News for hackers. Stuff that matters.

A comment on PoisonGPT: We hid a lobotomized LLM on Hugging Face to spread fake news. Parent comment

Re:PoisonGPT: We hid a lobotomized LLM on Hugging Face to sp... by alexpotato on Sunday July 09, 2023 @09:51PM (#36661088)
I agree with this.

I have never seen a firm say "hey, we should dig down the dependency chain to ensure that EVERY SINGLE package we use is fully signed and from a trusted (for some degree of trusted) source"

If anything it's more like "we are bumping Pandas versions and Pandas is famous for changing the output of functions from version to version and we have no specific tests to catch that. What should we do??"

[ Parent | on HN ]
Re:PoisonGPT: We hid a lobotomized LLM on Hugging Face to sp... by nicce on Sunday July 09, 2023 @10:05PM (#36661183)
Not to mention that we still use and trust many closed-source applications. I am even writing this on one (Safari).
[ Parent | on HN ]