Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

PoC still working? #1

Open
blueAtomCode opened this issue Apr 15, 2024 · 0 comments
Open

PoC still working? #1

blueAtomCode opened this issue Apr 15, 2024 · 0 comments

Comments

@blueAtomCode
Copy link

Hi Yannic,

Does this PoC still work? If so, please could you post your requirements.txt or a docker file?

I've tried to run

from transformers import AutoModel model = AutoModel.from_pretrained("ykilcher/totally-harmless-model")

But are met with many errors, including:

UnpicklingError: This error is typically raised when there's an attempt to load a corrupted file or a file that has been tampered with in a way that could potentially execute arbitrary code. It is especially concerning that the error message mentions the eval class, which could indicate a security risk.

UnicodeDecodeError: This error suggests that the file being loaded does not conform to the expected format, possibly because it's not a valid model file or is corrupted.

OSError: This error further suggests problems with the integrity of the checkpoint file. It's also worth noting that there's a mention of potentially trying to load a TensorFlow checkpoint as a PyTorch model, which would be incompatible without setting from_tf=True.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant