TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

AI Supply Chain Attack: How Malicious Pickle Files Backdoor Models

4 点作者 jchandra2 个月前

2 条评论

westurner2 个月前
From &quot;Insecurity and Python Pickles&quot; (2024) <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=39685128">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=39685128</a> :<p>&gt; <i>There should be a data-only pickle serialization protocol (that won&#x27;t serialize or deserialize code).</i><p>&gt; <i>How much work would it be to create a pickle protocol that does not exec or eval code?</i><p>&quot;Title: Pickle protocol version 6: skipcode pickles&quot; <a href="https:&#x2F;&#x2F;discuss.python.org&#x2F;t&#x2F;create-a-new-pickle-protocol-version-to-add-skipcode&#x2F;48880" rel="nofollow">https:&#x2F;&#x2F;discuss.python.org&#x2F;t&#x2F;create-a-new-pickle-protocol-ve...</a>
评论 #43430351 未加载
vivahir2152 个月前
You could use <a href="https:&#x2F;&#x2F;github.com&#x2F;trailofbits&#x2F;fickling" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;trailofbits&#x2F;fickling</a> for analysis.