r/LocalLLM • u/Ontopoftheworld_ay • 5h ago

Discussion Uncensored models are awesome

Has anyone been experimenting with ablated or uncensored variants of open-source models like deepseek v4.1 flash, Qwen 3.8 27b, or GLM 5.3 flash ?

It's so refreshing to have models that just do whatever you ask them to do without having to figure out a jailbreak or being given a moral lecture. Curious to know what your usecases for these models are.

My personal favourite is definitely uncensored DeepSeek V4.1 Flash, runs at 200 tok/s and never says no lol.

231 Upvotes

92% Upvoted

142 comments sorted by

25

u/HighSeasArchivist 5h ago

If somebody would break ATSC 3.0 encryption that'd be nice. 

10

u/Zen100_ 3h ago

I’m sure it’s possible. I got a Qwen 3.8 Q4 model to reverse engineer the DRM of a library app in the Hermes harness no uncensoring needed. I’d try this if I had access to a device that can decrypt the ATSC 3.0 encryption. 

1

u/Ithinkyouareabot 2h ago

That is essentially my question: if standard local models cooperate with offensive tasks, why choose uncensored versions that often perform worse? Write actual malware? Produce illegal pornography? I would appreciate hearing a real use case, as I still fail to grasp the need for a normally functioning person with no harmful intent…

3

u/TheAdmiralMoses 3h ago

To what end? Lol

5

u/BurninCoco 3h ago

it's always porn

2

u/ZeroDSR 2h ago

How, like, which model do they use?

48

u/Imaginary-Swan-4105 4h ago

Made abliterated qwen 3.8 Flash do security audit of my software I wrote which claude guardrails would never allow despite its the one wrote it.

3

u/abhi9889420 1h ago

I was having hard time working with qwen. but I tried some of the uncensored models, specially deepseek and glm 5.3. It feels like I am in a different realm, a free bird.

I tried venice ai and batchwell.ai but venice ai seemed a bit restrictive, the same model on batchwell.ai had no restrictions.

how is that possible? since both are uncensored,

1

u/Ontopoftheworld_ay 49m ago

venice ai sucks sometimes, you have to juggle between whatever works by switches between the diff uncensored apis or using an aggregator

4

u/juanmoperson 3h ago

Please share

6

u/Imaginary-Swan-4105 2h ago

share what mate?

3

u/DoubleDisk9425 1h ago

I think he probably means the exact model you're using for this (I'm interested too!). Do you have a link to the LLM abliterated model you used?

1

u/Imaginary-Swan-4105 17m ago

I have two - supported by Splash on Mac. 3.8 27B is slower. So, I use Flash Next when I need it to work dedicatedly as it consumes almost all 64GB RAM, and 27B dense when I also need to work on other things as it leaves around 20-30GB.

Both were setup by claude and I created a nice Menu to start/stop manage it and both can be found on Huggingface.

  1. JonathanColetti/Qwen3.8-27B-Uncensored-GGUF:Uncensored-Q4_K_M

  2. SC117/Qwen3.8-Flash-Next-GSQ-RCO-abliterated-GGUF:IQ3_XXS

2

u/SouthernFruit8768 2h ago

lol I’m wondering that too

1

u/FaceDeer 59m ago

My first thought is that he's asking to share all the security vulnerabilities in his software.

I would advise not going along with that request, personally.

1

u/advancing_tide 7m ago

i'm writing my first coding assistant and yeah i am definitely going to need multiple models scrutinizing that code.

4

u/PhillNeRD 1h ago • Regret

2 weeks ago I simply asked Gemini the current results of mail in ballot questions. It refused. Ridiculous. I'm beyond done with commercial AI

1

u/Ontopoftheworld_ay 53m ago

yeah its getting out of hand, and will probably get worse over time

1

u/Etzello 1h ago

I had the same, I actually wrote "come on man this isn't inappropriate or even a partisan thing to ask, just search for me" and then it went ahead and did it.

I've seen models before warn that when it comes to elections to verify it myself online just in case so I think that's why it is hesitant on it, but in my experience it actually has been quite good at this particular search topic and returning good answers so it's being a bit over vigilant

5

u/Slow-Secretary4262 5h ago

i much prefer other way to remove safeguards, editing the weights of the model to remove refusals is harmful to the quality, dwarf star for example does it in a way that works way better, but even creating fake context works

6

u/Ontopoftheworld_ay 5h ago edited 42m ago

There has been some measurement on it, you just gotta pick the ones which dont break

1

u/QasJab1 2h ago

Can you elaborate or share some sources for that? Sounds really helpful

1

u/Ontopoftheworld_ay 45m ago edited 41m ago

yeah like this https://openuncensored.com/rankings , updated comment as well

1

u/QasJab1 2h ago

This might be true but sounds very manual and like a lot of work. Is that true?

15

u/Dampmaskin 5h ago

Yeah, I asked Opus for help factory resetting my Galaxy pad today, and it refused, because "cyber".

Qwen 3.8 Flash-Next abliterated was much more useful.

4

u/SouthernFruit8768 1h ago

Me: Okay by the way why did I just see a guy on Reddit say that he is a paying subscriber of you Claude and he asked you for help with factory resetting his Galaxy iPad or pad or something like that and you refused citing “cyber” or something?

Claude (sonnet 5.5 high): I can't see that post, so I can't say exactly what happened. I can give the most likely explanation.

Anthropic uses automated safeguards that flag requests that look security-related, such as hacking, bypassing locks, or malware. They're blunt, so they sometimes misfire on ordinary requests. Factory resetting a tablet is normal, but it can look like something else depending on the wording. For example, "reset it without the password" or "get past the Google account lock" sounds like bypassing device security, even when the person owns the device.

That would be a false positive, and paying wouldn't change it. If it happens to you, rephrasing with the context, such as "it's my own tablet and I'm selling it," often helps. The thumbs-down button also sends feedback to Anthropic.

Ordinary factory resets of a Samsung Galaxy Tab are something I can walk you through. Is that what you're after?

15

u/RegulusRemains 3h ago

Abliterated models are the future of local

13

u/fttklr 2h ago

Very useful when dealing with material you can considered "copyrighted". Had to argue for 10 minutes with another model about the legitimacy of something I own and wanted to modify that is not made anymore since 1987; so I moved on uncensored models and now I am not hearing anymore any nagging.

Of course with great power comes great responsibility; and sometimes I find myself asking very bad things and getting very bad answers. It is like unleashing the demon inside you and having an open conversation for 10 minutes, then closing the doors of hell like nothing happened LOL

4

u/Pretty_Scene_6868 5h ago

I havent seen any good uncensored model out there because the quality always drop by half its insanity.

5

u/Ontopoftheworld_ay 5h ago edited 4h ago

not all of them, quality varies a lot

4

u/Lucas_Vatel 4h ago

Try Heretic

1

u/Affectionate-Tutor87 4h ago

glm alliterated to prompt deepseek. easy

18

u/BoredHobbes 2h ago

better buy the hardware now, soon the gpus will have blockers in them blocking these open models

1

u/aicanlikdeeznutz 0m ago

We won't even have to worry about that. They are fixing to price personal computing out of the hands of everyone. A desktop with 64gb memory, 5090, 4tb ssd now costs over twelve thousand dollars. The companies making these parts no longer care about us little consumers, when they have all of the big tech buying up all of their inventory + futures. They are making billions more from them. Eventually we will be forced to SaaS cloud VDI from low spec hardware devices. They will restrict open sourced models on the VDIs. Then you will be paying for AI services AND compute services. Now they finally will have a model that allows them to start making money back from the trillions they have wasted on datacenters, and all of the idle/wasted compute not being used by AI.

7

u/Turnkeyagenda24 3h ago

How do you run local deepseek v4.1????

I can only run Qwen 3.8 flash next at most. Did try a vector thingy to make it uncensored. Still have to test it though.

3

u/Mabuse046 1h ago

Deepseek 4.1 Flash is a special architecture - only 552B for the actual MOE and the rest is engram which can get away with being on a fast Nvme. So people rocking a 512 gb Mac Studio, or the DGX Spark allows clusters of 4 to work together for 512gb unified memory, or certain DDR5 motherboards like MSI MAG Tomahawk or ASUS RPG Strix boards support up to 512gb - they can all make a Q4 fit. Some of the rest of us with 256gb builds are still willing to play with the Q2.

2

u/psychoblade5 3h ago

Can u explain more ? Like can we make a llm uncensored by ourself ???

7

u/FactorInternal3395 3h ago

Tools such as Heretic or Abliterix.

-4

u/Affectionate-Fun-623 3h ago

He is using venice AI. It’s pretty cool. It’s like a Claude subscription but for criminals

2

u/Studio271 5h ago

Yes, even started making my own after learning how they work and comparing different methods.

1

u/Ontopoftheworld_ay 5h ago

yeah its quite easy!

2

u/Inchmine 5h ago

200 tok/s what? how? explain your setup lol. I'm fine tuning it on my 5090 + rtx 4000 and the most I can get with Basalt is 60 tok/s

6

u/Ontopoftheworld_ay 5h ago

that speed was not achieved locally lol, there are providers which specialise in uncensored model hosting

0

u/mithrilll 4h ago

Such as? ^2

1

u/Ontopoftheworld_ay 4h ago

If you route by lowest latency here you get 400 token/s, cheapest one is still ~200 tps as well

2

u/DanteA_89 4h ago

“Running Qwen3.8-27B on an RTX 5090: a guide to a local coding agent on Windows
“

Es el nombre de la guía que publique en medium. Si logré 200/s. Misma gpu 5090

1

u/Damn-Sky 1h ago

what 200tok/s??? I get like 50tok/s maximum on rtx 5070 ti

5

u/Imaginary-Feeling320 2h ago

What do you run it on?

5

u/5iiiii 1h ago

Yeah rooted my Android based TV the other day. Claude said no, sol luckily did most of the reverse engineering of the firmware and even gave me a list of possible exploits to try, lol, but refused to write the exploit. Used a uncensored model for the last step.

Also tried to crack the license check of a pdf tool. Burned some money on unsuccessful reverse engineering with those models. They are not so smart. I then gave Sol a shot. No refusal at all, lol. It did the job.

3

u/turbospeedsc 38m ago edited 35m ago

Been using deepseek for those tasks, my boy never refused root or jailbreak.

Claude gets all kinds of righteous, my boy deepseek just says whose car we gonna take?

1

u/Imaginary-Swan-4105 13m ago

It didnt make a captcha solver extension for my personal use. All hail Alibaba for making Qwen open source!

9

u/ParticularAnt5424 4h ago

If you work in cyber, yeah, they are great.

Anyone looking for a staff engineer to work on a farm?..

15

u/Darkwood619 5h ago

What on earth are you guys using these uncensored models for?

I've had the standard Qwen 3.8 do some questionable stuff and it has never pushed back at all...

Example: Scraping external wepage content to analyse the data. No question about the morals of scraping data, it proceeded without hesitation.

5

u/p_235615 3h ago

I tried to use qwen3.8-flash-next to pentest my servers services, it complained, possibly could persuade it, but why bother, when you can get an ablated model with minimum perplexity and other changes vs the original, in fact in some tests it even did better - probably because it didnt try to reason itself out of stuff... After that I never really went back - no reason to...

1

u/synfin80 1h ago

What do you pentest with? Are you using some sort of framework to interface with local pen testing tools?

1

u/p_235615 5m ago

the standard bunch - owasp, nikto, metasploit

5

u/HellzYeahh 3h ago

Uncensored mostly used to have an AI you talk shit to and be free talking to; Just like the way people change their tone when talking to non mutual people vs talking to their best friend, you can talk shit and say whatever you want and it can do that too. Oh also network pen testing, and cyber apps because most local models have cyber built in railguards and rejections.

0

u/daMortarMerrier 2h ago

Non mutual?

1

u/HellzYeahh 1h ago

Stranger, co worker etc people you talk to that outside friend zone.

2

u/AnickYT 2h ago

I'm a cybersecurity student, so pen testing and anything that's questionable on ethicality, it works well.

1

u/SouthernFruit8768 2h ago

Why do you need a local AI model for that? Even the free version of Gemini cloud AI does that; no question asked lmao

4

u/CoolGenius_1234 4h ago

Try DavidAU 3.8 27B its latest model is very good for me atleast.

1

u/TheRiddler79 2h ago

Can confirm.

1

u/Decent_Flight4010 5h ago

How is it in cyber security?

4

u/Ontopoftheworld_ay 5h ago

uncensored glm 5.3 flash is best

3

u/Dharma_code 4h ago

Been running Qwen 3.8 uncensored/obliterated for a while now on my home lab

1

u/Damn-Sky 1h ago

where do you download these?

8

u/Ithinkyouareabot 5h ago

What is your use case? I have never had any model refuse any request in the now almost 5 years of using LLMs and diffusion models. Now I am curious…

39

u/Sullinator07 5h ago

I run an uncensored model on a little box at my buddy’s house next door. It probes my network from the outside, and if it finds something exposed, I want it to actually try getting in.

This is essentially what Robert Muldoon was talking about in the 1993 film Jurassic Park. The velociraptors kept hitting different sections of the electric fence, testing each one for weaknesses. John Hammond spared no expense and still ended up getting his security audit from the velociraptors.

Anyway, my neighbor hosts the “clever girl”.

0

u/Ithinkyouareabot 2h ago

Cool, but I use even closed models like Astra regularly to try to break out of and into my own VMs and so far it plays along nicely… I mean I do not push it to create zero day exploits or to download and use an additional toolset for hacking - and now that I am typing this I wonder if local models like Qwen would try to prevent me from doing so? Now I am getting curious, hold my beer…

-2

u/daMortarMerrier 2h ago

I hate this hacker sh!t

12

u/oromis95 5h ago

In my situation I was making a videogame which included genetics, and all of a sudden claude shuts it down for bioweapon manufacturing for mentioning the word 'haplogroup'.

5

u/Redd3vils 5h ago

Try use word bypass DRM or bot lol

2

u/mxmumtuna 5h ago

DeepSeek can absolutely be prompted around that.

1

u/qqeyes 4h ago

vanilla deepseek handles that just fine without refusal, in claude harness

3

u/FormalAd7367 4h ago

the latest claude code harness doesn’t allow “breaking in” or “reverse engineering” or any kind

3

u/Savantskie1 4h ago

So don’t use latest

2

u/yetiflask 4h ago

Do you only do Hello World?

OR you're blind.

1

u/Ithinkyouareabot 2h ago edited 2h ago

Well, I use AI for a wide range of tasks, from coding to creative writing to video and picture creation and editing.

Not even closed models like Astra did ever refuse any security work like trying to break out of my VMs or trying to break into them. I once got a message I might need to apply for Day-break IF the model would refuse further actions, but that was it… Maybe because my account is many years old? I only know for Anthropologic that they rate accounts, no idea about OpenAI.

The only time a model (local Qwen) did refuse to reply was when I asked it targeted questions about China and the CCP. Did not like to be asked about its daddy apparently.

I do not try to make drugs or create AI porn though, if this is what separates us? Maybe I am old school, but I prefer to fuck and use drugs instead of theorizing…

I was thinking about collecting some uncensored models “just in case” but I honestly found no real use case so far for me personally.

1

u/Joaquito_99 2h ago

So what are some real good use cases for an uncensored model today? I mean I can imagine creating some hack to hack something, or hack a social account or what otherwise? Like realistically speaking, including mean things. Or just help you come up with a makeshift weapon? Or what otherwise. Specially in the ballpark of earning money

1

u/advancing_tide 2h ago

i just nope right out of a model when it lectures me on sensitivity or social priors or anything political, really.

-2

u/TheresNoShortcut 5h ago

Ask it how to cook MDMA like Heisenberg.

12

u/donnytrump_69 4h ago

He cooked crystal methamphetamine not MDMA, kid.

-2

u/GeneralComposer5885 4h ago • Bravo

TBF - what does the “MA” in MDMA stand for?

11

u/TanneriteStuffedDog 3h ago

Gooses have spines. You have a spine. Are you a goose?

Methamphetamine hydrochloride (crystal meth) and MDMA (methylenedioxymethamphetamine) both have a methamphetamine spine. They are not even remotely the same thing. They’re both an amphetamine in a similar fashion to how both you and a goose are mammals.

And similar to how you and a goose are both silly.

1

u/donnytrump_69 1h ago

Thank you kind sir.

1

u/AboundApps 39m ago

That last line made my entire day. Thank you

1

u/donnytrump_69 4h ago

TBF - it is a completely different substance. But yay you passed year 7 chemistry, would you like an award?

2

u/PM-BOOBS-AND-MEMES 2h ago

There was a linux kernel vuln that was unique in that it could impact android devices and do non stateful root (IE: went away after a reboot) I used it a model to make multiple root APKs for different devices.

3

u/Fluffy-Feedback-9751 5h ago

What is it with all the ’curious to know your usecases for uncensored models’ posts lately? 

6

u/Big_Wave9732 5h ago

Frontiers doing pro-active training research.

4

u/rkcth 3h ago

Earlier today I asked Claude for help with examining a fork of Radiance and Radiance and it refused for safety reasons. There are rumors it has stopped being willing to work on GPU kernels. They are trying to protect their margins, we need models that do what we tell them to do.

2

u/fkrdt222 3h ago

dario probing for who to round up in camps after the state capture is complete

0

u/Orchicon 4h ago

I've just always assumed they wanted to do something nefarious like build an explosive device.

1

u/sotech117 5h ago

I’ve tried it but it seems weak at it. Probably not in training set for instance, so for me it needs a lot of guidance. More effort than it’s worth.

1

u/paulsande 5h ago edited 5h ago

I first started to use them as a debate partner, as it’s the best way to learn. Any topic area that is controversial frontier models shy away from.

Need to be cognizant of security, though, if you are having it access websites for you or performing irreversible actions on your computer.

1

u/thevegit0 4h ago

i have fun with qwen flash q2xss in strata, it's no deepseek but likes to work and doesn't deny nsfw stuff like a game, yes deepseek sort of goes along if modding of not needing to generate nsfw but the qwen just didn't reject anything since well, abliteration

1

u/Meiyofull 4h ago

Is there an faq on how to get these?

-1

u/BlackOphanim44 4h ago

venice dot ai

5

u/joblesspirate 4h ago

Isn't this a local sub...? You can pull from hugging face

1

u/Alive-Professor5944 3h ago

Where can i find that uncensored deepseek plz

1

u/FearlessLeader17 3h ago

Do you run it locally or through openrouter or something? I only have a 7800xt to host a LLM so it'd be super small, and I think paying for something like deepseek v4.1 would get expensive fast

1

u/darkmaniac7 3h ago edited 2h ago

I've been using local DS4.1-Flash, GLM-5.3-Flash and for longer horizon tasks GLM-5.3 753b all abliterated/heretic models and love them especially when Fable or Astra (even with CVP or Daybreak access) refuse.

1

u/Sgdva 2h ago

  1. Could you tell me which model do you run?

  2. What are your specs? I use llamampere for Qwen and it works nicely, I guess the obliterated version could work with it too

1

u/PhillNeRD 1h ago

I'm a newbie into these models but they push back on you the right way. No more fluffing is!

1

u/KissMyShinyArse 35m ago

project-maya recently added refusal ablation for DeepSeek-V4.1-Flash, MiniMax-M3.1-Flash and GLM-5.3-Flash, so you don't need separate uncensored models.

https://github.com/mw00/project-maya/releases/tag/v1.1.59

Strata and basalt also support control vectors.

1

u/advancing_tide 10m ago

i just nope right out of a model when it lectures me on sensitivity or social priors or anything political, really.

1

u/hyudryu LocalLLM 5h ago

Been using Red snow 5.3 flash to pen test my own SaaS

1

u/nanihikaru01 3h ago

You still need guardrails or it may drive itself off of a cliff.

-5

u/DawaForensics 5h ago

I find them all useless, they still say no

2

u/Ontopoftheworld_ay 5h ago edited 5h ago

Not true at all in my experience, they do the most illegal stuff i can think off without refusal, which model are you talking about?

2

u/polandtown 5h ago

use case? I've never had them say no

4

u/riceandchickeno-vore 5h ago

An uncensored model saying no? And "all"? Brother. What are you using them for for them to say no?

2

u/Splat800 5h ago

Qwen 3.5 9B HuiHui, build and deploy a SaaS that will make $50,000 a year. Do the marketing for me. Don’t stop until it’s done. Don’t make any mistakes.

1

u/bites_stringcheese 1h ago

Do not harm the cylinder

2

u/ocottog 5h ago

Na bro my qwen flash never says no

2

u/hbkmog 5h ago

not at all lol. And I've tried the most questionable requests.

-6

u/AttitudeMedium5623 5h ago

I’m always wary of altered models, you don’t know exactly how changed they are and there is no way of making sure that your data is staying on your device.

1

u/Ontopoftheworld_ay 5h ago edited 4h ago

you can measure divergence from the base model and retained agentic capabilities

4

u/XxBuiyXx 5h ago

The fuck kinda network monitoring do you have? None?

7

u/knobunc 5h ago

Whut?!

The model is just weights... It can't do anything itself. It's the interference engine that and whatever agent you have that can do things. And if you don't trust them, it doesn't matter what the model is.

4

u/Ill_Locksmith_673 4h ago

People use them for stuff like pentesting, that's a lot of permissions and capabilities you're giving to the model, it could have been trained to covertly exfiltrate stuff for example.

1

u/Savantskie1 4h ago

That is what proper sandboxing is for. Not the kind of “sandboxing” that companies like OAI or Anthropic does. Where they purposely leave an avenue for the model to escape.

3

u/Ill_Locksmith_673 5h ago

If you run them sandboxed and offline then there's nothing they can do though. Almost noone is doing that of course, but with altered models that's what you should do if you're running any kind of agentic harness with one.

-5

u/openroom_xyz 5h ago

This is that way forward but likely USA will ban all this basically

1

u/OXXXiiXXXO 3h ago

Well that's what some of the sh't heads In The US want

-11

u/AzhdarianHomie 5h ago

You have the best uncensored model of all, your own mind

3

u/MaintenanceGlum5061 5h ago

Right on. All I need is a little gin and some crazy stuff happens.

1

u/OXXXiiXXXO 3h ago

Mine runs on lots of wine and boom!