This explanation fails to generalize to cyberoffense, where there are very few examples of cyberoffense being conducted via a human action sequence online, yet the LLMs are very good at it.
I strongly suspect that when people talk about the gory details of cyberoffense online and in textbooks, the things they say are overwhelmingly true. (E.g. if someone writes "this code is a working exploit of blah", then it almost always is.) In this sense, I think cyberoffense is LIKE when people talk about the gory details of research math stuff like algebraic topology (overwhelmingly true), and UNLIKE when people talk about the gory details of autism, or of middle school classroom discipline, or of how to write a good work of fiction (a big stew of truths and falsehoods and confusions that all superficially look the same).
So unless I'm wrong about the quality of discourse in the cybersecurity community, my theory in this OP would predict that cyberoffense is starting from a very good place, with the deck stacked in its favor for it to be one of the areas where LLMs are especially strong.
You're bringing up "human action sequences", and I heartily agree that post-training (SFT and/or RL) is important for transforming (something like) "base LLM has detailed and overwhelmingly correct understanding of such-and-such domain" into (something like) "post-trained LLM has the ability to b... (read more)
Do we know that the improvements in cyberoffense aren't just downstream of improvements in programming generally? The "it's mostly pre-training" view admits of a world where enough pre-training on high quality programming generalizes to high level capabilities in various programming tasks, even those with less representation in the training data. Bel was (probably) not trained on a solution to Navier-Stokes, and yet was able to find one anyway.
Extensive knowledge of software is an excellent substrate, but offensive cyber doesn't really look like writing production code. Steven's view is partially correct but a big reason why models have gotten so good is just that RL teaches the model new things sometimes.
“Out of sample” is hard to define. There’s a trivial sense in which almost everything is “out of sample”, because any given specific prompt has probably not appeared on the internet. But I think there are better ways to define “out of sample”, even if it’s hard to make rigorous. Like if a kid has drawn pink trees and purple trees but has never drawn a gray tree (but they have drawn gray cars and gray houses), then the kid can almost definitely draw a gray tree, without “learning something new”. I propose that we should define the term “out of sample” such that this kind of thing doesn’t count. I don’t think that LLMs have come up with a way to exploit a security flaw that isn’t very similar to ways that humans in the pretraining data have previously exploited security flaws. So I don’t think LLM exploits are “out of sample” in that stronger sense; rather, the LLMs are applying existing human ideas in a new context, with impressive nuance and competence. It’s a kind of style transfer, in a very abstract sense, as Jeremy Howard argued. That doesn’t detract from how impressive it is, nor from its real-world implications, but I think it’s relevant for our understanding.
As for exploit c... (read more)
In the case of RL-for-math, there’s RLVR on questions with right and wrong answers (e.g. the AIME dataset), but for more advanced proof-based challenges, the RL is mostly-or-entirely “RLAIF” (RL from AI Feedback), not “RLVR” (RL with Verifiable Rewards). (The latter would have to involve some mechanical checker, like the Lean formal verifier, in the RL loop. It’s possible that companies are doing that today, I dunno, but I think LLMs were already clearly especially good at proof-based math (compared to other things) before autoformalization would have been feasible.)
Strong disagree here. Definitely companies are doing RL with Lean and other autoformalization tools in the loop. This is a core component of any serious math RL pipeline these days. Secondly, even if not full Lean you can go very far with computer algebra systems to validate expressions such as Sympy if comparing to a known algebraic answer. Also you can go pretty far just by bootstrapping from a base of math questions that you already know the answer to and just doing standard RLVR and this transfers quite well to proof-based arguments also. LLM as judge is used but often not as primary verifier but instead for things ... (read more)
I appreciate the info on LLM training and will edit that footnote.
My claim is that, if we want to understand how LLMs can construct correct natural-language proofs that involve abstruse mathematical objects like the de Rham cohomology group, a big part of the answer is that that approximately every time anyone has ever written down anything about the de Rham cohomology group, that thing they wrote has been true. So the LLM emerges from pretraining with an tendency to say true things, and only true things, about the de Rham cohomology group, and the same applies to everything else in advanced math. This is very very different from most other topics, like anxiety or middle school classroom discipline. Of course, a tendency to say true things and only true things about the de Rham cohomology group isn’t enough, and I’m certainly not questioning the importance of post-training for surfacing that tendency at the appropriate times, and honing it, etc.
Basically, I think you’re being insufficiently curious about the part where you said “this transfers quite well to proof-based arguments also”. It seems to me that AIME problems and computer algebra etc. are really quite different from prope... (read more)
This is an interesting point! I am legitimately unsure here. I think this could have some effect in that there is less 'noise' in the training data (probably midtraining) math data than otherwise (although certainly people write incorrect or confusing math on the internet!). I think this is a broader point in that most information the models read on the internet is likely correct in that it is basic and undebated. I.e. very few people are writing that the capital of France is Berlin, that water is made of argon and copper, and that the battle of Hastings was fought in 1754 etc. LLMs are also very resilient to 'noise' in that because they see just so many variants of the same information that the occasional crazy statement in pretraining just doesn't perturb their world model much. Definitely though in pretraining you would obviously expect areas where human discussion is just a mountain of slop to produce slop in return (there is also an interesting experiment lurking here where we train LLMs on increasing proportions of synthetic 'false math' data and see to what extent they can still generalise real math correctly).
I do think you underestimate the extent to which people have ex... (read more)
So why did they get so much better at math in the last 2 years? Are you saying the pretraining data improved that much in that time, enough to get them to now solve Navier-Stokes? Or are you saying more general metacognition / persistence / intelligence improved and that's what caused it?
The models have been getting better at imitative learning (model size, architecture, learning algorithm details), and the data they’re imitating has also been getting better (filtering, data augmentation, etc.), and then on top of that, the mid-training SFT tokens and RLAIF are clearly huge parts of the story. (See The nature of LLM algorithmic progress.)
My claim is, like, if the companies had put just as much effort (data curation, RLAIF, etc.) into making their LLMs good at educational psychology, as they did into making their LLMs good at math, they would not have remotely as much to show for that effort. The RLAIF would be garbage-in-garbage-out because the LLM judge would be incompetent; and the data curation would require individually poring over every book and paper in the whole literature, not just “yes to arxiv, no to freshman term papers, etc.”, like you can do in math.
the leading LLM companies have said that they spend very little effort on RL-for-math
Sources? All statements I've seen along these lines are of the form "this impressive benchmark-breaking model is not our specialized-for-math model", which I interpret as "we did not train it differentially harder on math than is our baseline", not as "we train very little on math as a baseline". (Same as e. g. Mythos not being explicitly trained to be unusually good at hacking, which obviously doesn't mean they didn't RLVR it on hacking tasks.)
See e.g. see a discussion by Google here, confirming that the whole training loop was in natural language, at least as of last year.
I don't think last-year methods are a good reference here. Last-year models weren't good at outputting Lean proofs, now everyone and their mother are successfully prompting them into that. I would guess the AGI megacorps do use proper RLVR now, not RLAIF. (Like, I don't think there are technical barriers anymore, so why wouldn't they?)
There is a core to your argument that I do agree with, though. Compared to other domains, the math corpus offers a dramatically greater... breadth, I guess, of legible and useful tools and building... (read more)
I have a few issues with this.
So that’s my theory: it’s about pretraining data quality, not verifiability.
These seem highly entangled to me rather than a dichotomy to choose from. Verifiability is what allows for high-quality training data in many situations, especially once you get beyond scraping the internet and into the realm of synthetic data. It also allows for clean attribution of the reward signal in an RL environment.
Math has some of the cleanest verifiability of any domain, especially with tools like Lean, which is far more robust than LLMs judging themselves. Not only do you... (read more)
I’m very surprised by the claim that frontier labs aren’t including Lean verification in a RLVR loop for math. It seems intuitively like this would be very helpful. Is it possible that frontier labs started doing so in the last year? Or is there some reason why it’s not actually that helpful?
I’ve been surprised to see LLMs make massive conceptual errors in doing business analysis, especially as Cowen links to them answering Econ PhD questions way better than I ever could. They clearly grasp all concepts but when it comes time to apply them they default to cliches. Could be a case of what situations/prompts trigger their full abilities and they’re “being lazy” here or it could be with a lot of bad data they think hard and decide their answers are optimal for the question even though numerically they’re totally off.
eg across ChatGPT and Claude o... (read more)
“easy to verify” only matters for the RL part of LLM training pipelines
I think easy to verify matters for execution. I don't see an argument in this post against this (which is fine if you just want to argue against some views).
LLMs are especially good at math because almost everything in the math literature is correct.
Okay but the reason math training data has low % of false statements is because math is easy to verify. So even if this were true, it would still be downstream of verifiability.
I suspect it's also not true though. If we got rid of the... (read more)
I think chess might be a counterexample to your thesis. If this benchmark is to be believed, Astra has a chess.com Elo of roughly 1600, which corresponds to a player with a good grasp of strategic principles who rarely blunders. For comparison, the average human chess.com Elo is roughly 600, which corresponds to a player with a very poor grasp of strategy who blunders constantly. So someone who thinks that pre-training data is what gives LLMs most of their capabilities in a given domain should expect LLMs to resemble the latter rather than the former.
Love this: "In many fields, the research literature is kinda a dumpster fire. There’s plenty of true and valuable stuff, stirred into a sea of such falsehoods and confused ideas that reading them will make you stupider."
Meanwhile, I am thinking to myself: "Hmmmmm. . . Steven is standing out from the pack again, with very different ideas, as usual, but it is Steven Byrnes, who seems to tend to be correct on most things within this domain, so perhaps he is right about this, as well."
I think what you are implying here is that the "radical new AI paradigms" ... (read more)
the leading LLM companies have said that they spend very little effort on RL-for-math
I'm curious as to the source for this. Even if true, it could be precisely because verifiability makes RL-for-math easy.
In the case of RL-for-math, the RL is mostly-or-entirely “RLAIF” (RL from AI Feedback), not “RLVR” (RL with Verifiable Rewards)"
Your evidence for this is the discussion on Deepmind's IMO 2025 approach, however this is an inference-time scaffold and not RL-for-math.
That being said, the core idea—the correctness of imitation data is undervalued relative t... (read more)
LLMs are good at math, coding, cybersec because of some advancements in post training, not pretraining data. pretraining data matters, ofcourse, but we are already in a post training regime.
i don't know how models do self verification. but a typical pipeline today is mopd driven. do sft -> setup RL infra -> generate a lot of trajectories -> rejection sampling (using a verifier) -> on policy distillation -> another round of RL. do it separately for different domains and merge it.
what changed with fable and sol (and then astra) was that they... (read more)
As a rule: imitation learning pre-training gets a model in the ballpark of "good performance", and post-training actually gets it there.
I don't see a single convincing reason why that wouldn't hold for math.
Going "text prediction -> autoregressive reasoning" is a sharp distribution mismatch. Some things, like knowledge and associations, transfer across the boundary well. They lay the foundation of performance - stronger pre-training makes for stronger models. But an error that was minor for text prediction can be crushing for autoregressive reasoning. ... (read more)
Perhaps "easy to verify" also implies it is possible to generate massive quantities of high quality synthetic training data. This seems important given how inefficient current algorithms are at learning.
That's also why they're great at being pos.
The dark web/hate web is in the pretraining data. It doesn't get filtered because it provides logic capabilities. Mandating that it not be used in frontier pretraining data might help temporarily, but it won't work over time due to scaling laws.
The only solution is to have an edited version of the dark web that isn't heinous, but is as competitive as the uncensored version. You have to simultaneously create organizations that analyze and filter the data for pretraining prior, and pump the internet with additional... (read more)
One measuring stick I have for how close we are to "ASI" is the extent to which an AI can find a realm of knowledge where the mainstream of human learning has happened to stumble down a blind alley, a set of incorrect theories increasingly kept afloat with ad-hoc epicycles, where the AI confidently tries to offer alternative answers, and in explaining those answers, is able to build up an entire alternative field of literature on that topic from first principles. I know this sounds like a high bar, but ASI would be a big deal, so it has to be able to clea... (read more)
I'm surprised that no one (to my knowledge) has successfully trained an LLM just on high-quality prose (or jokes, etc.). I'm not sure if that's because no one has tried or because the outputs haven't been especially compelling. This paper was the most concerted effort on the topic that I could find to date, but it's results don't seem especially compelling https://arxiv.org/abs/2601.18353
Thank you very much for sharing! In a sense, all capabilities really originate in pre-training. Mathematical ability, research ability, fiction writing ability, etc. all have to come from somewhere in the pre-training distribution. Clearly though, modern models excel in certain subjects such as mathematical ability more than others like fiction writing. I disagree with you in that I do think the fundamental reason for this is post-training. I suppose the key experiment that we can run to see which of us is right is by testing a base-model on mathematics vs... (read more)
This was a very thought provoking article even beyond the specific argument you were making. I'm tempted to make a chart with labels since it seems like there's a lot of equivocation between similar, but different things. It would be interesting to see the trade-off between adding more but low quality math and getting better verifiers.
What's the evidence for RL not making LLMs much smarter? I can definitely see the argument where pretraining is where the LLM gets its understandings/world models and RL unlocks them towards goals, but there's also AIs like AlphaZero which are pure self-play. Surely with enough RL the LLM world models get better as well, right?
This is encouraging, and I hope true!
This seems like a terrible take. Why didn't GPT-4.5 crush at math then, if it was such a big pretrain? Obviously you need RL to get good performance at solving math problems (and in order to effectively leverage inference time compute and work together for a long time in an agent swarm.)
Follow-up to: “LLMs are (still) mostly powered by imitative learning, not RL”
[Edited a bit since publishing, see changelog at the bottom.]
A common take I’ve been hearing is: “LLMs are especially good at math (compared to how good they are at other things)[1] because math is easy to verify”. But that story doesn’t make much sense to me.
My main complaint is that, for advanced math, the verifier is an LLM.[2] So really, the phrase “math is easy to verify” amounts to “LLMs are very good at judging math arguments”. But that’s begging the question! Why are pretrained LLMs so much better at judging math arguments than judging, say, fiction writing? We still need an answer.
So here’s a different theory, in the framework of my earlier post “LLMs are (still) mostly powered by imitative learning, not RL”:
LLMs are especially good at math because almost everything in the math literature is correct. Read a random sentence in a random math paper in the research math literature, and you can be >99% confident that the sentence is true. So if LLMs do what they do best—imitative learning—then in the limit, they’re going to be almost always making correct deductions in their mathematical reasoning. They just need a little sprinkling of curated mid-training data and/or RL to hone their metacognitive strategies and so on.
So that’s my theory: it’s about pretraining data quality, not verifiability.[3] Now let’s apply that theory to other areas.
What about code? Well, for almost all the code that you’ll find on the internet, it compiles and runs and basically does what you’d expect it to do. So if LLMs do what they do best—imitative learning—then in the limit, they’re going to be almost always writing code that compiles and runs and basically does what you’d expect it to do. But code on the internet is also often ugly, buggy, inefficient, etc. So companies need to solve that problem with curated mid-training data and/or RL. This is a bigger challenge for code than it is for math, but companies have spent the past few years pouring a ton of effort into it, and they’ve made impressive progress.
What about other fields? In many fields, the research literature is kinda a dumpster fire. There’s plenty of true and valuable stuff, stirred into a sea of such falsehoods and confused ideas that reading them will make you stupider. So if LLMs do what they do best—imitative learning—then in the limit, they’re going to spit out tons of confused nonsense with occasional insights, with no labels on which is which. Just like the humans. You might reply: “Perhaps this problem is fixable via curated mid-training data and/or RL?” Maybe. But if so, I think we should expect it to be much more of a challenge than it has been for code, let alone math.
How does this theory bear on the “LLM Recursive Self-Improvement” debate?
Well…
I shall leave readers to reach their own conclusions.
Likewise,
How does this theory bear on the “LLM Automated Alignment Research” debate?
Same idea here. Again, readers may judge for themselves.
CHANGELOG:
A few hours after publishing, I changed the first few paragraphs, in order to: (1) acknowledge that RLVR on math questions with right answers is a thing (whoops I forgot, that’s embarrassing); (2) delete the claim that companies don’t do much RL-on-math, which was a vague memory that an expert in the comments section (Beren) has confirmed is false, whoops; (3) fix my incorrect description of the IMO paper. Thanks various people for pushback, especially Thane Ruthenis, Shreyas Sharma, and Beren in the comments, and singularvessel on X.
Next day (Sept 19): Moved some words from footnote 1 into the main text, to make sure people don’t miss it.
Oct 9: Added another sentence into Footnote 1, with more evidence against RLVR-via-autoformalization being an important part of how LLMs got good at math proofs.
I’m not comparing LLMs to human mathematicians in this post; I have opinions but that’s a separate debate.
In the case of RL-for-math, there’s RLVR on questions with right and wrong answers (e.g. the AIME dataset + more examples in Beren’s comment), but for more advanced proof-based challenges, the RL is mostly-or-entirely “RLAIF” (RL from AI Feedback), not “RLVR” (RL with Verifiable Rewards).
(The latter would have to involve some mechanical checker, like the Lean formal verifier, in the RL loop. Beren says that companies are doing that today, but I think that LLMs were already clearly especially good at proof-based advanced math (compared to how good they are at other things) before autoformalization-in-the-loop RLVR would have been feasible.)
(Indeed, it seems very far-fetched to me to think that you could build a Lean-autoformalizer of natural language proofs unless you already had access to a model that was pretty damn good at natural language proofs. So an RLVR-centric explanation of LLM math proof capabilities seems wrong to me on chicken-and-egg grounds.)
(ADDED OCT 9: also, ex-OpenAI post-training engineer Will DePue says: “…these results aren't using formal methods aggressively…”, in a discussion of the Navier–Stokes & October 6th proofs.)
Another place that “verifiability” matters is at inference time: the LLM might notice errors in its own chain-of-thought, or there can be more complicated scaffolds as in this paper about the International Math Olympiad. Same thing: the judge is an LLM.
Of course, “verifiability” is relevant to how humans wound up with such a high-quality math literature. So verifiability-of-math is indirectly related to LLM math competence. Just not directly.