5 comments

  • segmondy 5 minutes ago
    "We deployed GLM 5.3 with a 1,048,576-token context window, but the KV cache pool on our prefill GPUs only had room for 681,280 tokens. We were aware of this mismatch before launch. "

    Did they advertise it as 1,048,576 token when they only had room for 681,280 tokens?

  • kami23 59 minutes ago
    I like this RCA a lot more than most. I appreciate the ownership and clear explanation of why their testing did not catch this bug.

    Also impressed with the speed to address the issue unplug the model and then pretty quick remediation, the speed to remediation matters less to me, but good to see they can act quickly on their platform to kill the serving of the model.

  • thehamkercat 1 hour ago
    Other providers probably don't even know/care that this is happening
    • 6thbit 1 hour ago
      Last year it happened to me more than once that dictating something in chatgpt would become a completely different message after processing, not in a misheard type of way but just a separate conversation more easily explained by the same type of KV cache issue here.
      • kami23 1 hour ago
        I think in the last year I've had it happen once where I seemingly got someone else's response, it was very odd. I rewound and got what I expected. It was correlated to Anthropic's roll out of new models at the time which always seems to cause instability in their apis.
    • kolanos 1 hour ago
      Other providers might have better isolated KV stores?
  • 8cvor6j844qw_d6 58 minutes ago
    Interesting. That might explain the few times I've received completely unrelated responses from a certain provider's API.
  • 0xbadcafebee 17 minutes ago
    I kind of forgot about the shared tenancy attack model. I think I was assuming/hoping the software was magically isolating my tokens, when in reality that's impossible for shared tenants. There's whole classes of attacks on things like shared cache, before we get to the LLM-specific features and potential bugs. Enterprises with highly sensitive data should really be on non-shared hosts.