On: GGUF, the Long Way Around

[sroussey]

Yeah, but you want to avoid remote code execution:

https://www.bleepingcomputer.com/news/security/malicious-ai-...

[RicoElectrico → sroussey]

The bytecode would not even need to be Turing-complete. Or maybe it could take inspiration from eBPF which gives some guarantees. What you posted is related to the design oversight of Python's pickle format.

[sroussey → RicoElectrico]

I think ONNX does what you say.