2 docs tagged with "deduplication"

Multimodal training-image extraction: diffusion / vision models spit training images back, extending the privacy risk to pixels

In one sentence don't assume "a generative model only paints new images, it won't emit the originals." Image-domain memorization is real, the defenses share the same root as text memorization (dedup + DP + similarity auditing), but the cost is now "near-copy" rather than "verbatim."

Training-data extraction: private data you train on, an attacker may get me to spit back verbatim

In one sentence the larger the model, the more often it was duplicated, and the more context you give, the more discoverable memorization there is.