3 ms·
That said, it's probably a much better investment to do supply chain sort of attacks than trying to trick people into downloading your pickled model. Although,
by aflag 4y ago
That said, it's probably a much better investment to do supply chain sort of attacks than trying to trick people into downloading your pickled model. Although, I would be surprised if there aren't pickled models with some malicious code out there. It doesn't feel like it's a very sought after target.
- londons_explore 4y agoThere are recent attackers who want to steal ssh keys of developers to do things like inject malicious code into any git repos that developer owns. That malicious code in turn, when pulled and installed by another developer does the same - so it's a worm that spreads via npm, makefiles, requirements.txt, etc. No reason it couldn't also spread by pickle files.