EvilModel: Hiding Malware Inside of Neural Network Models [pdf]

Re:EvilModel: Hiding Malware Inside of Neural Network Models... by rnhmjoj on Tuesday July 20, 2021 @11:34AM (#27895014)

Consider that a bunch of bad patches[1] introducing vulnerabilities have passed a strict reviewing process and made their way into the Linux kernel. I'd say there's a far more simple and effective way: just answer questions on StackOverflow by giving code with vulnerabilities (something that most novices aren't likely to notice) and look for them later in the wild.

[1]: https://lore.kernel.org/lkml/[email protected]/#r

[ Parent | on HN ]

Re:EvilModel: Hiding Malware Inside of Neural Network Models... by bostik on Tuesday July 20, 2021 @02:00PM (#27897030)

Considering StackOverflow rewards speed, and that most common questions fall into category of "how do I make thing X work?" - a good proportion of highly voted answers already come pre-loaded with vulnerabilities.

And no, I'm not being snarky. I wish I was.

[ Parent | on HN ]

Re:EvilModel: Hiding Malware Inside of Neural Network Models... by _notathrowaway on Tuesday July 20, 2021 @04:03PM (#27898551)

Please, post some examples.

[ Parent | on HN ]

Re:EvilModel: Hiding Malware Inside of Neural Network Models... by bostik on Wednesday July 21, 2021 @04:29AM (#27903786)

-cracks knuckles-

Coming from Google, top answer to inserting data with python+psycopg2: https://stackoverflow.com/questions/61861310/how-to-use-psyc... (no bound variables, straight up format string)

Same route, this time asking about allowing requests between subdomains: https://stackoverflow.com/questions/11161526/cross-subdomain... (question specifies they "already use CORS: <star>" and nobody even comments on that)

And let's not forget, PHP is still a thing: https://stackoverflow.com/questions/43497587/how-to-display-... (yep, user supplied input goes straight to SQL query string)

---

All of the above were results of about 10 seconds of searching. Each one came from the first page of Google results - because let's be honest, that's what almost everyone cares about.

To be fair, at least these days I can't find the "just use CORS=<star>" answers. They were bountiful two years ago, but maybe, just maybe, have been flagged as cataclysmically insecure since then.

(EDIT: remove asterisks in CORS gripes)

[ Parent | on HN ]