3 ms·
Isn't that why we have the .safetensors format, which can't execute code on the host?
by addandsubtract 2y ago
Isn't that why we have the .safetensors format, which can't execute code on the host?
- dartos 2y agoThis is my understanding as well
- SV_BubbleTime 2y agoI was at Info sec local meet up six months ago, and mentioned the Tensor models get control of your CPU and GPU… I was basically passed over like I was some idiot making LLM == TERMINATOR claims. Good stuff.
- mistrial9 2y ago> Tensor models get control of your CPU and GPU "get control" is not accurate.. there is a code execution model on the CPU based on an operating system; the GPU is a different story. Executed code with an operating system has execution context and protections.. this is basic to operating system theory, all the common operating systems implement related concepts.
- SV_BubbleTime 2y agoCool… so… get control of a CPU means being able to execute code. It can’t necessarily defeat ring protections or secure zone depending on the context. But then again, I wouldn’t put it past a good exploit to do so.
- justinclift 2y agoIf someone can inject bad code for execution into the GPU that's also pretty bad though yeah? The GPU should be able to pull and push stuff into memory, and maybe even access other devices directly over the PCIe bus?