Data Poisoning

TL;DR for operators A platform can evaluate a recommender on clean historical data, observe only a small performance gap between groups, and reasonably approve it for retraining. That approval does not show how the same training process will respond when coordinated fake accounts deliberately shape the next batch of user interactions. In the reported experiments, fake profiles widened subgroup disparities even when the target recommender used fairness-aware training. Across the tested models, the paper’s SRLFA method generally produced larger disparities than the adapted attack baselines, with the largest reported effects appearing on the fairness-aware Last.fm LightGCN target. ...

Customer support bots are not supposed to have enemies. They sit politely inside enterprise websites, read policy documents, retrieve relevant snippets, and answer questions with the soft confidence of a well-trained assistant. The selling point is simple: Retrieval-Augmented Generation, or RAG, should make large language models less likely to hallucinate because the answer is grounded in external evidence. ...