• LainTrain@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    7 days ago

    But what is meant by “integrity of the model, inputs and outputs”?

    I guess I don’t understand the attack vector, what’s the threat here? Someone messes with the model file or refines a model towards a specific malicious bias like inserting scam links where legit links would go and passes it off as the real deal?

    I’m more general cybersec than crypto so idk but isn’t that what hash sums are for?

    Surely if someone messed with my .ckpt or .safetensors it won’t be the same file anymore?

    And what does that have to do with validity of the inputs?