“The malicious model invokes only a URL to the remote payload… whoever controls that URL can swap the behavior months after deployment”
Security Now (Audio) · Booby Trapping LLMs - AI Frenzy in Cybercrime
Play from 2:23:33
2:23:33
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
What was described
embedded a URL pointing to a remote payload inside a poisoned model so the model can fetch and execute malicious code on trigger
Said nearby on the same subject
“And if you use a logistic regression on top of embeddings or a small model, you get the intelligence of logistic regression on top of embeddings or a small model.”
♫
Said on The TWIML AI Podcast (formerly This Week in Machine Learning & Artificial Intelligence)
“If I were 18, 19 now, I would say, what's a foundation model I could build for a field I'm interested in? ... I'd like to build a foundation model for architecture ... I can query it to build me a house, analyze this, where are the structural points, and so forth.”