Btw, if it's just the date (and nothing else) researchers or anyone interested can explore that by just providing future dates and see if anything changes.

▲

embedding-shape an hour ago | parent | next [-]

Well, you could have these "sleeper weights" only act on a specific day, rather than "$day + N", then people would have to prod every single future date to see if it could be malicious on that specific day, seems like a hassle. But I guess would be the only way really to detect it?

▲

eru 38 minutes ago | parent [-]

If it's only the day (and not time of day), then securing the next ten years would only take around ~3650 trials. Doesn't seem too bad.

(And the can't make it too precise, if they want their attack to work even if you don't use the tool at exactly the right microsecond.)

	▲	embedding-shape 32 minutes ago \| parent [-]
		Yeah, at a glance doesn't seem too bad, would depend on how fast you can actually do one prefill+full decode run. Say you do it with 10 seconds per iteration/test, then it's only ~10 hours to verify next ten years. Definitely doable.

▲

rcxdude an hour ago | parent | prev [-]

Yeah, this seems pretty straightforward to test.