Michael Aerni

@aemai.bsky.social

AI privacy and security | PhD student in the SPY Lab at ETH Zurich | Ask me about coffee ☕️

Online anonymity has always relied on "practical obscurity" — the idea that deanonymization is possible but too costly to do at scale. We show this assumption no longer holds. LLMs make it cheap, fast, and automated. Not sure what to do about this...

Daniel Paleka@dpaleka.bsky.social · 9mo ago

Can LLMs figure out who you are from your anonymous posts? From a handful of comments, LLMs can infer where you live, what you do, and your interests; then search for you on the web. New 📄 w/ @SimonLermenAI, @joshua_swans, @AerniMichael, Nicholas Carlini, @florian_tramer 🧵

Recent LLM forecasters are getting better at predicting the future. But there's a challenge: How can we evaluate and compare AI forecasters without waiting years to see which predictions were right? (1/11)

Bild

Ensemble Everything Everywhere is a defense against adversarial examples that people got quite exited about a few months ago (in particular, the defense causes "perceptually aligned" gradients just like adversarial training) Unfortunately, we show it's not robust... arxiv.org/abs/2411.14834

Gradient Masking All-at-Once: Ensemble Everything Everywhere Is Not Robust

Ensemble everything everywhere is a defense to adversarial examples that was recently proposed to make image classifiers robust. This defense works by ensembling a model's intermediate representations...

arxiv.org