GPT-2 Model Replication by External Researchers
GPT-2
Researchers successfully replicated OpenAI's GPT-2 language model prior to its full release using publicly available technical information. The event highlighted risks related to tiered release schedules.
- first report
- 23 Oct 2020
- last update
- 23 Oct 2020
Timeline · 3
Sources · 3
News and write-ups
- 2020-10-23Wired Article, "OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway"Wired · wired.com/story/dangerous-ai-open-source
- 2020-10-23Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too"blog.usejournal.com · blog.usejournal.com/opengpt-2-we-replicated-gpt-2-because-you-can-too-45e34e6d36
Research and catalogues
- 2020-10-23GPT-2 Model ReplicationMITRE ATLAS · atlas.mitre.org/studies/AML.CS0007
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- lane
- Research
- AI role
- Attack on AI
- categories
- Model theft / extraction
- severity
- 1 · Research / proof of concept
- targets
- OpenAI, Open-weight model
- owasp llm top 10
- LLM10:2025 Unbounded Consumption
- dates
- happened 22 Aug 2019 · first reported 23 Oct 2020
- origin
- MITRE ATLASDerived from MITRE ATLAS (Apache 2.0, © MITRE).
- record
- confidence 0.90 · created 2026-10-18 06:55Z · updated 2026-10-18 06:55Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# GPT-2 Model Replication by External Researchers https://gcdradar.vercel.app/incidents/gpt-2-model-replication-by-external-researchers · AIR-2020-0024 · closed 2020-11-06 - Lane: Research - Severity: 1 (Research / proof of concept) - Fix status: Fix status unknown - First reported: 2020-10-23 (happened 2019-08-22) - AI role: Attack on AI - Products: GPT-2 ## Summary Researchers successfully replicated OpenAI's GPT-2 language model prior to its full release using publicly available technical information. The event highlighted risks related to tiered release schedules. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2020-10-23: Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too" (https://blog.usejournal.com/opengpt-2-we-replicated-gpt-2-because-you-can-too-45e34e6d36dc) - 2020-10-23: Wired Article, "OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway" (https://wired.com/story/dangerous-ai-open-source) - 2020-10-23: GPT-2 Model Replication (https://atlas.mitre.org/studies/AML.CS0007) ## Sources - 2020-10-23 MITRE ATLAS: GPT-2 Model Replication https://atlas.mitre.org/studies/AML.CS0007 - 2020-10-23 Wired: Wired Article, "OpenAI Said Its Code Was Risky. Two Grads Re-Created It Anyway" https://wired.com/story/dangerous-ai-open-source - 2020-10-23 blog.usejournal.com: Medium BlogPost, "OpenGPT-2: We Replicated GPT-2 Because You Can Too" https://blog.usejournal.com/opengpt-2-we-replicated-gpt-2-because-you-can-too-45e34e6d36dc Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveMixture-of-Experts LLMs Characterizing Recoverable Expert-Utilization Signatures in Fine-Tuned MoE LLMs
Research · since 2 Nov 2026
AI - closedQuantized Deep Neural Networks Revisiting privacy risks and membership inference attacks in quantized DNNs
Research · since 28 Oct 2026
AI - closedOpenAI API Flaw in OpenAI Compaction Process Enables Reasoning Extraction
Research · since 26 Oct 2026 · updated 27 Oct 2026
AI - closedPrivate Evolution Membership Inference Attack on Private Evolution Synthetic Data
Research · since 23 Oct 2026
AI - closedmedical AI models Automated Screening of Privacy Risks in Medical AI
Research · since 23 Oct 2026
AI - closedChina-Based AI Companies Conduct Distillation Campaigns Against U.S. AI Models
Breaches & attacks · Exploited · since 2024 (approx.)
AI