GKRootWire
Cloud & Sysadmin Microsoft Confirms Preview Update Wipes Out Desktop SettingsAI Nvidia to Acquire Hugging Face for $12.9 BillionDev Tools A Deep Dive Into Intrusive Linked ListsGadgets DJI's Romo 2 Robovac Adds Local-Only Mode After Privacy ScareAI Nvidia Reportedly Moves to Acquire Hugging FaceAI Anthropic Launches Claude Tools for AI Shopping AgentsCloud & Sysadmin Microsoft Confirms Preview Update Wipes Out Desktop SettingsAI Nvidia to Acquire Hugging Face for $12.9 BillionDev Tools A Deep Dive Into Intrusive Linked ListsGadgets DJI's Romo 2 Robovac Adds Local-Only Mode After Privacy ScareAI Nvidia Reportedly Moves to Acquire Hugging FaceAI Anthropic Launches Claude Tools for AI Shopping Agents
AI

Researchers Show How to Extract Hidden Reasoning from Proprietary LLM APIs

A new writeup details methods for reconstructing the internal chain-of-thought that models like OpenAI's o-series are supposed to keep hidden.

A project called Stolen Thoughts lays out techniques for extracting reasoning traces from proprietary LLM APIs that deliberately withhold their internal chain-of-thought from users.

Models like OpenAI's o1 and o3 generate step-by-step reasoning before producing a final answer, but the provider only shows a summarized or redacted version, partly to protect the model's inner workings from competitors and partly to prevent misuse. The research demonstrates that clever prompting, timing analysis, or exploiting quirks in API responses can leak fragments of that hidden reasoning, effectively reconstructing what the model 'thought' before answering.

The project has generated heavy discussion on Hacker News, with commenters weighing in on both the technical cleverness and the implications for AI vendors who treat reasoning traces as valuable IP.

Why it matters: If reasoning traces can be reliably extracted, it undermines a key business rationale for hiding them - preventing rivals from distilling cheaper models off your reasoning data. It also raises fresh questions about what 'safety' guarantees providers can actually make when they claim to filter or hide model internals.

Sources: Hacker News