https://thecout.com/tags/supply-chain/ Recent content in Supply-Chain on Tom Ganz Hugo -- gohugo.io en-us Sun, 13 Sep 2026 12:49:48 +0000 https://thecout.com/blog/modelsafety/ Sun, 13 Sep 2026 10:00:00 +0100 https://thecout.com/blog/modelsafety/ Everyone has run this line: 1 model = AutoModelForCausalLM.from_pretrained("some-user/some-model") It looks like a download. It is closer to running someone else’s installer. Some model formats execute code the moment you load them, some configs pull Python straight out of the repository, and the weights themselves can carry behaviour nobody mentioned in the model card. It has also been shown that its EXTREMELY easy to poison a big-ass LLM. With a near constant number of samples regardless of the size of the model 1.