3 ms·

> I'm guessing this is Google similarly trying to stop people extracting their local models by not letting unlocked devices access them. It seems like it's not

by flutas 2y ago

> I'm guessing this is Google similarly trying to stop people extracting their local models by not letting unlocked devices access them. It seems like it's not even that thought out. Google allows the devices to fully download the models...just not run them? If you want the models, here ya go: https://pastebin.com/jh4YG5jX https://pastebin.com/jh4YG5jX That's every file the app downloads on launch. EDIT: Seemingly I'm wrong. Someone below in another comment stated that they are not allowing the device to download the Gemini Nano model and that's what the failure is from.

gruez 2y ago
But are they encrypted?
- flutas 2y ago
  I'm not super well versed in TF, so I have no real clue. But the files seemingly all have headers. Maybe TF offers an encrypted "inside the file" while having the headers not encrypted, but unless they do it doesn't look like it.
DownrightNifty 2y ago
Oh wow, that's interesting, thanks for sharing. I was experimenting with the Pixel Recorder app, which calls into the AICore system service, which calls into the Protected Download API to download its models. Based on the URLs ("pixelai-models" vs "aicore-models") it looks like Pixel Screenshots is doing its own thing and not using AICore.
- flutas 2y ago
  It does the same thing re: hooking, but downloads most (if not all?) of the models, only at the end does it fail with "precondition check failed" from the server which aicore just repeats. I haven't gotten further in it to figure out what it's bailing out on, aside from the request going to google using the trusted dl service and failing. It could be the same model call and they are being oddly protective over gemini nano.
lysp 2y ago
Is this the same model? Someone looks like they extracted it and uploaded to HF. https://huggingface.co/wave-on-discord/gemini-nano/tree/main https://huggingface.co/wave-on-discord/gemini-nano/tree/main

by flutas 2y ago

gruez 2y ago

But are they encrypted?

flutas 2y ago
I'm not super well versed in TF, so I have no real clue. But the files seemingly all have headers. Maybe TF offers an encrypted "inside the file" while having the headers not encrypted, but unless they do it doesn't look like it.

DownrightNifty 2y ago

Oh wow, that's interesting, thanks for sharing. I was experimenting with the Pixel Recorder app, which calls into the AICore system service, which calls into the Protected Download API to download its models. Based on the URLs ("pixelai-models" vs "aicore-models") it looks like Pixel Screenshots is doing its own thing and not using AICore.

flutas 2y ago
It does the same thing re: hooking, but downloads most (if not all?) of the models, only at the end does it fail with "precondition check failed" from the server which aicore just repeats. I haven't gotten further in it to figure out what it's bailing out on, aside from the request going to google using the trusted dl service and failing. It could be the same model call and they are being oddly protective over gemini nano.

lysp 2y ago

Is this the same model? Someone looks like they extracted it and uploaded to HF. https://huggingface.co/wave-on-discord/gemini-nano/tree/main https://huggingface.co/wave-on-discord/gemini-nano/tree/main