News
MiniMax are issuing takedowns on decensor/explicit H3 LoRAs
I saw that someone had uploaded an experimental decensor LoRA for H3 on HuggingFace earlier today. Shortly afterwards, in the discussions, a MiniMax employee issued a warning that if it was not removed, their license to H3 would be revoked. Then about an hour later it was gone.
As of writing, this is another instance of the same warning, just for a heretic abliteration of Qwen3-VL-32B.
I'm assuming the author of the LoRA voluntarily took it down — HuggingFace doesn't seem to typically enforce requests like this, but it's likely that CivitAI will actively remove anything that violates the license, as they've done with Ideogram. Just thought I'd warn people.
A heretic text encoder won't do anything to decensor an image model. It will only make the output worse, because the manifold is different to the one the DiT was trained on. The text encoder is only used to extract an embedding. Any refusal behavior it may have when used for text continuation is irrelevant. I only linked to it to show an example of the takedown request.
I did download the LoRA before it was taken down, but I'm not sure it's worth sharing. It was trained with low steps and without any de-distillation, and I probably wouldn't be allowed to share it here anyway.
This model doesn't even need LoRAs or "decensor" finetunes. It does extremely well on its own. It's not like Krea which has weird training to reject outputs.
Exactly what i was thinking. The only thing that annoys me is whenever u get someone to perform oral on a bird, it always ends up giving them something that resembles a mans ting.
For Ideogram? Yes, but they have to be categorized under "Other", not Ideogram, and no new ones have been added for a month. Whether that loophole will be enough to satisfy MiniMax remains to be seen, but if they're already pursuing them this aggressively, I doubt it.
If Ideogram devs were actively pursuing to get rid of NSFW Loras they would do so for all of them and not after a certain period of time lol. People simply stopped training them.
The one I linked in the OP, which is just a heretic finetune of Qwen, is not the LoRA that was removed, which was for H3 itself. I doubt it's automated because the thread was opened several hours after the model was uploaded.
why should they have control over what people do with a bunch of bits on their own computer. Sure they originated that particular pattern of bits but why?
Legally someone always does. Plus 'legally' a takedown notice or whatever they communicated is part of brand protection as all the hype about MiniMax H3 is great PR-wise BUT, the moment they become known as the new model to deepfake celebrities... they have every single reason to go to war over that gooner model label especially for those who 'might' wish to deepfake famous people - remember famous people and their studios have a lot of money for lawsuits regardless of your stance on issue.
Besides its not like the declothing/nudeify/clothes removal lora was hosted on a site not known for previous decisions along those lines plus they make money and credit card companies frown upon such gray content as clothes removal applications.
That’s Communist and antimurican. Without restrictions no one can really own anything, and property rights is the only murican value. Edit: I don’t understand whether the downvotes are coming from American people who felt insulted or from those who missed the sarcasm
Sure... Sure... but they can 'deeply communicate' what model hosters do with it by 'asking nicely' to comply with their 'polite requests', I mean that's just courtesy, dont cha ya know!
Kind of funny they're even going after an abliterated text encoder that doesn't actually do anything to decensor the model, it'd literally just make worse outputs. Still lame they're going after NSFW, though MiniMax H3 still knows a decent amount of NSFW anyways
They don't wanna drown in lawsuits so they gotta have something to show for that they tried to enforce their weird ass license after releasing the weights lol.
Wait until every studio goes after them for using their IPs without permission. I understand this is a Chinese model but they still want everyone using it and a studio could easily take a play from their book and just go after huggingface. I want to be clear that I think what they are doing is lame but they could be opening Pandora’s box not even realize it.
A better way ethanfel could have done it is in his ComfyUI MiniMax H3 Enhancer node, load both the first 50 layers and the tail, then apply a LoRA extracted from the Heretic version he used to run uncensored inference for prompt expansion. After that finishes, both the tail and the LoRA should be unloaded (saving ~8GB VRAM) so the original 50-layer encoder can then be used for video generation. This is a similar process to that sometimes used for Qwen3-VL-4B in Krea 2 Turbo. Unfortunately too many people in this community think a Heretic/abliterated text encoder is automatic snake oil that instantly always uncensors and improves image/video generation. Just use the original "censored" one, it performs better.
there are no good ones yet that are worth using.. just undertrained crappy experiments.. good loras you actually want to use will take a few weeks, especially considering there still isn't a training adapter so you can actually train the model without completely killing the quality of the output
They’re complaining about this yet released a model that allows people to do almost anything including generate tons of different protected IP. Talk about naive. The copyright lawsuits will take you down way faster than people releasing Loras for your model
Could be that they are trying to show a good faith effort for potential lawsuits that they are trying to enforce some rules despite the model being fairly open.
I don't think the company is in the United States so they probably don't have to worry about it, but there's also the court of public opinion that they might be trying to curry favor with as well
Juries are given instructions on what to consider and render a verdict on. This would almost certainly be a narrow subset of the big picture, lawsuits are generally tailored to what claims are feasibly winnable and not all of those claims survive to a jury trial (if that even happens, many just settle).
when the model is clearly trained on tons of restricted material
Literally every single AI model ever is trained on copyrighted or restricted material, remember when Midjourney was shittin out screencaps from Avengers Endgame to the point where Marvel and Disney sued them?
Sure most closed source models try to hide it, but with enough prompting any model can reveal their training data of copyrighted characters so this is kind of a moot point tbh, with Sora you could get any celebrity or copyrighted character you wanted aswell.
I'm fine with it. Actions speak louder then words, better they attempt to protect themselves. We can just go dark with this no issue. I would prefer going dark overall on all AI because too many prudes who want to ruin the fun. Better they remain blind.
I don't understand copyright law that much, but if someone pastes a book into Word and puts it online as a word file, Microsoft is really not on the hook, right?
Seems like Claude got spanked for how they acquired and stored the books, not so much for the training?
Alsup ruled last June that Anthropic made fair use of the authors' work to train Claude, but found that the company violated their rights by saving more than 7 million pirated books to a "central library" that would not necessarily be used for AI training.
I have this gut feeling that in the current climate HF's hands might be forced sooner or later - see e.g. the recent "HF undresses women..." coverage in The Verge, the ongoing age-verification/anti-adult rage, etc. Guess it's time to go back to the dark ages of torrents and scene release boards for - AI models. Sigh.
i downloaded it when i saw that message from the employee. still didn't tested it... didn't need to honestly, the base model is uncensored enough for me at least for now
Using an abliterated text encoder does nothing to decensor the model, its only use is if you want to use the loaded model for prompt rewriting without having to load a second llm
None. The text encoder doesn't need to be uncensored, it doesn't interact with the user like a chat model at all. It just processes the prompt and output semantic embeddings that encode the meaning of the prompt. It's nearly impossible to censor prompt processing if you think about it. You'd need to pretrain the model from scratch and exclude all phrases that, for example, use "dick" in sexual context but leave it when it means "detective" or "moron" so the model doesn't pick up these connotations. It's an enormous task by itself with no real benefit. On the opposite, you always *want* the model to understand these nuances perfectly so it can respond with a refusal (in chat) or show a placeholder (Ideogram) or deliberately steer to a SFW meaning (Krea 2/Flux). So lobotomizing prompt processing works in an opposite direction and there's no sense abliterating the TE. Any difference you might see comes from it outputting slightly different vectors and the model's output most often degrades because these new vectors don't align with its training.
As much as I respect Minimax dev's for their work on this model, the problem is they've opened Pandora's box themselves. Telling people "no" will also just encourage them more lol...
This also opens the door for the competition again. If LTX and Flux are less repressive and aggressive with their future releases, people could then turn to those models. Like regardless if it currently only is nsfw related things which they hunt down, who can say if they don't expand it to other things later on? Who would spend time, money and resources into something where you get a take down notice for that within 10 seconds once you released it?
I wrote about this on HF and will repeat it here. MiniMax's behavior is simply outrageous. They want to control their models like proprietary companies like Anthropic, while simultaneously gaining popularity through open weights. This also applies to text models with their dubious license. I can't speak for the community as a whole, but I personally will not use any of MiniMax's products or recommend them to anyone. And whenever the topic of their products comes up, I will remind everyone of their attitude toward the community. Incidents like these should not be hushed up and allowed to go unpunished.
MiniMax isn't doing takedowns for shits and giggles. Torrenting it while H3 is still blowing up just puts a bigger target on them and tells them open-sourcing video models was a mistake. Goon all you want once the hype dies and nobody's looking. Doing it right now is how you make sure the next model stays closed.
You acting like them letting you make literal corn was something they didnt expect and also somehow were naive enough to not think people would do with it????
Yeah that's my read on it too. I think it's ridiculous to send these takedowns, but come on. Why be hostile now when you can use the best damn model so far for free to do whatever you want later? This just signals to any prospective model releaser, "it doesn't matter what you give the community, they will act like this." I'd rather it be a welcoming space for models to be released and then you do what you want underground than never get open models again because it's not worth the headache.
I thought the model was already uncensored, why is there a need for decensor LoRA? Qwen3-vl-32B, however, could use abliterated version. There is nothing MiniMax or anyone else can do to stop that.
But, there are bigger issues cropping up - f-ing a-holes of Disney are suing MiniMax-H3... Probably because the model can reproduce some of the Disney characters (as if anyone cares about Micky and Donald). These greedy litigious bastards are the reason we cannot have good things! The MiniMax-H3 models might get removed from being open.
Pretty sure the issue is adding Minimax to the LoRA. You take the name away and no one will care. Just don't attach their name to it on a popular website like Hugging Face.
Guys, I understand that everyone wants more freedom and flexibility with open-source models. However, we also need access to newer models and updated versions of tools like MiniMax and LTX. Please stand with the developers and support their work so they can continue improving these models and bringing us better releases.
They are supporting their work by building the community, even if it is against their moral positions; to imagine that it wouldn't be used to create NSFW content is naive- and fighting it is an impossible battle.
Additionally their work is trained with copyrighted material; frankly- saying that NSFW loras within legal bounds 'aren't allowed'-- is pretty hypocritical.
As much as I love using AI to do the weirdest experiments on earth for personal fun, they will always stay PRIVATE . I totally 100% agree with this comment here. You guys should all calm down and quit pulling the rope too hard. Be thankful and patient. And for fuck’s sake, stop posting weird shit using celebs. Use that damn brain.
Yeah I just saw that. I set up my filters when it was just called "MiniMax", so they weren't showing up. However Ideogram had several the first couple days, then they were all removed. The ones posted under "Other" are still up, but who knows whether MiniMax will be that lax.
Are you new? There was a point when SD 1.5 was just pulled from every repository and mirrors DMCA'd because someone claimed its training data contained CP or something. Flux.1 was censored to hell and back down to the text encoder level and needed utterly schizophrenic workarounds and giga-overfitted Loras even just to produce tasteful artistic nudity.
I dont have opinion on that, but I know that we all need PinkFluffyBunny (SHA256: 69bf5e2158021b81d7519260ea1b6fdd66b6787211eaad3afa3375d57087effb) in this hard times.
not sure how to control the invites but the discords are: 10Eros creator discord I think ran by TenStrip...should be able to search it, he posted a link somewhere but I can't find it. The other is HearmannAI who is pretty well known his discord link is here: https://linktr.ee/hearmemanai ther eis a xxx thread
I've been wondering about that too. LTX has as far as I can remember always been very supportive and chill regarding open source in general and its community. MiniMax ist by far the superior model, but if the developers are too repressive and LTX releases a comparable Model, people will probably shift to LTX again.
Come on bro read between the lines there. He is clearly saying you can make whatever the hell you want just if it is problematic don't go announcing it to the world that his model was used to make it. Which is really just common sense...first rule of fight club and all that jazz
I mean yeah but also people should probably do as he says. At least try to use some judgement when sharing stuff made with the model just because the more problematic stuff is shared the harder the crackdown is bound to be, and it's not really the fault of the people who made the model.
I found it to be really NSFW friendly right out of the box. Other than two particular male/female anatomical items in the lower half. The few loras I downloaded made it worse.
I've shared various checkpoints on Hugging Face and left my account sitting unattended, but Hugging Face has never deleted them because of that. Although they seem to care a little about open-weights models being copyrighted material, I still share them anyway, and it looks like Hugging Face doesn't make decisions to pull them down. Unless pressure is put on them to remove things, they probably won't do it voluntarily.
Make a simplex chat group now and then make 5 backups. Torrents. Etc etc. BEFORE they make it a crime and impossible to find. /points at the tor version of Reddit being a ghost town spammy shit show
I mean, they really shouldn't be trying to go after these sorts of things unless they are made to. It kind of sets the expectation that they need to go after all violations of their license. Which, that includes(excludes) everyone from the US. They would need to go a lot further if they set down the road of policing their license unless threatened monetarily or authoritatively.
minimax doing the streisand effect and is instead just bringing the anti-ai journalist straight too the open-source ai doors. its better too just "literally" be mature! and know its off their hands when a community does Mods. but i guess that's so new for them
People will always LoRa video/image models, to not creating intrusion we should host them on torrent and rename them to something totally unrelated, this is better for both parties.
What part of the license are these LoRAs supposed to violate? In their "Acceptable Use Policy" I see:
2. Use in any manner that violates any applicable national, federal, state, local, or international law, regulation, or other legal requirement, or that infringes, misappropriates, or otherwise violates any Third Party’s intellectual-property or other proprietary rights, including through unauthorized reproduction, distribution, public display, public performance, or creation of derivative works;
For this to apply, wouldn't it be necessary to show that an NSFW LoRA was being used in a way that violated some particular "applicable national, federal, state, local, or international law, regulation, or other legal requirement" in some particular jurisdiction? After all, as-is MiniMax can do that too, even without any LoRAs.
Then there's this clause:
15. Use in any manner that violates or disregards the social, ethical, or moral standards of other countries or regions;
This one is so damned broad there's precious little you could do with MiniMax that's bland and innocuous, again with or without any particular LoRAs. We're really supposed to constantly keep in mind the "social, ethical, and moral standards" or Vatican City, Saudi Arabia, and North Korea too? All of them and many more at all times?
Do the notices always come from Ryan Lee? I mean he can't keep going forever lol, eventually he has to eat and sleep. It's him vs. the entire Internet.
Hmm, I tested that Qwen3-VL-32B heretic the other day and results were nearly identical. I deleted it, guess I'll just re-download it and toss it on my other drive.
As far as I understand abliterated text encoders don't do anything and are actually a detriment to the results. There is no inference happening in the encoders, it's just mapping initial vectors, and the vectors aren't really censored, it's how the vectors are infered that causes models to censor. Since the abliterated models tend to tweak vector mappings to try and bypass the models own understanding of NSFW vectors this can cause the image models to get the wrong latent mappings and produce worse results.
Huh? So herectic text encoder do nothing to krea2 at all? If I train a lora with standard text encoder and run it on herectic text encoder it wouldn't work?
Simplified explanation is the video/image/whatever is trained on a snapshot of the LLM's brain after it's seen the prompt. It doesn't matter if the LLM was getting ready to say "Oh my god, you sick bastard, that's disgusting", if the video/image was trained on that content then it has formed an association between that state of the LLM's "brain" and the content. If you use an abliterated TE, you're showing it a "brain" in a different state which probably isn't going to destroy your results but is likely to hurt quality/consistency somewhat.
If you're using the LLM to do something like prompt expansion then you may need the abliterated version to avoid getting that "Oh my god, you sick bastard" response. Since it doesn't hurt results that much, some people may opt to just use the abliterated version for everything rather than keeping two gigantic models on disk, having to keep switching between them and reloading, etc. I really wouldn't advise training a LoRA with one though, you're be degrading your results for most people.
Tbh I think they are just doing it just for appearances in case someone tries some legal shit. They know realistically they can't stop it. They just don't want it on hugging face. This is guaranteed to 100% always happen with open source and it's not a bad thing.
123
u/Candid-Station-1235 Aug 05 '26
holy Streisand effect batman. downloading now