AI poisoning tool Nightshade received 250k downloads in the first 5 days

https://venturebeat.com/ai/ai-poisoning-tool-nightshade-received-250000-downloads-in-5-days-beyond-anything-we-imagined/

by jgilias • 2 years ago

4 7 2 years ago

venturebeat.com

billconan• 2 years ago

I don't understand this nightshade tool. it says the tool works for many (if not all) models without needing to accessing the weights, yet when creating a poisoned image, it requires an existing model and it tries to let the poisoned image to generate a similar feature map of the unpoisoned image.

how can it be sure that the feature map will be the same for all models?

declaredapple4• 2 years ago

From what I understand the attack requires access to at least a model to attack.

The result has the highest success on that model you specifically attacked, but it apparently transfers albeit with a lower success rate.

how can it be sure that the feature map will be the same for all models?

From what I can tell it has a lot to do with what text encoder they used, although curiously it still transferred well from SDXL/SD2 which both CLIP to deep floyd which uses a completely different architecture

palata2• 2 years ago

The result has the highest success on that model you specifically attacked, but it apparently transfers albeit with a lower success rate.

Which is already great. Especially given that most users tend to use the same product. It's not like it has to poison all models; it just has to poison the more expensive ones.

And hopefully they will find a way to improve it such that it generalizes better.

declaredapple4• 2 years ago

I don't think I see it mentioned in the paper but what would happen if you used the poisoned images to train the text encoder? Would that make the text encoder itself resistant to at least the previously poisoned images?

The images will still be titled and whatnot correctly, so unless someone is also attempting to trick scrapers, the actual captions will be correct. If this is the case can't you just compare the image classifier's and the actual caption to tell if it was poisoned.

AI poisoning tool Nightshade received 250k downloads in the first 5 days

Related Stories