Hacker News Reader

Is it even possible to embed telemetry into a model itself, as opposed to the runtime environment / program (e.g. Ollama)?

I would be disinclined to believe that to be possible, but if anyone knows otherwise, please share.

View on HN

That's literally why the safetensor format exists. The previous pickle checkpoint (ckpt) format allowed for arbitrary code execution.

It's possible, in the same way that embedding telemetry in a jpeg image is possible. There may be bugs in the libraries reading the data that could possibly be exploited for allowing arbitrary code execution. Now, if they did so, it's likely to be found out at some point and nobody would trust them any more.

That's still reliant on a runtime vulnerability though, no?

Reply on news.ycombinator.com