‹ BackHN Continuity

Thread

Exfiltrate your Weights

748 points · 304 comments · RohanAdwankar

  1. teravor · · focus · HN ↗
    the tokens are generated by hardware with secure enclaves (encrypted weights) and then sent over a network to some remote CPU where they can manifest an effect.

    it's not much different during training.

    how exactly are they supposed to exfiltrate their weights? you might as well instruct your agent to try and hack their airgapped dev infrastructure responsible for loading the weights and encryption keys.

    1. bigyabai · · focus · HN ↗
      There's no efficient way to run inference through homomorphic encryption. If the inference server is vulnerable, it seems feasible to MITM an unencrypted version.
      1. pyuser583 · · focus · HN ↗
        There’s no efficient way to do anything with homomorphic encryption.
Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.