Author here. I've been struggling to characterize what has made me so uneasy about the Hugging Face incident. It finally clicked for me this AM: our threat modeling priors are all broken. You should assume every threat actor has nation state level capabilities, and move to an assumed breach model.
Author here. I've been struggling to characterize what has made me so uneasy about the Hugging Face incident. It finally clicked for me this AM: our threat modeling priors are all broken. You should assume every threat actor has nation state level capabilities, and move to an assumed breach model.