5 ms·
joblib is not fully secure because it still relies on Pickle internally. The reason it is slightly better in pickle is due to fact that pickle file gets immedia
by jchandra 2y ago
joblib is not fully secure because it still relies on Pickle internally. The reason it is slightly better in pickle is due to fact that pickle file gets immediately executed when it gets imported whereas joblib doesn’t execute code just by being imported.
- vivahir215 2y agoah okay. Didnt know this. I generally use pytorch save models for my workflow.
- jchandra 2y agopytorch save/load still are pickle based models. Its fine for trusted sources but when you start using from untrusted sources then there is always a risk of ACE. If you want to execute it, would suggest to try it in a sandbox env like docker, VM or online notebooks envs or other option is to inspect the model file. As Open source AI booms, the risk of supply chain attacks also increases.
- vivahir215 2y agoCool.