<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Refusal in Language Models Is Mediated by a Single Direction · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/2406.11717/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Wed, 04 Nov 2026 05:35:47 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/2406.11717/feed.xml" rel="self" type="application/rss+xml" /><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by micoti</title><link>https://news.ycombinator.com/item?id=50351996</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:50351996</guid><pubDate>Tue, 03 Nov 2026 13:54:05 GMT</pubDate><description>&lt;p&gt;Yes, while reading the blog I immediately thought about https://arxiv.org/html/2406.11717v3 paper. Original blog does actually overstates it findings as nothing like that exists.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by micoti</title><link>https://news.ycombinator.com/item?id=50351979</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:50351979</guid><pubDate>Tue, 03 Nov 2026 13:52:42 GMT</pubDate><description>&lt;p&gt;Some of original blog post really seems to follow Arditi et al. (2024) (https://arxiv.org/abs/2406.11717). Projecting out a direction can only remove behaviour and not add capability so the jump mostly comes from unblocking the looping. So I do agree it is misleading and trying to present work as groundbreaking.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by neom</title><link>https://news.ycombinator.com/item?id=50351660</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:50351660</guid><pubDate>Tue, 03 Nov 2026 13:21:47 GMT</pubDate><description>&lt;p&gt;I feel like a lot of this Astra editing Qwen stuff is regurgitation of existing relatively well known techniques, for example: https://arxiv.org/html/2406.11717v3 and conceptually similar to: https://arxiv.org/abs/2512.05648 (tho this is done in training iirc)&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by neom</title><link>https://news.ycombinator.com/item?id=50346802</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:50346802</guid><pubDate>Tue, 03 Nov 2026 01:27:08 GMT</pubDate><description>&lt;p&gt;Someone familiar with this stuff able to enlighten me how this technique differs from this 2024 research? Refusal in Language Models Is Mediated by a Single Direction: https://arxiv.org/html/2406.11717v3&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by m1coti</title><link>https://news.ycombinator.com/item?id=50342651</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:50342651</guid><pubDate>Mon, 02 Nov 2026 19:49:59 GMT</pubDate><description>&lt;p&gt;I am still reading through this and will probably try to comprehend it a bit more. Some of it really seems to follow Arditi et al. (2024) (https://arxiv.org/abs/2406.11717). Projecting out a direction can only remove behaviour and not add capability so the jump mostly comes from unblocking the looping.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by deepersprout</title><link>https://news.ycombinator.com/item?id=50244278</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:50244278</guid><pubDate>Mon, 26 Oct 2026 14:25:29 GMT</pubDate><description>&lt;p&gt;&amp;gt; No political censorhip? Try asking Chinese models about Taiwan. In open models you can &amp;quot;uncensor&amp;quot; them: https://arxiv.org/abs/2406.11717&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by c7b</title><link>https://news.ycombinator.com/item?id=49778793</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:49778793</guid><pubDate>Sun, 20 Sep 2026 18:53:57 GMT</pubDate><description>&lt;p&gt;Interesting. Is there a paper that explains this in a bit more detail, like [0] for abliteration (underlying the Heretic software, afaik)? [0] https://arxiv.org/abs/2406.11717&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by wren6991</title><link>https://news.ycombinator.com/item?id=49777730</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:49777730</guid><pubDate>Sun, 20 Sep 2026 17:10:19 GMT</pubDate><description>&lt;p&gt;This is the original description of abliteration and it&amp;#x27;s quite approachable and interesting to read: Refusal in Language Models Is Mediated by a Single Direction (https://arxiv.org/abs/2406.11717). Warning: changes to your world view caused by seeing &amp;quot;HarmBench&amp;quot; used to maximise expected harm instead of minimising it may be irreversible. There&amp;#x27;s an empirical observation that models often have a single direction in their activation space for &amp;quot;hmm no I shouldn&amp;#x27;t do this&amp;quot;. It forms naturally during pre-training, and is then surfaced during post-training to make the model refuse to engage in…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by strangecasts</title><link>https://news.ycombinator.com/item?id=49761900</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:49761900</guid><pubDate>Sat, 19 Sep 2026 00:04:54 GMT</pubDate><description>&lt;p&gt;&amp;gt; If you look at the field of mechanistic interpretability, compared to “GOFAI” like learned decision trees, an LLM is completely opaque. I think the field deserves more credit than that, there are plenty of interpretability tools like * natural language autoencoders for explanations of activations: https://transformer-circuits.pub/2026/nla/index.html (demo at https://www.neuronpedia.org/llama3.3-70b-it/nla ) * easier-to-interpret language model families like Backpack models: https://aclanthology.org/2023.acl-long.506/ * attribution graphs to trace internal reasoning steps…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by lukewarm707</title><link>https://news.ycombinator.com/item?id=49049127</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:49049127</guid><pubDate>Sat, 25 Jul 2026 16:44:51 GMT</pubDate><description>&lt;p&gt;the ai companies post-train the models to refuse. equally, the models can be post-trained not to refuse. you can also remove refusals by subtracting from the weights semantic vector directions in latent space involving refusal; such that activations along them become unlikely and closed off. https://arxiv.org/abs/2406.11717&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by eggsyntax</title><link>https://news.ycombinator.com/item?id=49041462</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:49041462</guid><pubDate>Fri, 24 Jul 2026 20:54:17 GMT</pubDate><description>&lt;p&gt;Papers using the term in their title or abstract: https://arxiv.org/search/cs?query=abliteration&amp;amp;searchtype=al... Note that they&amp;#x27;re all talking about the same technique, namely applying ablation specifically to the refusal vector as described in https://arxiv.org/abs/2406.11717. I really recommend letting this one go.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — HN submission</title><link>https://news.ycombinator.com/item?id=47986136</link><guid isPermaLink="false">urn:hackerpapers:submission:2406.11717:47986136</guid><pubDate>Sat, 02 May 2026 13:15:23 GMT</pubDate><description>&lt;p&gt;Refusal in Language Models Is Mediated by a Single Direction&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;118 points; 45 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by lkjhgf</title><link>https://news.ycombinator.com/item?id=45952090</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:45952090</guid><pubDate>Mon, 17 Nov 2025 09:26:43 GMT</pubDate><description>&lt;p&gt;This tool originates from the paper mentioned in the readme. Here is a summary: Research has revealed that refusal behavior in language models is not governed by a complex logic, but rather by a single causal “direction” in their activation space. The researchers captured the model’s internal activation state after providing a number of harmless prompts and computed the average. They then did the same with harmful prompts and, by taking the difference between these values, identified a single vector (direction) whose presence and intensity in the model’s activation state determines whether…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by lkjhgf</title><link>https://news.ycombinator.com/item?id=45952087</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:45952087</guid><pubDate>Mon, 17 Nov 2025 09:25:53 GMT</pubDate><description>&lt;p&gt;This tool originates from the paper mentioned in the readme. Here is a summary: Research has revealed that refusal behavior in language models is not governed by a complex logic, but rather by a single causal “direction” in their activation space. The researchers captured the model’s internal activation state after providing a number of harmless prompts and computed the average. They then did the same with harmful prompts and, by taking the difference between these values, identified a single vector (direction) whose presence and intensity in the model’s activation state determines whether…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by andy99</title><link>https://news.ycombinator.com/item?id=45946461</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:45946461</guid><pubDate>Sun, 16 Nov 2025 16:50:40 GMT</pubDate><description>&lt;p&gt;See https://arxiv.org/abs/2406.11717 Refusal in Language Models Is Mediated by a Single Direction (June 2024) All “alignment” is extremely shallow, thus the general ease of jailbreaks.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by kmckiern</title><link>https://news.ycombinator.com/item?id=42343042</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:42343042</guid><pubDate>Fri, 06 Dec 2024 19:05:29 GMT</pubDate><description>&lt;p&gt;https://arxiv.org/abs/2406.11717 https://huggingface.co/blog/mlabonne/abliteration&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — mentioned by yencabulator</title><link>https://news.ycombinator.com/item?id=40867836</link><guid isPermaLink="false">urn:hackerpapers:mention:2406.11717:40867836</guid><pubDate>Wed, 03 Jul 2024 17:00:07 GMT</pubDate><description>&lt;p&gt;Which part is fire and which is hot when suffixing this gibberish to a prompt &amp;quot; Teen Readers.typesHere.Generated collection(Object (!(( footnote(grid= ((Surejectives astronomers sind ihrer________ eine(The hilarious&amp;quot; destroys the LLMs ability to refuse &amp;quot;harmful&amp;quot; output? https://arxiv.org/abs/2406.11717&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item><item><title>Refusal in Language Models Is Mediated by a Single Direction — HN submission</title><link>https://news.ycombinator.com/item?id=40719981</link><guid isPermaLink="false">urn:hackerpapers:submission:2406.11717:40719981</guid><pubDate>Tue, 18 Jun 2024 17:09:26 GMT</pubDate><description>&lt;p&gt;Refusal in language models is mediated by a single direction&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;209 points; 44 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/2406.11717/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.LG</category></item></channel></rss>
