I am currently organizing a NeuroIPS competition, in which participants might be submitting pytorch models to our evaluation server for the leaderboard.
Is there a secure way of serializing/loading untrusted pytorch models?
Are there alternatively to pickle, which can be insecure? Is there a pytorch model format we can insist upon that is secure?
I believe that ONNX + tensorflow use protobuf, which avoids the security issues of pickling.