On: Nightshade: An offensive tool for artists against ...

[Kuinox]

> More specifically, we assume the attacker:

> • can inject a small number of poison data (image/text pairs) to the model’s training dataset

I think thoes are bad assumption, labelling is more and more done by some labelling AI.

[freeone3000 → Kuinox]

Usually clip, which is actually how this works — the examples are modified to be misclassified in clip, but look passable to a human.