3 ms·
Is their repo / model free of any undisclosed telemetry, ie is it purely weights
by nextworddev 2y ago
Is their repo / model free of any undisclosed telemetry, ie is it purely weights
- anonym29 2y agoIs it even possible to embed telemetry into a model itself, as opposed to the runtime environment / program (e.g. Ollama)? I would be disinclined to believe that to be possible, but if anyone knows otherwise, please share.
- evilduck 2y agoThat's literally why the safetensor format exists. The previous pickle checkpoint (ckpt) format allowed for arbitrary code execution.
- macrolime 2y agoIt's possible, in the same way that embedding telemetry in a jpeg image is possible. There may be bugs in the libraries reading the data that could possibly be exploited for allowing arbitrary code execution. Now, if they did so, it's likely to be found out at some point and nobody would trust them any more.
- anonym29 2y agoThat's still reliant on a runtime vulnerability though, no?
- jimmydoe 2y agothat's safetensors whatever you load via ollama should be safe, as it only supports uugf and safetensors.
- n144q 2y agoThese days "open" models come in standard formats. And they are mostly just data.