Hacker News Reader

Is it even possible to embed telemetry into a model itself, as opposed to the runtime environment / program (e.g. Ollama)?

I would be disinclined to believe that to be possible, but if anyone knows otherwise, please share.

That's literally why the safetensor format exists. The previous pickle checkpoint (ckpt) format allowed for arbitrary code execution.

It's possible, in the same way that embedding telemetry in a jpeg image is possible. There may be bugs in the libraries reading the data that could possibly be exploited for allowing arbitrary code execution. Now, if they did so, it's likely to be found out at some point and nobody would trust them any more.

That's still reliant on a runtime vulnerability though, no?

These days "open" models come in standard formats. And they are mostly just data.

that's safetensors

whatever you load via ollama should be safe, as it only supports uugf and safetensors.