2 ms·

This is actually a very interesting side channel attack for streaming data. They use an LLM to guess words from token length. Definitely, padding would help he

by yunohn 3y ago

This is actually a very interesting side channel attack for streaming data. They use an LLM to guess words from token length. Definitely, padding would help here. Nit: Title should say “guess” and not “read”.

foogazi 3y ago
If they can “guess” consistently how different is it from “read” ?
- yunohn 3y ago
  > The attack can deduce responses with perfect word accuracy 29 percent of the time.