AIAI SecuritySupply Chain
AI Dark Arts (21): Downloaded a Model and Got Owned? Malicious Model Files and Supply Chain Attacks
·1242 words·6 mins
A matching hash does not mean the model is telling you the truth. Two places it breaks: the weights, and the tokenizer.