Pretrained checkpoints and third-party weights introduce severe novel security vectors. Kenji reviews real-world deserialization attacks, malicious tensor payloads, and how to implement zero-trust attestation for AI pipelines.
Pretrained checkpoints and third-party weights introduce severe novel security vectors. Kenji reviews real-world deserialization attacks, malicious tensor payloads, and how to implement zero-trust attestation for AI pipelines.