Kobbi Nissim

Forget adversarial attacks – learning can be efficient even with counterexamples, as long as they're chosen symmetrically based on the difference between your model and the truth.

"Perfect retraining," the gold standard for machine unlearning, can catastrophically leak private information about the *undeleted* data.