Nicholas Carlini

Results 84 comments of Nicholas Carlini

This should probably be explained in the README (so not closing it for now), but the easiest way to do this is probably to use img2dataset: https://github.com/rom1504/img2dataset/blob/main/dataset_examples/cc12m.md

I've figured out the root cause but not sure the best way to fix it. The reason this bug occurs is this line returns false https://github.com/logisim-evolution/logisim-evolution/blob/49398db3f0e90793901ba2a1581c982bbdcdf31a/src/main/java/com/cburch/logisim/file/XmlWriter.java#L273 even if you've modified...

I would vote for calling this something different then. Or putting a docstring warning maybe.

I have code that does this sitting somewhere, yeah.

So the attack I have is targeted by design, and the untargeted attack is just a corresponding flip-the-objective type of thing. I think we can apply that to JSMA too....

I have one specific usecase in mind where 256x256 is, in fact, not "shittier": diffusion models can make great denoisers to improve certified adversarial robustness, as long as the noise...

This deduplicator doesn't know anything about documents. It just knows strings. Do you have a document separator that you use that's not present in any of the documents? (e.g., if...

Huh. If you can be sure that 0xff00 isn't a valid token then \xff\xff should work because you should never be able get away with 2. Do you put a...

That picture in the README was CC3M I believe yes.

Hi, just wanting to follow up on this -- we're hoping one of you will be able to get in contact with us so we can help mitigate any vulnerabilities...