Comment by LudwigNagasena

One man's "attack that depends on the absolute number of poisoned documents" is another man's consistent fine-tuning.