2 ms·
That paper says you need to control "0.1% of the training data size" for a 40% chance for one single injected prompt to fire. So that's millions of images or bi
by fxtentacle 3y ago
That paper says you need to control "0.1% of the training data size" for a 40% chance for one single injected prompt to fire. So that's millions of images or billions of text tokens for real-world models.
- doctorpangloss 3y agoYeah, but the vibes man.
- talsperre 3y agoExactly. It is very difficult to implement these data poisoning attacks in the wild due to the size of internet data in general.