The slow-burning problem is going to be adversarial input and poison data.