2 ms·
A few years ago peak HN comment was complaining about wget | sh. Nowadays we just run full on opaque models directly from huggingface without thinking twice ab
by vasco 3y ago
A few years ago peak HN comment was complaining about wget | sh.
Nowadays we just run full on opaque models directly from huggingface without thinking twice about reading anything. Interesting how times change. I wonder what supply chain attacks will come from huggingface, must not be long now.
- fragmede 3y agoThat is, by the by, why models are no longer distributed as Python Pickle files, which can root your box if the model being loaded is malicious.