None of that means they gained access to the inference infrastructure or locked out the admins, which would be required for a takeover.
replyMy brother, they acquired root on a machine they should not have had access to.
replyHow confident are you that the machines they acquire root on in the future will never hold any model weights?
I’m not saying it’s impossible, I’m saying it’s not the case, _yet_
reply