Web Poisoning: How Just 0.01 Percent Manipulated Web Text Can Corrupt an AI Model
Fatti validati
Carlini et al. (arXiv:2302.10149). Shows that attackers can inject targeted backdoors into global base models with tiny data volumes by buying expired domains or manipulating Wikipedia articles.
Spiegato in modo semplice
A drop of ink in the drinking water: You do not need to fake the whole internet; a few carefully manipulated pages are enough to distort an AI's world knowledge.
Rilevanza per la sicurezza e consiglio pratico
Questions blind trust in unfiltered web-crawling datasets of large tech companies.