Viewing a single comment thread. View all comments

LetterRip t1_j6uskhi wrote

That only works for images for which the model has seen the image a 1000 times or so (ie 100 copies of the image seen 10 times each). It requires massive overtraining to memorize an image.

11

pm_me_your_pay_slips OP t1_j6uw5xs wrote

where do you get that number?

0

starstruckmon t1_j6v3etd wrote

From paper

>Our attack extracts images from Stable Diffu- sion most often when they have been duplicated at least k = 100 times

for the 100 number. The 10 is supposed to be the number of epochs, but I don't think it was trained on that many epochs. More like 5 or so ( you can look at the model card ; it's not easy to give an exact number ).

13