Hello I published a paper. Most defenses against fine-tuning poisoning try to detect malicious data or reduce its impact. I explored a different question: What if the model simply could not learn certain malicious updates? The idea is to constrain fine-tuning to a subspace learned from trusted LoRA adapters. Useful adaptation remains possible, but some malicious directions become geometrically unreachable. A concrete example: a company fine-tunes a model on large datasets coming from users, external sources, or generated data. A small amount of poisoned data could introduce a hidden behavior triggered by a specific phrase or pattern. Another example is a local or on-device assistant that keeps adapting to its user. Instead of allowing it to learn any possible behavior from new data, its adaptation could be restricted to variations of behaviors already represented by a trusted pool of adapters. The goal here is not to detect every possible poison or backdoor, but to restrict the space of updates the model is allowed to learn. I tested the approach on 196 public LoRA adapters, including adaptive attacks specifically designed to bypass the defense. The results are strong: attack success drops sharply while useful adaptation is largely preserved on tasks covered by the adapter pool. The paper, code, and experiments are public. Paper: https://arxiv.org/abs/2607.05300 Code: https://github.com/infinition/z-manifold I would be very interested to see people try to break it. submitted by /u/Bright_Warning_8406 [link] [Kommentare]
In Ulaanbaatar, Mongolia, families who live in ‘gers’ (Mongolian yurts central to the nomadic way of life) wake throughout the night in winter to feed their stoves coal: at 01.00, 03.00, and again before dawn, just to survive freezing temperatures. The very fuel that keeps them warm also makes the city one of the most polluted capitals in the world, with each household on average responsible for 12 to 13 tonnes of carbon emissions. URECA is a climate tech startup whose pilot Coal-to-Solar Initiative project pairs technology with carbon finance to direct capital into scalable, high-impact climate solutions while supporting low-income households to transition to clean energy and tackling severe air pollution. They propose a new technology designed to restore trust and credibility in climate finance, making it more accessible to communities. With help from the EBRD’s Star Venture programme, URECA is now better positioned to scale its climate solution. submitted by /u/semanticweb [link] [Kommentare]
I have done quite a bit of work, including most of my Master's thesis, with ROS Noetic and Ubuntu 20.04, which worked well. However, I recently got a Raspberry Pi 5 that I want to use for various personal robotics projects, and the Pi 5 doesn't support anything below Ubuntu 23.10. I'm currently debating between installing ROS 2 Jazzy Jalisco with Ubuntu 24.04 or ROS 2 Lyrical Luth with Ubuntu 26.04. Both have similar EoL (2029 vs 2031), so I'm curious if any of you in the robotics community have found major advantages or disadvantages between the two distros. Any reason not to choose Lyrical, since it's newer? Thanks for all your wisdom! submitted by /u/Dying_Of_Board-dom [link] [Kommentare]
I turned Karina Nguyen's Lux Summit talk into an agent skill that plans, drafts, reviews, and revises stories the way a coding agent ships code.