– hrunning these experiments in a clean setting with perfectly deduplicated texts tells us a lot about privacy: – once capacity is sufficiently saturated, the **test examples** are slightly more extractable than the training examples — maybe extraction is a bit of a myth?
– the

→ View original post on X — @jxmnop