How ML Model Data Poisoning Works in 5 Minutes

Re:How ML Model Data Poisoning Works in 5 Minutes by fxtentacle on Sunday March 24, 2024 @04:38PM (#39810284)

That paper says you need to control "0.1% of the training data size" for a 40% chance for one single injected prompt to fire. So that's millions of images or billions of text tokens for real-world models.

[ Parent | on HN ]

Re:How ML Model Data Poisoning Works in 5 Minutes by doctorpangloss on Sunday March 24, 2024 @05:19PM (#39810614)

Yeah, but the vibes man.

[ Parent | on HN ]

Re:How ML Model Data Poisoning Works in 5 Minutes by talsperre on Sunday March 24, 2024 @09:09PM (#39812026)

Exactly. It is very difficult to implement these data poisoning attacks in the wild due to the size of internet data in general.

[ Parent | on HN ]