The hidden dangers of loading open-source AI models (ARBITRARY CODE EXPLOIT!)
#huggingface #pickle #exploit
Did you know that something as simple as loading a model can execute arbitrary code on your machine?
Try the model:
Get the code:
Sponsor: Weights & Biases
Go here:
OUTLINE:
0:00 - Introduction
1:10 - Sponsor: Weights & Biases
3:20 - How Hugging Face models are loaded
5:30 - From PyTorch to pickle
7:10 - Understanding how pickle saves data
13:00 - Executing arbitrary code
15:05 - The final code
17:25 - How can you protect yourself?
Links:
Homepage:
Merch:
YouTube:
Twitter:
Discord:
LinkedIn:
If you want to support me, the best thing to do is to share out the content :)
If you want to support me financially (completely optional and voluntary, but a lot of people have asked for this):
SubscribeStar:
Patreon:
Bitcoin (BTC): bc1q49lsw3q325tr58ygf8sudx2dqfguclvngvy2cq
Ethereum (ETH): 0x7ad3513E3B8f66799f507Aa7874b1B0eBC7F85e2
Litecoin (LTC): LQW2TRyKYetVC8WjFkhpPhtpbDM4Vw7r9m
Monero (XMR): 4ACL8AGrEo5hAir8A9CeVrW8pEauWvnp1WnSDZxW7tziCDLhZAGsgzhRQABDnFy8yuM9fWJDviJPHKRjV4FWt19CJZN9D4n
1 view
6
2
2 months ago 00:01:39 4
Flintlock muff pistol by Henri Petitjean hidden in an ancient book
2 months ago 00:01:45 1
Europa | Steam & Switch Official Launch Trailer
2 months ago 00:20:46 1
YAWEH and the Three-Dimensional Prison - The DARK Gnostic Connection
2 months ago 00:14:30 1
‘It’s time we knew the TRUTH!’ | Calls to end immigration ‘COVER UP’ as key data hidden from public
2 months ago 00:47:24 1
Nat King Cole: “An Evening With Nat King Cole“ - LIVE!
2 months ago 00:12:28 1
Наблюдатели (The Intervention. A Hidden Secret)
2 months ago 00:03:06 1
Swamp Witches: Lair of the Giant Toads
2 months ago 00:38:39 1
Update Balkan - A reading with Crystal Ball and Tarot
2 months ago 00:01:30 1
Sense - A Cyberpunk Ghost Story Trailer (Nintendo Switch)
2 months ago 00:51:11 5
My Chemical Romance - The Black Parade But With Sonic The Hedgehog Soundfont
2 months ago 00:03:04 1
How To Get The Grand Mafia Gold - The Grand Mafia Hack | Working on iOS/Android apk 2024