That doesn't make any sense. Model weights are literally just numbers you multiply by. To imply that it's any way even remotely comparable to the xzutils build process is...

Well, I would be very technically impressed if someone managed to achieve any form of code execution, especially given unknown levels of quantisation post-release whereas xzutils was interesting mostly due to obfuscation.

I was very technically impressed with xz, FWIW.

Note that the troublesome vector isn't code execution by the LLM, it's instructions to produce vulnerable code

[delayed]

> you are doing that for LLM code right?

Existentially weary infosec guy laughter

OK yeah I can see how that would be a problem then lol.