Tian-Hao Mao

Training-Data Extraction from Genomic Language Models

An output-only black-box attack on Evo 2 is presented that selects convergent groups of repeated generations without gradients, token likelihoods, or training-corpus access during candidate selection, establishing convergence among repeated nucleotide generations as a practical output-only signal for recovering long tr...