Split-LLM Training Privacy Failure: Zero-Gradient Patterns Leak Real Training Rows

Setloop · hf · 2026-09-09

A HF post reports a privacy failure in split-LLM training: the system passed privacy checks yet leaked real data rows through zero-gradient patterns, enabling token recovery attacks despite gradient clipping and noise—returned gradients nullify decoy rows, exposing an underappreciated risk of split training.

Original post →

More from Safety

Safety channel →