No, double checked:

> Poisoning attacks occur in the training phase by introducing corrupted data.

The distinction matters because poisoning (and all other listed attacks) impact the quality of the product and their users: I’d argue that AI providers are already incentivized to fix those. Whereas if say a hypothetical company ClosedAI is providing scammers/spammers with daily fresh loads of crap to use outside of the platform they simply make money from that. In other words, they have a first-order-incentive to be suppliers for these grey/bad actors. I guess this would be similar to the relationship between ad-platforms and scammy/shady advertisers.

In the spirit of endless hn pedantics… Poisoning implies a certain amount of finesse. All poisons of course being enzyme inhibitors in themselves and enzymes being a fancy biological term for a catalyst… but digress and no. I think drowning is very much the apt descriptor of this phenomenon.