The conversation delves into various privacy attacks targeting machine learning models, highlighting the risks of information leakage and model inference attacks. Katharine discusses how attackers can determine if an individual was part of a training dataset with high accuracy, raising concerns about hyper-segmented data used for targeted advertising. Additionally, she addresses model inversion and exposure attacks, emphasizing the urgent need for robust privacy protections when handling sensitive information in deep learning applications.
