4 ms·
To clarify this further, pickle was more common ~10+ years ago I’d say? Hence the “historically” It wasn’t designed (well enough?) to be read safely so malware
by samtheprogram 2y ago
To clarify this further, pickle was more common ~10+ years ago I’d say? Hence the “historically”
It wasn’t designed (well enough?) to be read safely so malware or other arbitrary data could be injected into models (to compromise the machine running the model, as opposed to the outputs like in the article), which safetensors was made to avoid.