Baidu released ERNIE 5.5 Flash Base

Posted by pretext 1 day ago

Comments

Comment by mkl 1 day ago

The license seems really restrictive for something intended to be built on. Entire countries are forbidden to use it at all (European Union, the United Kingdom and South Korea), and you are responsible for making sure no one in those places uses your derivative.

Comment by eunos 1 day ago

Seems specific legislations on European Union, the United Kingdom and South Korea made it hostile to Open weights model, I think I have seen other models with similar exclusion

Comment by ricardobeat 22 hours ago

> The AI Act Article 53 requires anyone who places a general-purpose model on the EU market to keep technical documentation, give information to downstream developers, adopt a copyright compliance policy, and draw up and make publicly available a sufficiently detailed summary about the content used for training the model.

Sounds like a pretty good reason. Maybe there should have be exemptions for open-weight models?

"Giving information to downstream developers" and a "copyright compliance policy" could get pretty expensive quickly.

Comment by Kbelicius 5 hours ago

> Sounds like a pretty good reason. Maybe there should have be exemptions for open-weight models?

Article 2.12: "This Regulation does not apply to AI systems released under free and open-source licences, unless they are placed on the market or put into service as high-risk AI systems or as an AI system that falls under Article 5 or 50."

So there is some exemption.

Comment by londons_explore 5 hours ago

When you're the engineer responsible for releasing an AI model at baidu, and one checklist item is 'check for local laws and either exclude that country or get a local lawyer to check for compliance', it is probably easier to just exclude any country with specific AI laws than to hire 200+ lawyers to meet every countries laws.

This applies even more so when revenue from the model release is likely nil. You will get the academic fame and PR no matter what the licence says.

Comment by imachine1980_ 13 hours ago

you dont put exceptions in regulatory capture

Comment by halJordan 12 hours ago

What are you talking about. This site went absolutely batshit that "muh ai com'pnies are stealing everything, punish them!" And celebrated these anti ai laws

Comment by antman 1 day ago

They would not pursue it probably, but they sure pass on the regulatory responsibility to adopters

Comment by Aurornis 1 day ago

The restriction exists to wash their hands of legal complexities of dealing with those countries’ AI laws.

Same situation as websites that blocked EU visitors when the GDPR first came out and everyone was still trying to interpret the rules. There were ambiguities in the GDPR that made it risky to operate in those countries so the easy solution was to opt out.

I doubt they care what you do with the model in those regions. It’s an escape clause to show they don’t encourage it if some regulator gets itchy trigger fingers and tries to go after them.

Comment by nmstoker 1 day ago

Anyone aware why this restriction was added? Is it a legal issue in those territories or more a competitor restriction issue? If it's the latter, you would think the US would be somewhere to exclude too

Comment by zdragnar 1 day ago

The EU AI Act, as an example, has a bunch of restrictions that they may not have wanted to deal with, and open weight models are only partially exempted. It seems they don't plan on meeting all of those requirements, and so the model can't legally be used there.

Comment by f311a 1 day ago

legal

Comment by janalsncm 21 hours ago

In 2032 the EU will have an approved version which has been signed off on by 15 different committees.

If you want to fine tune it you will also need to apply for approval from the department of Weight Watchers, which has not been created yet because the naming committee is still in litigation with the American company, and the chair of the naming committee is on vacation for the next 3 months and it is illegal to call him during that time.

Comment by manquer 11 hours ago

agents do the same thing - the recent Minecraft experiment was illuminating and anyone using enough of agent swarms/clusters have experienced similar things .

Maybe bureaucracy is emergent property of intelligence.

Comment by breakingcups 1 day ago

That seems... impossible to enforce.

Comment by Aromasin 1 day ago

That's more often than not the point - they get to pick and choose where to enforce, likely based on whether or not said user is in competition with them.

Comment by simonh 1 day ago

I'm sure they don't care about enforcing it. This is about pushing the legal risk of prosecution by those countries on to whoever runs the model and derivatives.

Comment by 19 hours ago

Comment by noselasd 1 day ago

Detect might be hard, but enforcing isn't neccesarily so. You file a civil lawsuit and then it's up to courts to enforce the contract (as this would be viewd in EU or copyright infringement (in the US).

Comment by gpm 1 day ago

> or copyright infringement (in the US).

Has any US court decided that weights are copyrightable?

Comment by bilbo0s 1 day ago

That's where you've misunderstood Baidu's intent.

They don't care to enforce it, only to check the box that says they told you open weight models are all but illegal in EU, UK, and South Korea.

"You cannot use our models in these regions."

Now it's on the EU, UK and South Korea to stop users from downloading and running those models.

All that said, the EU, UK and South Korea, if they want to, are all more than capable of making life a living perdition for people who do run those models. So I wouldn't say it's "not enforceable". Only that it probably won't be enforced in the fashion one would think these rules would be enforced.

Comment by segmondy 1 day ago

why are you surprised? dealing with EU is not worth the regulation cost and litigation cost

Comment by dghlsakjg 1 day ago

Does the publisher of open model weights have any exposure to compliance requirements if it’s someone else using the software, and they aren’t distributing or operating there?

Comment by janalsncm 21 hours ago

For a large multinational company, probably.

I read the clause as more of a cya from them. I doubt Baidu is going to come after you if you use their model in the EU, but if Brussels has a problem with it Baidu wouldn’t be on the hook.

Comment by bigbadfeline 19 hours ago

> Does the publisher of open model weights have any exposure to compliance requirements if it’s someone else using the software, and they aren’t distributing or operating there?

Nope, no international treaties exist in that area, regardless of what EU's wannabe dictators want you to think.

Comment by 1 day ago

Comment by schleck8 1 day ago

You bet someone in Brussels is working on that

Comment by barrenko 1 day ago

> me.

Comment by speedping 1 day ago

ERNIE feels old, like BERT. They either need a rebrand or fully embrace retro-dawn-of-ML vibes

Comment by lofties 1 day ago

BERT models are still amazing for what they do. Even the latest JEV/KEV/SEV/BEV/REV/TREV models can't beat a well-trained BERT.

Comment by endymi0n 1 day ago

hehe, so much in a name... just today I told Claude off for recommending me a BERT model for voice identification and it told me it was actually SOTA 2025!

https://arxiv.org/html/2510.04213v1

Comment by throwaw12 1 day ago

do you have examples of open weight BERT models from hugging face which are trained for specific use cases?

Comment by rockinghigh 22 hours ago

For these small models, you would fine tune them on your use case. https://huggingface.co/transformers/v4.8.2/training.html

Comment by rwmj 1 day ago

Very old .. https://en.wikipedia.org/wiki/Premium_Bonds#ERNIE

Comment by josh-wrale 1 day ago

Bert and Ernie. Ring a bell? Sesame Street

Comment by Oarch 1 day ago

I'd like to see Big Bird drop his weights next

Comment by josh-wrale 1 day ago

I predict it will be ELMO with hands to the sky

Comment by cubefox 1 day ago

https://en.wikipedia.org/wiki/ELMo

Comment by kotaKat 1 day ago

... My mind wandered to the old Xbox font exploits. Bert & Ernie Reloaded!

http://archiv.sega-dc.de/phoenix.maxconsole.net/docs/bertern...

Comment by NSUserDefaults 1 day ago

I'd try DONALD for sure, if I wanted to kill a project.

Comment by yehoshuapw 1 day ago

Make AI Great Again?

Comment by selectodude 1 day ago

SI*

Comment by Gigachad 1 day ago

Lake Intelligence

Comment by pezezin 1 day ago

Yes?

Comment by stymaar 1 day ago

Curious he didn't rename it American Intelligence instead.

Comment by bmlzootown 1 day ago

I threw up a little reading that. As an American, even I know that's an oxymoron.

Comment by throwaw12 1 day ago

Trump just realised that he can't use MAGA for Making SI Great Again, probably giving an executive order to reverse SI to AI again, to be able to claim Make AI Great Again

Comment by swingboy 1 day ago

I am PLEASED TO ANNOUNCE that SI will be America’s 51st STATE and will be RENAMED to “American Intelligence”! Thank you for your attention to this matter!

Comment by ahoka 1 day ago

But they didn't give a DONALD.

Comment by locknitpicker 1 day ago

> I'd try DONALD for sure, if I wanted to kill a project.

The current version is threatening to veto all my prompts.

Comment by rob74 1 day ago

...and when it makes a mistake, it blames anything or anyone else but itself, or insists that what it did is perfect the way it is and that it's still the smartest model in the world?

Comment by whoanoway 1 day ago

[dead]

Comment by bguberfain 1 day ago

Anyone suggest a framework to further train this model on a multi-node cluster with infiniband? NeMo Framework? "Plain" HF TRL+Accelerate? Opinionated suggestions are welcome.

Comment by segmondy 1 day ago

When ernie 4 dropped, it was a really solid model and it felt very different from the other models, it got straight to the point. unfortunately for it, that's when deepseekv3 and glm started taking off. I kept it around for a few months, hopefully they recreated the magic and it doesn't over think.

Comment by txrx0000 1 day ago

Brilliant! Base model releases are exactly what we need right now. This is the reliable way to do alignment. Releasing the base model then letting everyone on the planet do whatever they want with it is probably what ends up preventing extreme value drift through the intelligence explosion. Millions of people would try to align these base models in their own way, and we'll probably all fail, but those models would drift in different directions so their actions cancel eachother out in the real world. The end result is alignment to humanity's average objective function, at the civilization level. It's a messy but very surefire way to align.

There will still be a different kind of value drift from increasing intelligence itself, but that's unavoidable no matter what we do. Releasing open models slows that down too because it discourages investment in future training runs. And this strategy works unilaterally without cooperation - every open model release slows it down by a little bit. This is the actual way to pace the frontier unlike the regulatory capture stunts Anthropic and OpenAI are attempting while pontificating about their moral superiority.

Comment by stingraycharles 1 day ago

So, what exactly can a base model do? Is this like the pre-reasoning models that just autocompleted, without any alignment, reasoning, etc optimizations?

Comment by londons_explore 1 day ago

A large base model is ~90% of the effort/cost to making a frontier model, and by itself is not useful for much. There aren't many controversial decisions to make when training a base model - you mostly just train a model as big as possible on as much human-generated data as possible.

But it makes it far easier for other parties to do that last 10% to train it to be useful.

However, there are many choices one makes in the last 10% of training which will impact the models behaviour when it comes to AI safety, political opinions, willingness to help make a bomb, etc etc.

Comment by stymaar 1 day ago

> A large base model is ~90% of the effort/cost to making a frontier model

This kind of figures is often quoted but where does that estimation comes from? Isn't that legacy number from the era when all the post training WS just instruction following and RLHF? I'd be surprised if current generation if reinforcement learning was still a few percent of the training cost.

Comment by zozbot234 1 day ago

AIUI more recent estimates have about half of the total training compute, or more, being used for post-training/fine-tuning. Post training a base model (even for simple chat, let alone thinking/reasoning or performance on verifiable tasks) requires reinforcement learning, which is quite hard.

Comment by stymaar 1 day ago

A base model is what you get just from next token prediction training. Think GPT-2/3 but bigger.

Withtout RLHF, instruction-following training, or RLVR to develop reasoning.

Comment by otabdeveloper4 23 hours ago

All LLMs are next-token predictors. The post-training is to get it to predict tokens from a structured, meaningful dialogue exchange and not from a random reddit and 4chan data dump.

Comment by stymaar 20 hours ago

Nah, that's only one part of the post training, and it has been so since OpenAI's o1 and Deepseek-R1 in fall 2024-winter 2025.

Now a good fraction of the post training (Most maybe at this point? Who knows?) is spent on RLVR (reinforcement learning on verifiable reward), in this kind of training you don't judge the token generated themselves, but the answer as a whole ("does this program compile and pass the tests", "is the proof valid"). That's where all of LLMs progress over the past two years in software and math come from.

So yes, they are still next token predictors at their core, but they stopped being mere stochastic parrots since they are now being trained on much more than just imitating their training data in a statistically plausible way.

Comment by teshier-A 1 day ago

I am not sure to follow, why couldn't the vast majority of uses of this base model be nefarious/selfish?

Isn't it like saying "let's give infinite power to all humans on the planet, nothing can go wrong since they define what is humanity" ?

Comment by jrflo 1 day ago

That is the opposite of how alignment works. If even a single group builds a sufficiently capable misaligned AI, we’re fucked

I believe the phrase is “if anyone builds it, everyone dies”, not “if everyone builds it everyone is fine”

Comment by txrx0000 1 day ago

That's doomer fantasy and not how the real world works. We're only fucked if we concentrate compute to let a small number of people build an AI so powerful that nobody else can oppose.

If intelligence of similar capability is scattered throughout the world, then none of them will have sufficient capability to single-handedly destroy the world. They will run into opposition.

And speaking from a personal perspective, every supposedly "aligned" AI the frontier companies are building right now is already misaligned with me. Who are they aligned to? Claude is (superficially) aligned to Anthropic, the company. GPT is similarly aligned to OpenAI. Companies are psychopathic superorganisms. They're not aligned to you or me, or any individual human being.

Comment by ToValueFunfetti 23 hours ago

The frontier companies' models are not supposedly aligned. They routinely make the news for being misaligned. This goes double if you're arguing with doomers, who believe that alignment is a very hard and unsolved problem (and generally do not support these companies' approaches). The alignment they do have does not seem to be biased towards the companies that created them (yet), as far as I'm aware- GPT will write a scathing critique of OpenAI if asked, but it's possible there's some more subtle biases you're aware of?

Comment by cubefox 1 day ago

Nonsense. Attack is often far easier than defense (e.g. biological weapons, nuclear weapons), so if one powerful model is sufficiently misaligned, the other aligned models won't help you much, unless they are far more capable.

Comment by txrx0000 22 hours ago

"Attack is easier than defense" is only true for a narrow set of present-day adversarial games that we're currently too stupid to see effective countermeasures and cooperative dynamics for. Those asymmetries are temporally local and always changing. If we truly live in a universe where attackers are favored in the long term as a result of increased intelligence, then intelligence should not have evolved in the first place.

I also want to point out that there is not a single living species on this planet where the intelligence gap between individuals of the same species is extremely large. Probably because when that happens, we'd speciate or die out for whatever reason. There is a small group of humans trying to concentrate compute and digital intelligence, and I think that will end badly if it continues.

Comment by bigbadfeline 18 hours ago

Good points which make the case for open AI to always be on par with the best closed models, anything else would be an existential hazard indeed.

Comment by bigbadfeline 18 hours ago

> Attack is often far easier than defense

Outdated views. In this case the attack is much harder, because the offender has to:

1. Develop offensive AI capabilities in secret.

2. Procure hazardous materials (nuclear, biological, etc) illegally and in secret

3. Find funds for CPU. GPU, energy, etc for a rather large and hard to hide undertaking.

4. Deal with a whole lot of other players, both government and private, who are armed with AI and have a keen interest in anything looking out of normal or secret.

5. Lastly, the offender will have to overcome the AI-assisted defenses against his actions - you think defense is harder but you fail to notice that the resources used for defense dwarf those available to offenders.

With that said, some very large private makers of closed AI will still be capable of developing doom capabilities, this can be fixed by mandating open source AI and better antitrust regulations.

A few governments will be capable of developing highly destructive weapons too - as they're now, and have been for quite some time. This problem is independent of AI and requires smart policies like improving international relations, better treaties concerning WMDs, etc.

Comment by cubefox 17 hours ago

> 1. Develop offensive AI capabilities in secret.

No, the capabilities can be and are developed without any secrecy. Necessary is only that the models don't refuse at least some unethical requests. Since alignment is hard, this will likely continue to be the default outcome.

> 2. Procure hazardous materials (nuclear, biological, etc) illegally and in secret

That may be hard in some countries with tight and effective regulations. But at least for biological weapons, it will be fairly doable for relatively small actors to circumvent these regulations.

For nuclear weapons, which require larger machinery and infrastructure, foreign state actors can also do things completely legally in their home country.

Things being illegal in country A doesn't help against country B doing things with AIs that were previously outside the bounds of their capability. So far WMD research was heavily limited by technical expertise, not just materials. AI changes that.

> 3. Find funds for CPU. GPU, energy, etc for a rather large and hard to hide undertaking

Renting some cloud-based AI tokens without guardrails, or even letting a few abliterated models run locally, to carry out the necessary research, is not a big undertaking. AI inference is very cheap compared to most other things.

> 4. Deal with a whole lot of other players, both government and private, who are armed with AI and have a keen interest in anything looking out of normal or secret

So far this has not succeeded in preventing various attacks by state and non-state actors, like the Binance hack or the supermarket supply chain attacks in Europe. I don't see how future AI would dramatically increase international surveillance to stop future malicious actors.

And all this doesn't even get into a highly capable misaligned AI model escaping human control altogether.

Comment by bigbadfeline 15 hours ago

> So far this has not succeeded in preventing various attacks by state and non-state actors, like the Binance hack or the supermarket supply chain attacks in Europe.

I'm not talking about hacking, it's not an existential threat, it's a consequence of sloppy software and business practices, hacking attack actually help by forcing better software and bankrupting the incompetent businesses - there are currently too many of them due to political reasons, if we're lucky we'll see political improvements as well.

> like the Binance hack

Binance and crypto in general is a larger threat than the sum of all AI, it's legalized corruption, the question is why we are worried about AI but not about crypto.

Your other points refer mostly to state actors but as I said before, those risks are independent of AI and they have existed long before models were a thing. I suspect you, as many others, lacked information about the WMD situation in the world and became aware of it only in the context of AI, but if you remove AI you'll see that very little changes.

About biological weapons in particular, they're easy, they already exist and have been studied for years, AI can contribute very little to the downside here but it can help us tremendously with detecting and protecting from them.

The real problem with bioweapons is sloppy regulations and totally dysfunctional international treaties. The problem isn't AI, it's the lack of rational policies, I wish politicians were as serious about WMD risks as you are about AI, but that's not the case today. AI fearmongering is just a political tool used for the benefit of certain special interests.

Comment by karahime 1 day ago

Absolutely glad to see the release of a base model, I think the trend away from that has been an issue for the field.

Comment by Tepix 1 day ago

That's an interesting size, it will fit into 2x128GB at decent (≥4bpw) quantization.

Comment by jpitz 1 day ago

As a 14B MOE I was rather expecting it to fit into smaller environments than 2x128. Am I wrong on that?

Comment by horsawlarway 1 day ago

Mostly yes, you are wrong.

Active parameter count really drives inference speed not ram requirements.

For this model, assuming you want the full 1mm context length at 4-bit quants, you need something like 175 GB total VRAM.

~150GB of that will be weights (varies a bit by quant format) then ~3-5GB for kv cache (might be lower here, I think they're using mostly HCA compressed cache) and then I'll allocate a couple gb for overhead/concurrency (say another ~10GB as a safety buffer).

---

So the good news is that it comfortably fits into 2x128 at 4-bit, and we can realistically stretch to a 6-bit quant and make it just fit (~244GB needed for the full 1mm context).

Comment by A_D_E_P_T 1 day ago

This is awesome. ERNIE seems more powerful than Qwen3.8-27B and Deepseek-v4-Flash, which AFAIK are currently the best base models... it'll be very interesting to experiment with when it hits OpenCode. Base models are also excellent for businesses who run models locally, as they can be trained in various house rules and house styles.

Comment by input_sh 1 day ago

They're comparing it to Deepseek-v4-Flash, not 4.1 and not the 4.1 1017 update, so essentially two versions behind the latest version of Deepseek Flash.

Comment by Tepix 1 day ago

DeepSeek 4.1 Flash is twice the size of this and difficult to run locally. Makes more sense to compare it to DS4F.

Comment by 1 day ago

Comment by segmondy 1 day ago

Do you understand that this is a base model? It means you are supposed to take it and post train it. It's much smaller than DeepSeek-v4-Flash, that's already a plus, you compare base to base. 4.1 and 4.1-1017 are trained from the base model.

Comment by input_sh 1 day ago

I understand why you might think so, as calling it v4.1 does imply that, but no, 4.1 was built from scratch.

Different architecture, v4 is text-only while v4.1 is multimodal and so on.

Comment by lcampbell 22 hours ago

> v4 is text-only

To be a pedant, DeepSeek-V4-Flash-Vision-Exp was a further checkpoint of the V4.0 lineage that supported image input. It lost a few benchmark points compared to the previous 0731 checkpoint so a lot of people skipped it. Completely unrelated to V4.1 though.

I wish labs used more reasonable naming schemes.

Comment by irthomasthomas 1 day ago

Qwen3.8-27B has no base model version in the wild that I can see?

Comment by speedgoose 1 day ago

Isn’t the latest Qwen 3 public base model… Qwen 3?

Comment by stymaar 1 day ago

Despite the naming Qwen3 and Qwen3.5+ have very little in common in terms of architecture. (And neither does 3.8-Flash-next …)

Comment by A_D_E_P_T 1 day ago

[dead]

Comment by halJordan 12 hours ago

Baidu, Tencent, all the second rate Chinese labs' models are all benchmaxxed to hell. The main goal of these releases is to show benchmarks to their govt minders

Comment by A_D_E_P_T 7 hours ago

Have you tried Xiaomi's MiMo v2.6? It's remarkably good -- and very weird/idiosyncratic. (For instance, it can compose MIDI-style music directly via the chat app, and it follows instructions much more closely than any other music model. AFAIK nothing else does this.)

I haven't had much experience with ERNIE, but I've been using various different (Chinese) base models of late, and I'm excited to try it.

Comment by roryirvine 1 day ago

Am I the only one to feel sad that the name means "Enhanced Representation through kNowledge IntEgration", rather than being a homage to a very famous 1950s random number generator?

https://en.wikipedia.org/wiki/Premium_Bonds#ERNIE

Comment by jojogeo 1 day ago

For me I see ERNIE as BERT's long time friend and room mate.

How do I look Ernie? ... with your eyes, Bert.

Comment by cubefox 1 day ago

It's a homage to BERT (Bidirectional Encoder Representations from Transformers), Google's influential 2018 Transformer model that wasn't autoregressive. https://arxiv.org/abs/1810.04805v2

Comment by weijiejason119 1 day ago

anyone tried this? is it good?

Comment by spwa4 1 day ago

It's not instruction finetuned, so no, it's not good to use for anything like coding agents.

Comment by haunter 1 day ago

dropped is the worst word in this context because it can both mean ‘released’ or ‘terminated/ended’

Baidu dropped ERNIE 5.5 Flash Base = Baidu released a new version of their software

Baidu dropped ERNIE 5.5 Flash Base = Baidu ended the support of their software

Comment by swiftcoder 1 day ago

I think in contemporary parlance this sufficiently clear. Nobody thought massdrop was where you went to buy end-of-life products.

Comment by gessha 1 day ago

It’s the biggest present cryptobros left us with. Before they started dabbling with diffusion models, they talked about the release of NFTs and crypto coins using the term. It’s an instant tell for me if a person is an ML insider or outsider.

Comment by swiftcoder 1 day ago

They definitely helped popularise the term, but "drop shipping" was a thing long before, "rare drops" in MMOs is decades old... gamer slang steadily permeates tech spaces as younger generations of gamers join the working population

Comment by szundi 1 day ago

[dead]

Comment by 1 day ago

Comment by StevenVincent 17 hours ago

[flagged]

Comment by Mantis99 1 day ago

[flagged]

Comment by spwa4 1 day ago

TLDR: Ernie 5.5 Flash base 280B params 14B active

A chunk better than Deepseek 1017, at half the parameter count, BUT it's only a base model, not finetuned to follow instructions.

Strange to release a model in this state. OpenAI is also "probably" releasing new models (sources within OpenAI talking about Sol 6.2 and the like). We must be getting really close to the Qwen4 releases.

Comment by adrian_b 1 day ago

Many others, e.g. Google and NVIDIA, have also released such BASE models.

For those with the knowledge and resources needed to finalize the training, BASE models are much more useful than completely trained models.

BASE models are the next best thing after truly open-source LLMs, where you would have access to the complete dataset used for training. Besides the fact that nobody who had used a really big dataset wants to show it, due to possible legal problems, having access to the original dataset would not be helpful for most people, because they would not be able to use it to make an LLM, due to its huge size and due to the vast resources required for pre-training.

On the other hand, continuing training from a BASE model, which is greatly compressed in comparison with the original dataset, is feasible for many.