process visible. Then, OpenAI asked to see their Signal chats. A week later, they were let go. More below from @keachhagey, @berber_jin1, and me. wsj.com/tech/ai/the-signal-c…
41
150
1,603
175,231
Andreas Kirsch 🇺🇦 retweeted
Introducing Reinforcement Learning from Collective Rewards (RLCR). RLCR is a recipe that trains language models as agent organisations, which share a message board and workspace. We use it to train Avalon-M1-Mini (120B) and study its behaviour. We find a number of interesting results, including: 🛠️ Learnt organisational hierarchies and divisions of labour 🕵️ Increased collective verification, through hires of verifiers and testers 👥 The rise of collective thinking, where agents think more about other agents and how to help them We believe RLCR can provide a laboratory for studying collective intelligence and multi-agent safety. Blog post and technical report 👇
96
180
1,918
183,030
AI mode and chatbots falling victim to SEO and disinformation is a huge (to be expected) issue Disformation becomes laundered through LLMs as the models might be too trusting with external information We trust the models answers bc they are usually quite useful already and end up being manipulated
Voters who Googled how to donate to Talarico got an AI answer that led them to give to someone else. A network of fake news sites seeded messaging about state and local candidates that AI answers picked up on. My story on how the AI midterms are going: theatlantic.com/technology/2…
3
3
14
1,224
Disappearing messages aren't smoke; lots of people use them with their friends and the AI safety community is well-connected in social circles. Did they also check their Snapchat? If they fired three of their best AI safety researchers for this, OpenAI is just dumb The real risk is the chilling effect this is intended to have Also more good safety researchers might decide to just leave OpenAI instead of getting smeared in public
New: The three researchers OpenAI fired last month spent the summer fighting to keep AI's chain-of-thought process visible. Then, OpenAI asked to see their Signal chats. A week later, they were let go. More below from @keachhagey, @berber_jin1, and me. wsj.com/tech/ai/the-signal-c…
5
5
67
4,837
Andreas Kirsch 🇺🇦 retweeted
New on our Frontier Red Team blog: using Claude to formally verify software at large scale. Formal verification can prove that code is free of certain bugs, but historically it has only been feasible for small codebases (or required a lot of expert time). With AI models, however, this is beginning to change. In collaboration with @theoremlabs, we used Claude to prove security properties in over one hundred real-world open-source libraries over the span of a few weeks. Read our research in full here: anthropic.com/research/forma…
632
1,053
9,633
1,969,577
I hope Google will pay up and make good somehow. It sounds like they moved too fast without knowing local laws. Not sure how that can happen. Not great when people are already against datacenters. This is a gift for anyone who doesn't want more compute sovereignty in Europe 🥺
Before Google’s arrival a few months ago, an estimated 250,000 trees occupied the 330 hectares (815 acres) of forest near Muhos in rural northern Finland. Now they are all gone, the tech company illegally stripped the entire area to build a datacentre theguardian.com/environment/…
1
2
21
1,657
Concerning because of the possible lack of transparency. Especially after OpenAI fired three AI safety researchers, which might have a strong chilling effect on speech. Auditors should be free to write about their findings
I feel like this isn't getting enough attention: - there were some pretty big holes found by the red-teamers, e.g. agents could just keep acting and not let the user do stuff and this would prevent monitors from being run (also misalignment monitors never ran on actions that were compacted away) - The terms of this were "we will red-team for you" not "we will inform the public", so OpenAI seems to have allowed to redact arbitrarily much stuff, and METR were not allowed to have a redaction summary statement that said things like "you would be way more freaked out if you saw what was redacted" (or "everything would be fine if you saw what was redacted") - The version of the report shared with OpenAI was 61 pages, and the version shared with METR/Redwood leadership after redaction was 38 pages, so 23 pages got redacted. nitter.siddz.com/METR_Evals/status/2113…
2
3
30
5,036
Andreas Kirsch 🇺🇦 retweeted
"On the recently proposed o(n log n) integer multiplication algorithm" by David Harvey web.maths.unsw.edu.au/~david…
10
19
224
52,592
The US government under Trump has become so incredibly corrupt(ed). All Trump enablers who willfully broke the law hoping for a general pardon in the future need to face real consequences and be banned from public office. They're clearly not fit for it The US has turned into a banana republic
"Top officials in the State Department made clear that only candidates who voted for President Donald Trump would be eligible for the mid-to-upper level foreign service roles. They also told candidates that their campaign donation history would be examined and any donation to Democrats would be disqualifying."
2
2
14
1,105
Andreas Kirsch 🇺🇦 retweeted
A little additional context, as this is getting attention: (1) These clauses are pretty common in tech/corporate contexts, to the extent that HR for big firms like Google can be really taken by surprise if people make a fuss about them. (2) They're buried in very long contracts - several people I spoke to only discovered they were under in perpetuity non-disparagement after I encouraged them to go back to their contracts and go keyword searching. (3) Freedom to express concerns is critical in a fast-moving, ethically charged area like AI risk. DM leadership is aware of this. It has been a core tenet of much of the governance material produced this decade (e.g. see arxiv.org/abs/2004.07213). (4) The autonomous weapons/surveillance thing is particularly galling in a DeepMind context. Hassabis and co profited a LOT over the years from stating principles against these uses clearly. It gained them academic and civil society support*, and staff who have contributed a lot to their success joined and stayed in part because of those principles. As the BBC article says, it's this old guard who are most upset about what is happening. Hassabis is of course welcome to change his principles (last year he said 'the world is becoming a more dangerous place') but to silence those who still hold to DeepMind's original principles, or punish those who speak up (and both these have been happening) is IMO abhorrent. (5) It's unclear how strictly enforced this all is. For current employees, there is clearly *robust* comms oversight and message control. For ex-employees, it seems much laxer. But the uncertainty is enough for it to have a chilling effect. If you were just out from your role at GDM and looking for your next role, would you really want the risk of dealing with Google's giant legal team, or finding yourself industry-blackballed in some way? (6) OpenAI and Anthropic both had clauses like these, and removed them in the face of public and employee pressure. It'll be a harder task with GDM, as it's a much bigger and more opaque organisation. But it's worth making our feelings known - the stakes are too high.
Important, and I'm glad this is finally public. Google DeepMind researchers are under in perpetuity non-disparagement clauses forbidding them from ever speaking critically of the company. I'd already confirmed this with multiple people. Yes, some ex-employees have spoken out nonetheless. But it has also discouraged others from doing so. And yes, it most certainly has a chilling effect with regards to discussions on safety and risk. Others have written compellingly about how important the ability to speak freely and critically is, especially on topics like safety and risk. And what a testament to the research employee community's coordination and hard-won bargaining power it has been to get there at other companies. GDM burn that commons by having this. And everyone who signs burns that commons too. Let's get it changed.
2
4
38
3,845
Thanks for saying this and I hope you can put external pressure on Google to be better and not have such clauses in the future The public might have been misled in how open Google is when it comes to allowing valid criticism The fact there are such chilling effects (and potentially others) should give everyone goosebumps The industry simply cannot be allowed to regulate itself as long as it follows such practices
Important, and I'm glad this is finally public. Google DeepMind researchers are under in perpetuity non-disparagement clauses forbidding them from ever speaking critically of the company. I'd already confirmed this with multiple people. Yes, some ex-employees have spoken out nonetheless. But it has also discouraged others from doing so. And yes, it most certainly has a chilling effect with regards to discussions on safety and risk. Others have written compellingly about how important the ability to speak freely and critically is, especially on topics like safety and risk. And what a testament to the research employee community's coordination and hard-won bargaining power it has been to get there at other companies. GDM burn that commons by having this. And everyone who signs burns that commons too. Let's get it changed.
1
4
49
3,274
Andreas Kirsch 🇺🇦 retweeted
Important, and I'm glad this is finally public. Google DeepMind researchers are under in perpetuity non-disparagement clauses forbidding them from ever speaking critically of the company. I'd already confirmed this with multiple people. Yes, some ex-employees have spoken out nonetheless. But it has also discouraged others from doing so. And yes, it most certainly has a chilling effect with regards to discussions on safety and risk. Others have written compellingly about how important the ability to speak freely and critically is, especially on topics like safety and risk. And what a testament to the research employee community's coordination and hard-won bargaining power it has been to get there at other companies. GDM burn that commons by having this. And everyone who signs burns that commons too. Let's get it changed.
Congrats to Sofia for having the courage to resign and speak out! This is also very important: Staff are scared to speak out about AI safety and its uses in warfare because their employment contracts prohibit them from publicly criticising the company. bbc.co.uk/news/articles/cmre…
19
82
603
99,389