gcdRadar
archive/Research/AIR-2020-0024
closedclosed 6 Nov 2020Research1 Research / proof of conceptAI

GPT-2 Model Replication by External Researchers

GPT-2

Researchers successfully replicated OpenAI's GPT-2 language model prior to its full release using publicly available technical information. The event highlighted risks related to tiered release schedules.

first report
23 Oct 2020
last update
23 Oct 2020

Timeline · 3

  1. 23 Oct 2020GPT-2 Model Replication
  2. 23 Oct 2020Wired Article, "OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway"
  3. 23 Oct 2020Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too"

Sources · 3

News and write-ups

  1. 2020-10-23
  2. 2020-10-23
    Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too"
    blog.usejournal.com · blog.usejournal.com/opengpt-2-we-replicated-gpt-2-because-you-can-too-45e34e6d36

Research and catalogues

  1. 2020-10-23
    GPT-2 Model Replication
    MITRE ATLAS · atlas.mitre.org/studies/AML.CS0007

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
Attack on AI
categories
Model theft / extraction
severity
1 · Research / proof of concept
targets
OpenAI, Open-weight model
dates
happened 22 Aug 2019 · first reported 23 Oct 2020
origin
MITRE ATLAS
Derived from MITRE ATLAS (Apache 2.0, © MITRE).
record
confidence 0.90 · created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# GPT-2 Model Replication by External Researchers

https://gcdradar.vercel.app/incidents/gpt-2-model-replication-by-external-researchers · AIR-2020-0024 · closed 2020-11-06

- Lane: Research
- Severity: 1 (Research / proof of concept)
- Fix status: Fix status unknown
- First reported: 2020-10-23 (happened 2019-08-22)
- AI role: Attack on AI
- Products: GPT-2

## Summary

Researchers successfully replicated OpenAI's GPT-2 language model prior to its full release using publicly available technical information. The event highlighted risks related to tiered release schedules.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2020-10-23: Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too" (https://blog.usejournal.com/opengpt-2-we-replicated-gpt-2-because-you-can-too-45e34e6d36dc)
- 2020-10-23: Wired Article, "OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway" (https://wired.com/story/dangerous-ai-open-source)
- 2020-10-23: GPT-2 Model Replication (https://atlas.mitre.org/studies/AML.CS0007)

## Sources

- 2020-10-23 MITRE ATLAS: GPT-2 Model Replication https://atlas.mitre.org/studies/AML.CS0007
- 2020-10-23 Wired: Wired Article, "OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway" https://wired.com/story/dangerous-ai-open-source
- 2020-10-23 blog.usejournal.com: Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too" https://blog.usejournal.com/opengpt-2-we-replicated-gpt-2-because-you-can-too-45e34e6d36dc

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    AI
  2. closed
    AI
  3. closed
    OpenAI API Flaw in OpenAI Compaction Process Enables Reasoning Extraction

    Research · since 26 Oct 2026 · updated 27 Oct 2026

    AI
  4. closed
    AI
  5. closed
    AI
  6. closed
    China-Based AI Companies Conduct Distillation Campaigns Against U.S. AI Models

    Breaches & attacks · Exploited · since 2024 (approx.)

    AI