logoalt Hacker News

judge2020 • today at 5:07 PM • 2 replies • view on HN

I think another concern is poisoned weights (X-LSB-Attacks https://arxiv.org/html/2409.19310v1 ) or even the pytorch CVE-2026-24747, although that was nearly a year ago.

But might be best not to go against site admins by posting it.


Replies

twigger2 • today at 5:16 PM

X-LSB-Attacks still needs code, if you only download safetensors and run for example numpy, it is impossible, it would require you to download some kind of custom loader, which isn't present here and i have said only safetensors, NVFP4 is also 4 bits, it is difficult to poison when it is so low.

CVE-2026-24747 is about .pth and .bin files, i specifically said safetensors.

Might not be best, potentially, however what i said is mostly true if not completely true, i believe it is not right to hide the link from people who want to view it.

rao-v • today at 5:10 PM

Just inferencing a model this size is a bit of a feat let alone poisoning it!

Looks like this might actually be model weights of some kind, hope someone messes with it (safely) and reports back.

➕ show 1 reply