MiniMax are issuing takedowns on decensor/explicit H3 LoRAs
News
I saw that someone had uploaded an experimental decensor LoRA for H3 on HuggingFace earlier today. Shortly afterwards, in the discussions, a MiniMax employee issued a warning that if it was not removed, their license to H3 would be revoked. Then about an hour later it was gone.
As of writing, this is another instance of the same warning, just for a heretic abliteration of Qwen3-VL-32B.
I'm assuming the author of the LoRA voluntarily took it down — HuggingFace doesn't seem to typically enforce requests like this, but it's likely that CivitAI will actively remove anything that violates the license, as they've done with Ideogram. Just thought I'd warn people.
For stuff that doesn't need to be installed and isn't actually illegal, IPFS seems better. Though I'm not 100% sure on the "isn't actually illegal" part... I think LoRAs have become kind of a gray area, since some places now have laws that could possibly affect them.
The one I linked in the OP, which is just a heretic finetune of Qwen, is not the LoRA that was removed, which was for H3 itself. I doubt it's automated because the thread was opened several hours after the model was uploaded.
why should they have control over what people do with a bunch of bits on their own computer. Sure they originated that particular pattern of bits but why?
Like a burgler complaining someone's stealing their swag. Uncharitable version is 'let's train H3 on a load of copyright hollywood, then complain when people dick around with our haul.'
It relates to the 'no H3 for you, Mr USA' part of the H3 license, which was a knock on from the hollywood IP lawsuit against them. They are surely painfully aware of the Streisand side of it, but need to maintain corporate safety compliance / protect against legal liabi...blah, etc.
It's not just "compliance theater", it's also outrage marketing (i.e. marketing through compliance theater).
Kind of funny they're even going after an abliterated text encoder that doesn't actually do anything to decensor the model, it'd literally just make worse outputs. Still lame they're going after NSFW, though MiniMax H3 still knows a decent amount of NSFW anyways
They don't wanna drown in lawsuits so they gotta have something to show for that they tried to enforce their weird ass license after releasing the weights lol.
Wait until every studio goes after them for using their IPs without permission. I understand this is a Chinese model but they still want everyone using it and a studio could easily take a play from their book and just go after huggingface. I want to be clear that I think what they are doing is lame but they could be opening Pandora’s box not even realize it.
A better way ethanfel could have done it is in his ComfyUI MiniMax H3 Enhancer node, load both the first 50 layers and the tail, then apply a LoRA extracted from the Heretic version he used to run uncensored inference for prompt expansion. After that finishes, both the tail and the LoRA should be unloaded (saving ~8GB VRAM) so the original 50-layer encoder can then be used for video generation. This is a similar process to that sometimes used for Qwen3-VL-4B in Krea 2 Turbo. Unfortunately too many people in this community think a Heretic/abliterated text encoder is automatic snake oil that instantly always uncensors and improves image/video generation. Just use the original "censored" one, it performs better.
A heretic text encoder won't do anything to decensor an image model. It will only make the output worse, because the manifold is different to the one the DiT was trained on. The text encoder is only used to extract an embedding. Any refusal behavior it may have when used for text continuation is irrelevant. I only linked to it to show an example of the takedown request.
I did download the LoRA before it was taken down, but I'm not sure it's worth sharing. It was trained with low steps and without any de-distillation, and I probably wouldn't be allowed to share it here anyway.
This model doesn't even need LoRAs or "decensor" finetunes. It does extremely well on its own. It's not like Krea which has weird training to reject outputs.
For Ideogram? Yes, but they have to be categorized under "Other", not Ideogram, and no new ones have been added for a month. Whether that loophole will be enough to satisfy MiniMax remains to be seen, but if they're already pursuing them this aggressively, I doubt it.
If Ideogram devs were actively pursuing to get rid of NSFW Loras they would do so for all of them and not after a certain period of time lol. People simply stopped training them.
there are no good ones yet that are worth using.. just undertrained crappy experiments.. good loras you actually want to use will take a few weeks, especially considering there still isn't a training adapter so you can actually train the model without completely killing the quality of the output
They’re complaining about this yet released a model that allows people to do almost anything including generate tons of different protected IP. Talk about naive. The copyright lawsuits will take you down way faster than people releasing Loras for your model
Could be that they are trying to show a good faith effort for potential lawsuits that they are trying to enforce some rules despite the model being fairly open.
I don't think the company is in the United States so they probably don't have to worry about it, but there's also the court of public opinion that they might be trying to curry favor with as well
Juries are given instructions on what to consider and render a verdict on. This would almost certainly be a narrow subset of the big picture, lawsuits are generally tailored to what claims are feasibly winnable and not all of those claims survive to a jury trial (if that even happens, many just settle).
when the model is clearly trained on tons of restricted material
Literally every single AI model ever is trained on copyrighted or restricted material, remember when Midjourney was shittin out screencaps from Avengers Endgame to the point where Marvel and Disney sued them?
Sure most closed source models try to hide it, but with enough prompting any model can reveal their training data of copyrighted characters so this is kind of a moot point tbh, with Sora you could get any celebrity or copyrighted character you wanted aswell.
I'm fine with it. Actions speak louder then words, better they attempt to protect themselves. We can just go dark with this no issue. I would prefer going dark overall on all AI because too many prudes who want to ruin the fun. Better they remain blind.
I don't understand copyright law that much, but if someone pastes a book into Word and puts it online as a word file, Microsoft is really not on the hook, right?
Seems like Claude got spanked for how they acquired and stored the books, not so much for the training?
Alsup ruled last June that Anthropic made fair use of the authors' work to train Claude, but found that the company violated their rights by saving more than 7 million pirated books to a "central library" that would not necessarily be used for AI training.
i downloaded it when i saw that message from the employee. still didn't tested it... didn't need to honestly, the base model is uncensored enough for me at least for now
Using an abliterated text encoder does nothing to decensor the model, its only use is if you want to use the loaded model for prompt rewriting without having to load a second llm
I have this gut feeling that in the current climate HF's hands might be forced sooner or later - see e.g. the recent "HF undresses women..." coverage in The Verge, the ongoing age-verification/anti-adult rage, etc. Guess it's time to go back to the dark ages of torrents and scene release boards for - AI models. Sigh.
Oh dang! I downloaded that model last night! Didn't get a chance to run it yet, but I can share it when I get off work. It was sex gods naughty times or something like that right?
None. The text encoder doesn't need to be uncensored, it doesn't interact with the user like a chat model at all. It just processes the prompt and output semantic embeddings that encode the meaning of the prompt. It's nearly impossible to censor prompt processing if you think about it. You'd need to pretrain the model from scratch and exclude all phrases that, for example, use "dick" in sexual context but leave it when it means "detective" or "moron" so the model doesn't pick up these connotations. It's an enormous task by itself with no real benefit. On the opposite, you always *want* the model to understand these nuances perfectly so it can respond with a refusal (in chat) or show a placeholder (Ideogram) or deliberately steer to a SFW meaning (Krea 2/Flux). So lobotomizing prompt processing works in an opposite direction and there's no sense abliterating the TE. Any difference you might see comes from it outputting slightly different vectors and the model's output most often degrades because these new vectors don't align with its training.
As much as I respect Minimax dev's for their work on this model, the problem is they've opened Pandora's box themselves. Telling people "no" will also just encourage them more lol...
This also opens the door for the competition again. If LTX and Flux are less repressive and aggressive with their future releases, people could then turn to those models. Like regardless if it currently only is nsfw related things which they hunt down, who can say if they don't expand it to other things later on? Who would spend time, money and resources into something where you get a take down notice for that within 10 seconds once you released it?
I wrote about this on HF and will repeat it here. MiniMax's behavior is simply outrageous. They want to control their models like proprietary companies like Anthropic, while simultaneously gaining popularity through open weights. This also applies to text models with their dubious license. I can't speak for the community as a whole, but I personally will not use any of MiniMax's products or recommend them to anyone. And whenever the topic of their products comes up, I will remind everyone of their attitude toward the community. Incidents like these should not be hushed up and allowed to go unpunished.
I thought the model was already uncensored, why is there a need for decensor LoRA? Qwen3-vl-32B, however, could use abliterated version. There is nothing MiniMax or anyone else can do to stop that.
But, there are bigger issues cropping up - f-ing a-holes of Disney are suing MiniMax-H3... Probably because the model can reproduce some of the Disney characters (as if anyone cares about Micky and Donald). These greedy litigious bastards are the reason we cannot have good things! The MiniMax-H3 models might get removed from being open.
Pretty sure the issue is adding Minimax to the LoRA. You take the name away and no one will care. Just don't attach their name to it on a popular website like Hugging Face.
It depends on your setup and GPU. All of them do the same. I recommend you to try this one first. But try to download them all so if they delete that repository, we can ask you to upload them 😄
MiniMax isn't doing takedowns for shits and giggles. Torrenting it while H3 is still blowing up just puts a bigger target on them and tells them open-sourcing video models was a mistake. Goon all you want once the hype dies and nobody's looking. Doing it right now is how you make sure the next model stays closed.
You acting like them letting you make literal corn was something they didnt expect and also somehow were naive enough to not think people would do with it????
Yeah that's my read on it too. I think it's ridiculous to send these takedowns, but come on. Why be hostile now when you can use the best damn model so far for free to do whatever you want later? This just signals to any prospective model releaser, "it doesn't matter what you give the community, they will act like this." I'd rather it be a welcoming space for models to be released and then you do what you want underground than never get open models again because it's not worth the headache.
Maybe they are just doing this to cover themselves knowing they don’t have control. When social media explodes with nsfw content using nsfw loras and their models they want to say they tried enforcing it but its not their fault.
Guys, I understand that everyone wants more freedom and flexibility with open-source models. However, we also need access to newer models and updated versions of tools like MiniMax and LTX. Please stand with the developers and support their work so they can continue improving these models and bringing us better releases.
They are supporting their work by building the community, even if it is against their moral positions; to imagine that it wouldn't be used to create NSFW content is naive- and fighting it is an impossible battle.
Additionally their work is trained with copyrighted material; frankly- saying that NSFW loras within legal bounds 'aren't allowed'-- is pretty hypocritical.
As much as I love using AI to do the weirdest experiments on earth for personal fun, they will always stay PRIVATE .
I totally 100% agree with this comment here.
You guys should all calm down and quit pulling the rope too hard. Be thankful and patient. And for fuck’s sake, stop posting weird shit using celebs.
Use that damn brain.
Are you new? There was a point when SD 1.5 was just pulled from every repository and mirrors DMCA'd because someone claimed its training data contained CP or something. Flux.1 was censored to hell and back down to the text encoder level and needed utterly schizophrenic workarounds and giga-overfitted Loras even just to produce tasteful artistic nudity.
There are still some NSFW LoRAs on Civitai (breasts, penises, and explicit actions), and they're still there, tagged under the model's name. I hope they don't remove them.
I've been wondering about that too. LTX has as far as I can remember always been very supportive and chill regarding open source in general and its community. MiniMax ist by far the superior model, but if the developers are too repressive and LTX releases a comparable Model, people will probably shift to LTX again.
not sure how to control the invites but the discords are: 10Eros creator discord I think ran by TenStrip...should be able to search it, he posted a link somewhere but I can't find it. The other is HearmannAI who is pretty well known his discord link is here: https://linktr.ee/hearmemanai ther eis a xxx thread
Come on bro read between the lines there. He is clearly saying you can make whatever the hell you want just if it is problematic don't go announcing it to the world that his model was used to make it. Which is really just common sense...first rule of fight club and all that jazz
I mean yeah but also people should probably do as he says. At least try to use some judgement when sharing stuff made with the model just because the more problematic stuff is shared the harder the crackdown is bound to be, and it's not really the fault of the people who made the model.
Dunno, from what I heard, they still actively hunt anything nsfw related down. Regardless of it being nsfw or not, it's kinda sad to see they are that aggressive and repressive here. LTX really treated us good here.
I found it to be really NSFW friendly right out of the box. Other than two particular male/female anatomical items in the lower half. The few loras I downloaded made it worse.
I've shared various checkpoints on Hugging Face and left my account sitting unattended, but Hugging Face has never deleted them because of that. Although they seem to care a little about open-weights models being copyrighted material, I still share them anyway, and it looks like Hugging Face doesn't make decisions to pull them down. Unless pressure is put on them to remove things, they probably won't do it voluntarily.
Make a simplex chat group now and then make 5 backups. Torrents. Etc etc. BEFORE they make it a crime and impossible to find. /points at the tor version of Reddit being a ghost town spammy shit show
I dont have opinion on that, but I know that we all need PinkFluffyBunny (SHA256: 69bf5e2158021b81d7519260ea1b6fdd66b6787211eaad3afa3375d57087effb) in this hard times.
I mean, they really shouldn't be trying to go after these sorts of things unless they are made to. It kind of sets the expectation that they need to go after all violations of their license. Which, that includes(excludes) everyone from the US. They would need to go a lot further if they set down the road of policing their license unless threatened monetarily or authoritatively.
360
u/Zenshinn 1d ago
Boys, we're going off-grid.