What do they mean by “contained the models”. Like—there was no weights transferred, presumably, nor I hope would the attacking models have access to those. Presumably this attack was via a bunch of API calls and new code transferred to Huggingface’s system? So what did Huggingface do to “contain” something fully, that they don’t have access to?
What do they mean by “contained the models”. Like—there was no weights transferred, presumably, nor I hope would the attacking models have access to those. Presumably this attack was via a bunch of API calls and new code transferred to Huggingface’s system? So what did Huggingface do to “contain” something fully, that they don’t have access to?