Attackers Can Subliminally Implant a Backdoor at Low Sample Count Without Prompt Access — LessWrong
lesswrong.com · saved by 1 readers
Work done at Redwood Research, quick, non-exhaustive update on results from a larger project. Thanks to @SebastianP for the initial pitch and feedbac…