4 ms·

Honestly missed this. Is that security-through-obscurity? If the model and weights for the second hash function became public, then we could still construct a

• shuckles 5y ago
  It’s not security through obscurity. The implementation is not necessarily a secret; it’s the model configuration which can only be differentiated if known. Since part of the threat is adversarial embeddings, it’s perfectly fine to assume you can keep a private model confidential that adversaries can’t differentiate.