Nicholas discusses the intricacies of model stealing, detailing two approaches: one focused on achieving high accuracy through queries and another aiming for exact replication of model internals. He explains the challenges of recovering specific model weights, emphasizing the possibility of creating functionally equivalent models instead. Insights from previous research highlight the limitations of current models, particularly those with specific configurations like limited neurons and floating-point precision.
