How Pickle Files Backdoor AI Models

by jchandraon 3/15/2025, 4:57 PMwith 6 comments

by compressedgason 3/15/2025, 11:30 PM

Pickle can be made safe. Just limit what the unpickler can call to a fixed list based on what is expected and permitted for the pickle to use.

by vivahir215on 3/15/2025, 5:01 PM

Nice read !

You could also use joblib format as well.