<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Stealing Machine Learning Models via Prediction APIs · HackerPapers discussions</title><link>https://hackerpaper.kaipfister.de/p/1609.02943/</link><description>Collected HN comments and submissions linking this paper.</description><language>en</language><lastBuildDate>Mon, 02 Nov 2026 11:16:22 GMT</lastBuildDate><atom:link href="https://hackerpaper.kaipfister.de/p/1609.02943/feed.xml" rel="self" type="application/rss+xml" /><item><title>Stealing Machine Learning Models via Prediction APIs — HN submission</title><link>https://news.ycombinator.com/item?id=18951963</link><guid isPermaLink="false">urn:hackerpapers:submission:1609.02943:18951963</guid><pubDate>Sun, 20 Jan 2019 08:41:54 GMT</pubDate><description>&lt;p&gt;Stealing Machine Learning Models via Prediction APIs (2016) [pdf]&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;3 points; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by taurine</title><link>https://news.ycombinator.com/item?id=17304423</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:17304423</guid><pubDate>Wed, 13 Jun 2018 16:13:47 GMT</pubDate><description>&lt;p&gt;It is referring to https://arxiv.org/abs/1609.02943 What you are referring to is possible, but is not &amp;quot;copying&amp;quot; per se, just trying to infer what the system is doing (inverse RL), and then exploit that/make it do mistakes. If you are not HFT it is very difficult to distinguish bots from humans, so you&amp;#x27;d have a hard time even finding a target.&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — HN submission</title><link>https://news.ycombinator.com/item?id=16880306</link><guid isPermaLink="false">urn:hackerpapers:submission:1609.02943:16880306</guid><pubDate>Thu, 19 Apr 2018 21:25:34 GMT</pubDate><description>&lt;p&gt;Stealing Machine Learning Models via Prediction APIs (2016)&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;2 points; 0 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by red_dinosaur</title><link>https://news.ycombinator.com/item?id=13973379</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:13973379</guid><pubDate>Tue, 28 Mar 2017 01:49:54 GMT</pubDate><description>&lt;p&gt;The author of this story clearly does not know what &amp;quot;reverse engineer&amp;quot; means. This is reverse engineering AI companies: https://arxiv.org/abs/1609.02943&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by zek</title><link>https://news.ycombinator.com/item?id=13824312</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:13824312</guid><pubDate>Wed, 08 Mar 2017 22:06:25 GMT</pubDate><description>&lt;p&gt;Yes! there is an interesting paper on this subject: https://arxiv.org/abs/1609.02943&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by Jach</title><link>https://news.ycombinator.com/item?id=13823869</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:13823869</guid><pubDate>Wed, 08 Mar 2017 21:15:30 GMT</pubDate><description>&lt;p&gt;How long until someone runs an attack like https://arxiv.org/abs/1609.02943 and provides the model for free?&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by __coaxialcabal</title><link>https://news.ycombinator.com/item?id=13426201</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:13426201</guid><pubDate>Wed, 18 Jan 2017 13:39:14 GMT</pubDate><description>&lt;p&gt;I&amp;#x27;m not sure if open sourcing the data is absolutely necessary to reproduce the results given access to the prediction API. &amp;quot;Stealing Machine Learning Models via Prediction APIs&amp;quot; (https://arxiv.org/abs/1609.02943) examines techniques in this space. The API might also be used in adversarial training. The underlying data would be useful for advancing research, but not necessarily a prerequisite for reproducing the API. AWS wins not because they have created an impenetrable black box, but because the economics of reverse engineering (and maintaining) are not cost effective for the majority of…&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by grzm</title><link>https://news.ycombinator.com/item?id=13283583</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:13283583</guid><pubDate>Fri, 30 Dec 2016 09:57:12 GMT</pubDate><description>&lt;p&gt;Odd, isn&amp;#x27;t it? Maybe a copy/paste error? There&amp;#x27;s a paper from Oct 2016 on arXiv with this title: https://arxiv.org/abs/1609.02943&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — mentioned by seycombi</title><link>https://news.ycombinator.com/item?id=13251081</link><guid isPermaLink="false">urn:hackerpapers:mention:1609.02943:13251081</guid><pubDate>Sat, 24 Dec 2016 18:45:08 GMT</pubDate><description>&lt;p&gt;Mentioned paper &amp;quot;Stealing Machine Learning Models via Prediction APIs&amp;quot; https://arxiv.org/abs/1609.02943&lt;/p&gt;&lt;p&gt;&lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and discussion history&lt;/a&gt;. A mention is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item><item><title>Stealing Machine Learning Models via Prediction APIs — HN submission</title><link>https://news.ycombinator.com/item?id=12557782</link><guid isPermaLink="false">urn:hackerpapers:submission:1609.02943:12557782</guid><pubDate>Thu, 22 Sep 2016 16:00:28 GMT</pubDate><description>&lt;p&gt;Stealing Machine Learning Models via Prediction APIs&lt;/p&gt;&lt;p&gt;&lt;/p&gt;&lt;p&gt;206 points; 37 discussion replies on HN. &lt;a href="https://hackerpaper.kaipfister.de/p/1609.02943/"&gt;Paper and source history&lt;/a&gt;. A submission is not an endorsement.&lt;/p&gt;</description><category>cs.CR</category></item></channel></rss>
