NVIDIA says production ML keeps failing from misconfigurations, not model exploits
AI Engineer · youtube · 2026-07-21
NVIDIA's Lovina Dmello argues that production ML systems keep getting breached for the same boring reason: they are secured like models instead of like infrastructure.
- She cites a 2023 finding that thousands of Ray clusters were left exposed on the public internet, with dashboards and job APIs reachable because authentication shipped off by default.
- In a review of 139 peer-reviewed papers on production ML security, the dominant failure mode kept recurring as misconfiguration rather than novel exploits.
- One audit of 50 real systems found critical mistakes in 78% of them, usually the same three issues: overprivileged accounts, flat networks, and secrets or model weights left readable in storage.
- Heavy defenses often add 15% to 30% inference overhead, so the practical challenge is deploying controls cheaply enough to survive production.
More from coding & agent
- Developer Moves All Prompts to Skills: AI Coding Workflow v3 Explained — rseroter · 2026-10-26
- charlie Marsh: rewrites beat external deps in the AI era — mohamedmansour · 2026-10-26
- OpenAI and Twitch launch Codex hackathon with $25,000 in prizes — OpenAIDevs · 2026-10-26
- Filtering secrets on the write path: why agent memory deserves more suspicion at ingest than retrieval — Classic-Being-7960 · 2026-10-26
- INT21's AI agent swarm rewrote Drama 3's inference runtime in Rust within one hour, beating SGLang-Omni — bingxu_ · 2026-10-26
- After OpenCode key leak: 5 practical rules for keeping keys away from agents — jacobholm_dev · 2026-10-26