We present a few hypotheses as to why data poisoning is so tricky to remove. Some hypotheses include that data poisoning moves the model parameters a lot, or in a subspace orthogonal to the clean data. Would love to see more exploration here! 6/n

→ View original post on X — @thegautamkamath