{"id":"https://openalex.org/W7140228174","doi":"https://doi.org/10.48550/arxiv.2603.20957","title":"Alignment Whack-a-Mole : Finetuning Activates Verbatim Recall of Copyrighted Books in Large Language Models","display_name":"Alignment Whack-a-Mole : Finetuning Activates Verbatim Recall of Copyrighted Books in Large Language Models","publication_year":2026,"publication_date":"2026-03-21","ids":{"openalex":"https://openalex.org/W7140228174","doi":"https://doi.org/10.48550/arxiv.2603.20957"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.20957","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.20957","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.20957","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Liu, Xinyue","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Liu, Xinyue","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Mireshghallah, Niloofar","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mireshghallah, Niloofar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":null,"display_name":"Ginsburg, Jane C.","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ginsburg, Jane C.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":null,"display_name":"Chakrabarty, Tuhin","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Chakrabarty, Tuhin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.5602999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12380","display_name":"Authorship Attribution and Profiling","score":0.5602999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T14432","display_name":"Freedom of Expression and Defamation","score":0.04089999943971634,"subfield":{"id":"https://openalex.org/subfields/3308","display_name":"Law"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12377","display_name":"Digital Humanities and Scholarship","score":0.035599999129772186,"subfield":{"id":"https://openalex.org/subfields/1208","display_name":"Literature and Literary Theory"},"field":{"id":"https://openalex.org/fields/12","display_name":"Arts and Humanities"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/premise","display_name":"Premise","score":0.5683000087738037},{"id":"https://openalex.org/keywords/memorization","display_name":"Memorization","score":0.5548999905586243},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5088000297546387},{"id":"https://openalex.org/keywords/recall","display_name":"Recall","score":0.4885999858379364},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.38350000977516174},{"id":"https://openalex.org/keywords/language-model","display_name":"Language model","score":0.3662000000476837},{"id":"https://openalex.org/keywords/copycat","display_name":"Copycat","score":0.3237999975681305},{"id":"https://openalex.org/keywords/random-oracle","display_name":"Random oracle","score":0.31459999084472656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7479000091552734},{"id":"https://openalex.org/C2778023277","wikidata":"https://www.wikidata.org/wiki/Q321703","display_name":"Premise","level":2,"score":0.5683000087738037},{"id":"https://openalex.org/C30038468","wikidata":"https://www.wikidata.org/wiki/Q4354775","display_name":"Memorization","level":2,"score":0.5548999905586243},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5088000297546387},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.4885999858379364},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.421999990940094},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.39660000801086426},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.38350000977516174},{"id":"https://openalex.org/C204321447","wikidata":"https://www.wikidata.org/wiki/Q30642","display_name":"Natural language processing","level":1,"score":0.3695000112056732},{"id":"https://openalex.org/C137293760","wikidata":"https://www.wikidata.org/wiki/Q3621696","display_name":"Language model","level":2,"score":0.3662000000476837},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3361000120639801},{"id":"https://openalex.org/C130191384","wikidata":"https://www.wikidata.org/wiki/Q2996887","display_name":"Copycat","level":2,"score":0.3237999975681305},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.31459999084472656},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.2996000051498413},{"id":"https://openalex.org/C171686336","wikidata":"https://www.wikidata.org/wiki/Q3532085","display_name":"Topic model","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C184337299","wikidata":"https://www.wikidata.org/wiki/Q1437428","display_name":"Semantics (computer science)","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2750999927520752},{"id":"https://openalex.org/C56666940","wikidata":"https://www.wikidata.org/wiki/Q788790","display_name":"Documentation","level":2,"score":0.2736999988555908},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C67277372","wikidata":"https://www.wikidata.org/wiki/Q7449085","display_name":"Semantic role labeling","level":3,"score":0.263700008392334},{"id":"https://openalex.org/C2778571376","wikidata":"https://www.wikidata.org/wiki/Q1355821","display_name":"Frontier","level":2,"score":0.25859999656677246},{"id":"https://openalex.org/C2987098735","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"Recall rate","level":2,"score":0.25609999895095825}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.20957","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.20957","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.20957","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.20957","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.5193005204200745}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Frontier":[0],"LLM":[1],"companies":[2],"have":[3,41,235],"repeatedly":[4],"assured":[5],"courts":[6,234],"and":[7,30,40,85,109,150,211],"regulators":[8],"that":[9,58,166,203,212,216],"their":[10,49],"models":[11,65,178],"do":[12],"not":[13,139],"store":[14,206],"copies":[15,207],"of":[16,37,45,92,128,208,228,242,246],"training":[17,64,143],"data.":[18],"They":[19],"further":[20],"rely":[21],"on":[22,121,159,168,220,239],"safety":[23],"alignment":[24],"strategies":[25],"via":[26],"RLHF,":[27],"system":[28],"prompts,":[29],"output":[31],"filters":[32],"to":[33,66,87,90,141,194],"block":[34],"verbatim":[35,98,126],"regurgitation":[36],"copyrighted":[38,94,129,209],"works,":[39],"cited":[42],"the":[43,183,187,213,240],"efficacy":[44],"these":[46,61],"measures":[47,243],"in":[48,186],"legal":[50],"defenses":[51],"against":[52],"copyright":[53],"infringement":[54],"claims.":[55],"We":[56],"show":[57],"finetuning":[59,119,152,158,167,219],"bypasses":[60],"protections:":[62],"by":[63],"expand":[67],"plot":[68],"summaries":[69],"into":[70],"full":[71],"text,":[72],"a":[73,225],"task":[74],"naturally":[75],"suited":[76],"for":[77],"commercial":[78],"writing":[79],"assistants,":[80],"we":[81],"cause":[82],"GPT-4o,":[83],"Gemini-2.5-Pro,":[84],"DeepSeek-V3.1":[86],"reproduce":[88],"up":[89],"85-90%":[91],"held-out":[93],"books,":[95],"with":[96],"single":[97],"spans":[99],"exceeding":[100],"460":[101],"words,":[102],"using":[103],"only":[104],"semantic":[105],"descriptions":[106],"as":[107],"prompts":[108],"no":[110],"actual":[111],"book":[112],"text.":[113],"This":[114],"extraction":[115],"generalizes":[116],"across":[117],"authors:":[118],"exclusively":[120],"Haruki":[122],"Murakami's":[123],"novels":[124],"unlocks":[125],"recall":[127],"books":[130,185],"from":[131,175,179],"over":[132],"30":[133],"unrelated":[134],"authors.":[135],"The":[136],"effect":[137],"is":[138],"specific":[140],"any":[142],"author":[144,148],"or":[145],"corpus:":[146],"random":[147],"pairs":[149],"public-domain":[151],"data":[153],"produce":[154],"comparable":[155],"extraction,":[156,164],"while":[157],"synthetic":[160],"text":[161],"yields":[162],"near-zero":[163],"indicating":[165],"individual":[169,221],"authors'":[170,222],"works":[171,210,223],"reactivates":[172],"latent":[173],"memorization":[174],"pretraining.":[176],"Three":[177],"different":[180],"providers":[181],"memorize":[182],"same":[184,188],"regions":[189],"($r":[190],"\\ge":[191],"0.90$),":[192],"pointing":[193],"an":[195],"industry-wide":[196],"vulnerability.":[197],"Our":[198],"findings":[199],"offer":[200],"compelling":[201],"evidence":[202],"model":[204],"weights":[205],"security":[214],"failures":[215],"manifest":[217],"after":[218],"undermine":[224],"key":[226],"premise":[227],"recent":[229],"fair":[230],"use":[231],"rulings,":[232],"where":[233],"conditioned":[236],"favorable":[237],"outcomes":[238],"adequacy":[241],"preventing":[244],"reproduction":[245],"protected":[247],"expression.":[248]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-25T00:00:00"}