3 ms·
They dont need to fine tune it for better results, they only need to fine tune it to give different results and sell it for $5 less than you are.
by wokwokwok 5y ago
They dont need to fine tune it for better results, they only need to fine tune it to give different results and sell it for $5 less than you are.
- pepe-sad 5y agoI believe it has a kind of pre-moderation.
- belval 5y agoI misunderstood your point. The "attack" that you are describing could probably be mitigated by doing activation analysis. Given random initialization even with fine-tuning the activation distribution will be similar. Same method should be used to weed out people just repackaging the ImageNet pretrained model from torchvision. That being said you can still distill a network into another with a teacher-student approach and that would be undetectable.