NVIDIA says production ML keeps failing from misconfigurations, not model exploits
AI Engineer · youtube · 2026-07-21
NVIDIA's Lovina Dmello argues that production ML systems keep getting breached for the same boring reason: they are secured like models instead of like infrastructure.
- She cites a 2023 finding that thousands of Ray clusters were left exposed on the public internet, with dashboards and job APIs reachable because authentication shipped off by default.
- In a review of 139 peer-reviewed papers on production ML security, the dominant failure mode kept recurring as misconfiguration rather than novel exploits.
- One audit of 50 real systems found critical mistakes in 78% of them, usually the same three issues: overprivileged accounts, flat networks, and secrets or model weights left readable in storage.
- Heavy defenses often add 15% to 30% inference overhead, so the practical challenge is deploying controls cheaply enough to survive production.
More from coding & agent
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11
- First-ever Three.js Conference lands in Paris, with a panel on AI-shortened design workflows — OdinLovis · 2026-09-11
- Data engineering, not agent frameworks, is the real bottleneck for enterprise AI agents — dhruv2038 · 2026-09-11
- RTK Terminal Compression Cuts Tokens but Leaves Your AI Coding Bill Unchanged — Bartaseth · 2026-09-11
- GPT-6 Astra beats Factorio with enemies in 44 in-game hours at ~$4,500 API cost — liminal_bardo · 2026-09-11
- Investment Analyst Asks How to Build a Claude-Based Diligence Agent Stack — Careless_Tie2286 · 2026-09-11