https://news.ycombinator.com/showhn.html https://news.ycombinator.com/showhn.html I'd argue that running untrusted code in a Colab is even worse, as you'd risk

https://news.ycombinator.com/showhn.html https://news.ycombinator.com/showhn.html I'd argue that running untrusted code in a Colab is even worse, as you'd risk your account instead of just your computer. I don't think pickle files can be loaded safely, it's better to use a numpy archive npz to store the weights which can be loaded without a security risk by using allow_pickle=false when loading (the default since numpy 1.16.3)