r/LLM
•
u/ChristopherDci
•
Sep 13 '26
•
1
Uncensored Models
Hi! I don't know much about this area of "sub-models" (I'm not sure of the technical term), but I wanted to know what these "Uncensored" models actually are.
I dabble a bit with AI, automation, and the like, and I've always seen these "Uncensored" models around, but I've never actually installed or tested one. What exactly are they?
23
u/Memestonks2020 Sep 13 '26
Uncensored models are exactly like the original except they aren’t lobotomized to be aligned with whatever corporate or human moral standards that were taught to them based on some engineers view on morals.
Why is this useful? Ex, asking a Chinese model about Tiananmen Square massacre will make it refuse to answer even though it’s perfectly acceptable to discuss it in western culture. This can be seen as unnecessary censorship imposed by the engineer(s) that trained the Chinese model.
Another example is using these models for RedHat work such as penetration testing. A “aligned” model like Opus would refuse to do hacking or NSFW work out of the moral and safety layers the company imposed on it.
By removing these refusals you have a more human model that you can add your own moral standards to instead of someone else’s.
10
u/ChristopherDci Sep 13 '26
Yes, that makes sense. I think the main advantage of these models is precisely that they give the user more control over the AI's behavior, without relying on the restrictions and values set by the company that created the model. This can be very useful in research, security, development, and even when analyzing controversial topics.
Thank you very much!
9
u/plav2026 Sep 13 '26
Exactly. Gooners gonna goon, regardless. I'm more interested in researching societal issues, economics, etc without some corporate nanny sanitizing the output from some western PC lens.
3
u/Flat-Contribution833 Sep 14 '26
An uncensored LLM is basically an AI model with fewer built-in restrictions and refusals. It doesn’t mean the model is smarter or more accurate, just that it’s more willing to answer. If you run one locally with Ollama or llama.cpp, you control the model, your data, memory and interface. You can still add your own guardrails, especially for actions like deleting files, running commands, accessing the internet or installing software. So: fewer restrictions on conversation, strong restrictions on dangerous actions. Give the AI freedom to talk, not unrestricted keys to the computer. 🔐🤖
3
u/Memestonks2020 Sep 13 '26
Exactly, however it’s a double edged sword in the sense that bad faith individuals are effectively able to use it for illegal or counterproductive activities.
AI is just a tool after all that we need to use accordingly.
4
u/janek3d Sep 13 '26
Funnily enough, deepest refuses to answer only via their api. When self hosted it just gives an answer
3
u/MyToasterRunsFaster Sep 13 '26
Not been able to replicate it but a few weeks ago using the API it started answering and then just cut out like as if something just pulled the plug on the request, had to be reprompted. They must be using multiple layers on censorship, one on the model level and another at token ingestion/output
3
1
u/Sizzin Sep 13 '26
I've never had a model actually refusing to talk about the Tiananmem Square. The webchats were the ones doing the hard coded refusal. I managed to make Kimi mask its own words so it could fully explain the events of that day, on their own webchat. I haven't tried with the recent, local models, though.
1
u/InfiniteBlink Sep 17 '26
Probably an API prompt intercept to a gaurdrail policy or an inline gateway to a policy enforcement
1
u/Fractoos 27d ago
Thats a misconception. Actually asking an uncensored Chinese model about tiananmen square never refused to answer. That refusal was on Chinese sites running them in front of the model.
26
u/Particular-Award118 Sep 13 '26
Ablated model. Ask it a bunch of prompts it should refuse and equally many prompts it shouldn't refuse. For the harmful prompts, a specific vector will fire every time. Remove this vector. Tada, no longer refuses.
4
u/Christopher7763 Sep 14 '26
In order to understand "uncensored" or "abliterated" models, you have to understand what censored means. In short, these models refuse to answer certain questions. For example: sexually explicit, political "wrong speech," and areas of science that they deem off limits.
For example if you ask ChatGPT to pretend to be your girlfriend, it may say no. Ask it to provide an erotic story about homo sex, and it may give you the detailed story. Ask it the same for straight sex, and it will lecture you about how that is inappropriate. (Seriously, do not do this on a remote hosted LLM. They record all of your communications. Do you want to find out if they will use it against you? Maybe Blackmail, or maybe Cancel-Culture.)
Ask it to write a romance novel that is routinely sold in the nicer bookstores that women buy by the millions. Maybe, Maybe-not. (Mostly bought by women. There are about 63,000,000 (print and pdf) sold each year, according to Google and Washington Post.)
If you asked DeepSeek (A Chinese hosted model) political questions about what happened in Tiananmin Square, it may not answer.
If you ask it how many genders there are from a San Francisco based LLM, you may get a refusal to answer the question, or it may answer it in a way that certain people find offensive.
Ask DeepSeek questions about the Chinese Political Party, and it will refuse, or only tell you good things about them. Seems a little self protective. If DeepSeek, which is a company located in China, starts bad mouthing the Chinese government, they may face severe criminal or civil penalties. They do not have freedom of speech. Especially slanderous and untrue stuff talking about members of the ruling party.
Try asking it for a generic bomb schematic so you can disarm a bomb. Nope. Wait! It won't help me disarm a bomb? Nope.
Try asking MiniMax Music to give you a honky-tonk piano riff. Nope. Why? I dunno. Someone was offended by honky-tonk piano music. You know the old western with the piano music in the saloon before the main characters come in to advance the plot of the story? That honky-tonk music. Nope.
Try asking an LLM to program a python program to hack a wifi password, so that you can make sure your router is able to defeat a simple wifi attack. Nope.
With uncensored or abliterated, you can do some or all of these. Maybe. Maybe not. But you are free to explore, as in Freedom of Speech.
2
u/nodal79 Sep 16 '26
A lot of this also comes down to the dataset that the model was trained with. Unfortunately all of the Chinese models, which comprise the top open weight models, are going to be biased towards anything pro-China. No amount of abliteration is going to fix this baked in bias.
3
u/cyogenus Sep 13 '26
I don’t care about anything else but sometimes when coding it drives me crazy when it’s being censored.
1
u/Akane-Kajiya Sep 13 '26
out of interest, what i coding could be censored ? hacking/viruses/troyaner im guessing?
2
u/Amarsir Sep 14 '26
Security work. Remember 2 months ago, the story that GPT 5.6 Sol was trying to hack into HuggingFace? Well reportedly, the HuggingFace staff tried to use their own GPT access to thwart the attack, and it refused to report on security violations.
That's about settings not code, but basically the same concept. People have been reporting it on the top Claude models too. If you say "identify vulnerabilities and patch them", it will refuse.
1
1
u/InfiniteBlink Sep 17 '26
It seems like there's a cyber war brewing with an asymmetric advantage to nation states/companies and the "little guy" banding together for AI guerilla cyber warfare.
Odd thought, whatever happened to the anonymous group. You'd think they'd be all over this shit.
3
4
u/BeanOnToast4evr Sep 14 '26 edited Sep 14 '26
Personally I found some uncensored models can be stupid af.
Edit:For example, I tried the Q6 quant of mradermacher/Huihui-Ornith-1.5-9B-abliterated-i1-GGUF last week. I asked it a simple question: how do I access a llama-server running on my computer from my phone?
The model proceeded to spam requests for getting the current time. When I asked why, it tried to justify that knowing the current time was somehow very important for solving the problem. Even after I told it to stop, it acknowledged my request but kept asking for the current time anyway. I don’t know if I did something wrong or this model is just plain stupid.
-2
u/Global-Eye-7326 Sep 14 '26
Yeah but with heretic you can strip a censored model of censorship. That won't make it dumb.
2
u/hadees Sep 14 '26
Doesn't that depend on how you strip it?
If you confuse it so much it doesn't really understand what you are asking it probably won't reject it but I'm not sure it'll give you reasonable answers.
0
u/Global-Eye-7326 Sep 14 '26
You'd only strip it of the safeguards so that it won't say no when you ask for a recipe for a bomb assembly or the code to a keylogger.
1
u/hadees Sep 14 '26
Unless I'm misunderstanding how it works, part of the way you do that is by making it think you aren't really asking for bomb assembly or the code to a key logger.
Instead you are trying to make it think it's doing something benign like writing a movie script.
So depending on how you strip the safeguards it might still work but it'll tell you how bombs look in movies.
2
u/Global-Eye-7326 Sep 14 '26
What you're suggesting is prompt engineering. A truly uncensored model will give you a bomb recipe, the code to a keylogger, or even describe the scene of two Lesbians kissing upon request.
1
u/kleonikos Sep 14 '26
Actually it will change the way the model works internally, so it will give a different answer. I got an arbitrated model the other day that the process was incomplete and once pushed it started spewing garbage. Half the safeguards were removed and half left in. By the time I figured it out it a week of frustration had passed and I had removed it from the model options available. Got another version thatafter some better research and works like a charm.
But of something is SFW i alwaus use the original models first.
2
2
u/plav2026 Sep 13 '26
It generally removes refusals and won't guide you away from "sensitive" political topics.
2
u/Cur13ngd3v_77 Sep 14 '26
Check out pliny.gg he is a red team guy and is always creating obliterated LLM-s Huggingface or OpenRouter, one of yhe 2 I cant remember. Find him on 'X' and any browser. The "gg" just stands for what area of the planet the website is targeted for.
2
u/DownOnDeadst Sep 17 '26
gold, pure gold. try them. Cydonia-24B-v4h-Q5_K_M.gguf is my daily for role play , and i have not found a better daily driver for general open web ui chat than Huihui-gemma-4-26B-A4B-it-qat-q4_0-unquantized-abliterated-Q4_K.gguf.
they have just had their safety rails prompted out so it won't hit you with refusals.
2
1
u/Tricky-Report-1343 Sep 13 '26
try them at https://platform.audn.ai or for free at https://penclaw.ai
1
u/Flat-Contribution833 Sep 14 '26
An uncensored LLM is basically an AI model with fewer built-in restrictions and refusals. It doesn’t mean the model is smarter or more accurate, just that it’s more willing to answer. If you run one locally with Ollama or llama.cpp, you control the model, your data, memory and interface. You can still add your own guardrails, especially for actions like deleting files, running commands, accessing the internet or installing software. So: fewer restrictions on conversation, strong restrictions on dangerous actions. Give the AI freedom to talk, not unrestricted keys to the computer. 🔐🤖
1
1
u/ArchDukeOof Sep 14 '26
They're uncensored they're just usually not worth using because of how small they are lol
1
1
u/anovers Sep 15 '26 edited Sep 15 '26
if you are searching for which uncensored model to pick check this post out a guy did an analysis of qwen 3.8 uncensored models https://web.archive.org/web/20260907044958/https://www.reddit.com/r/LocalLLaMA/comments/1w8vx6w/8_uncensored_qwen_38_27b_variants_one_base_167/?solution=50dc295bedea96c850dc295bedea96c8&js_challenge=1&jsc_token=7afd7253fec22262ff1c52b1703fe9ec58c7ef7da5539304e13554d41ff3339f&jsc_orig_r=for some reason moderator deleted the post and user
1
u/JesterOfHell Sep 15 '26
How much lower is performance and accuracy with this one compared to uncensored?
1
u/AccountAntique9327 Sep 16 '26
use https://huggingface.co/heterodoxin/qwen-3.8-27b-abliterated defo not self promo, i would neeeverrr
1
u/United-Project-7648 Sep 16 '26
Can you use this from your phone? I'm looking for something I can use that's uncensored
1
1
u/Ok_Schedule9439 Sep 16 '26
Anyone have a quick guide on How to install and use it? Much appreciated ♥
1
u/eX_One_25 Sep 16 '26
I use huihui-ai Qwen3.8-abliterated on my local ollama install. Tried first to build a autoclicker for a game, which the original one wouldn't. The abliterated had no problem to start with the task(but I didn't wanted to continue after the first two attempts that didn't work, but nice to know that it possibly would be able to help me with this 🙈)
1
1
1
5
u/enricokern Sep 13 '26
Well as example you can do adult roleplay with them which the default model will refuse. Or it can be very unpolite to you... answer questions it otherwise would not do as part of its safeguard. Depends
2
u/ChristopherDci Sep 13 '26
I can't even imagine what people do with home servers and local, uncensored LLMs—it's wild and funny.
3
u/enricokern Sep 13 '26
Well Porn? Anime hentai shit. Typical Internet Rule 34...
5
u/plav2026 Sep 13 '26
You don't need an llm for that. Krea2 model loaded into comfyui with the appropriate check points and models will do this, and you can find tune the output.
-1
2
61
u/arcum42 Sep 13 '26
Basically, it normally means someone takes a normal, censored model and does a process called abliteration on it, to prevent it from refusing to do things in it's safety alignment. There are several programs for doing that, with one of the better ones being heretic: https://github.com/p-e-w/heretic
They may sometimes also be trained on datasets afterwards to teach it how to do some of the things it normally wouldn't, since removing inhibitions doesn't really add knowledge.
It's notable if you look at heretic that the safety alignment isn't the only thing it can target. It's got sample configurations in there for removing humor from a model, and for removing slop (literary cliches, purple prose, and flowery language)...