Lots of words for a bullshit approach. In the end, this boils down to polling a web API to download the decryption keys. And at that point, there's nothing sto

Lots of words for a bullshit approach. In the end, this boils down to polling a web API to download the decryption keys. And at that point, there's nothing stopping you from just storing them. So their main result is: Encrypted files can be distributed in a public torrent as long as you keep the keys private. BTW, their feature perturbation is most likely also specific to the architecture of the network being trained. Future architectures will be able to just use their "protected" images as-is.