{"id":65,"date":"2023-01-26T16:54:26","date_gmt":"2023-01-26T22:54:26","guid":{"rendered":"https:\/\/promptphantom.com\/?p=65"},"modified":"2023-01-28T11:02:39","modified_gmt":"2023-01-28T17:02:39","slug":"is-it-safe-to-download-stable-diffusion-checkpoint-models-from-the-internet","status":"publish","type":"post","link":"https:\/\/promptphantom.com\/is-it-safe-to-download-stable-diffusion-checkpoint-models-from-the-internet\/","title":{"rendered":"Is It Safe to Download Stable Diffusion Checkpoint Models from the Internet?"},"content":{"rendered":"<h3 class=\"wp-block-heading\" id=\"the-truth-about-checkpoint-security-and-safety-tips-to-prevent-malware\"><em>The Truth About Checkpoint Security and Safety Tips To Prevent Malware<\/em><\/h3>\n\n\n<p>The rate at which open-source AI art generation scene is expanding could give the big bang some motion sickness. Every day, I see new custom-made models being shared with the world. But many of the people interested in AI art do not have backgrounds in computer science (including me). As such, they are painfully unaware of the risks involved with downloading models. Today, I want to go in-depth and make a PSA guide about Stable Diffusion model safety.<\/p>\n\n\n<div role=\"navigation\" aria-label=\"Table of Contents\" class=\"simpletoc wp-block-simpletoc-toc\"><h2 style=\"margin: 0;\"><button type=\"button\" aria-expanded=\"false\" aria-controls=\"simpletoc-content-container\" class=\"simpletoc-collapsible\">Table of Contents<span class=\"simpletoc-icon\" aria-hidden=\"true\"><\/span><\/button><\/h2><div id=\"simpletoc-content-container\" class=\"simpletoc-content\"><ul class=\"simpletoc-list\">\n\n<li><a href=\"#what-is-a-stable-diffusion-model\">What is a Stable Diffusion Model?<\/a>\n\n<\/li>\n<li><a href=\"#what-is-a-pickle-in-python\">What is a Pickle (in Python)?<\/a>\n\n<\/li>\n<li><a href=\"#how-can-picklesmodels-be-dangerous\">How Can Pickles\/Models Be Dangerous?<\/a>\n\n<\/li>\n<li><a href=\"#how-can-i-stay-safe-when-downloading-models\">How Can I Stay Safe When Downloading Models?<\/a>\n\n\n<ul><li>\n<a href=\"#1-use-trusted-sources\">1. Use Trusted Sources<\/a>\n\n<\/li>\n<li><a href=\"#2-pickle-scanners\">2. Pickle Scanners<\/a>\n\n\n<li><a href=\"#3-manually-review-the-code\">3. Manually Review the Code<\/a>\n\n<\/li>\n<\/ul>\n<li><a href=\"#alternatives-to-downloading-ckpt-models\">Alternatives to Downloading CKPT Models<\/a>\n\n<\/li>\n<li><a href=\"#safetensors\">Safetensors<\/a>\n\n<\/li>\n<li><a href=\"#conclusion\">Conclusion<\/a>\n\n<\/li>\n<li><a href=\"#further-reading\">Further Reading<\/a>\n\n<\/li>\n<li><a href=\"#references\">References<\/a>\n<\/li><\/ul><\/div><\/div>\n\n<h1 class=\"wp-block-heading\" id=\"what-is-a-stable-diffusion-model\">What is a Stable Diffusion Model?<\/h1>\n\n\n<p>First, we need to clarify what a \u201cmodel\u201d actually is. A <strong>model<\/strong> is an algorithm (ie. a computer program) that\u2019s been trained on a dataset to recognize patterns; once it learns the patterns, it can make inferences\u2014meaning the program can then come to it\u2019s own conclusions about further sets of data<a href=\"#sdfootnote1sym\" id=\"sdfootnote1anc\"><sup>1<\/sup><\/a><a href=\"#sdfootnote2sym\" id=\"sdfootnote2anc\"><sup>2<\/sup><\/a>. In the case of latent diffusion models (AI art programs like Stable Diffusion), these algorithms studied billions of images to learn what they are and why they look the way they do, then inferred how to make similar images.<\/p>\n\n\n\n<p>So Stable Diffusion itself is a model. <strong>But, unlike other AI art programs, Stable Diffusion is open-sourced and has the ability to be \u201cretrained\u201d to create new models. <\/strong>These new models are not made completely from scratch. Instead, they are made by adding new datasets to the original model. This is done to teach Stable Diffusion about something it did not know before, like a specific style of anime or how a certain person looks. It\u2019s a bit similar to a video game expansion pack: you\u2019re still playing the same game, but the expansion pack adds more content on top.<\/p>\n\n\n\n<p>Anyone with sufficient computer resources can train a new model for Stable Diffusion, which is an incredible capability in it\u2019s own right. But there is a big glaring issue with this\u2026<\/p>\n\n\n<h1 class=\"wp-block-heading\" id=\"what-is-a-pickle-in-python\">What is a Pickle (in Python)?<\/h1>\n\n\n<p>Stable Diffusion was written in a programming language called Python. In some programming languages, there is a method in which a dataset can be converted into a stream of bytes for easy transfer and storage of the data: this is called <strong>Object Serialization<\/strong><a href=\"#sdfootnote3sym\" id=\"sdfootnote3anc\"><sup>3<\/sup><\/a><a href=\"#sdfootnote4sym\" id=\"sdfootnote4anc\"><sup>4<\/sup><\/a>. In Python, this serialization is done using a <strong>Pickle<\/strong>. Try to think of a Pickle kind of like a ZIP file you use to store a lot of pictures for e-mailing to your relatives. However, the big difference between a ZIP file and a Pickle is that the ZIP file just releases the images from storage like a Charmander gets released from a Pokeball. But the Pickle, when \u201cunzipped\u201d, will recreate the object dataset. <strong>That means the Pickle file will <\/strong><strong>essentially rebuild the stored program when it\u2019s opened&#8230;in other words, it will execute code on your computer<a href=\"#sdfootnote5sym\" id=\"sdfootnote5anc\"><sup>5<\/sup><\/a>.<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\"><strong>How does this relate back to AI art models? Stable Diffusion uses Pickles to store models! <\/strong><strong>That means when you load an AI model on your computer, it unpickles and runs code. This can be dangerous for your PC because Pickle files are inherently dangerous.<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-large\"><img fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"683\" src=\"https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/pexels-toni-ferreira-6497928-1024x683.jpg\" alt=\"\" class=\"wp-image-69\" srcset=\"https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/pexels-toni-ferreira-6497928-1024x683.jpg 1024w, https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/pexels-toni-ferreira-6497928-300x200.jpg 300w, https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/pexels-toni-ferreira-6497928-768x512.jpg 768w, https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/pexels-toni-ferreira-6497928-1536x1024.jpg 1536w, https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/pexels-toni-ferreira-6497928-2048x1365.jpg 2048w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n<h1 class=\"wp-block-heading\" id=\"how-can-picklesmodels-be-dangerous\">How Can Pickles\/Models Be Dangerous?<\/h1>\n\n\n<p><strong>Pickles, and therefore models you download, can be dangerous because they can include any kind of computer code inside of them. That includes lines of code that install malware.<\/strong><\/p>\n\n\n\n<p class=\"has-medium-font-size\">Like we just learned, a pickle is like a Pandora\u2019s box for Python code and, when you open that box, the program inside gets released onto your system. <strong>If <\/strong><strong>he wanted to, <\/strong><strong>a malicious person <\/strong><strong>could<\/strong><strong> include a line of code inside a Pickle that instructs <\/strong><strong>your computer<\/strong><strong> to download a virus or delete all <\/strong><strong>its<\/strong><strong> files&#8230;and <\/strong><strong>once you unleash that Pickle on your own PC, <\/strong><strong>you may not realize what\u2019s been done until it\u2019s already happened.<\/strong><\/p>\n\n\n\n<p>Here is the security warning the Python Software Foundation issues on their own website about pickle files:<\/p>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p><em>Warning: The <\/em><code><em>pickle<\/em><\/code><em> module<\/em> <strong><em>is not secure<\/em><\/strong><em>. Only unpickle data you trust.<\/em> <em>It is possible to construct malicious pickle data which will<\/em> <strong><em>execute arbitrary code during unpickling<\/em><\/strong><em>. Never unpickle data that could have come from an untrusted source, or that could have been tampered with.<\/em><\/p>\n<cite><a href=\"https:\/\/docs.python.org\/3\/library\/pickle.html\" data-type=\"URL\" data-id=\"https:\/\/docs.python.org\/3\/library\/pickle.html\" target=\"_blank\" rel=\"noreferrer noopener\">Python Library<\/a><\/cite><\/blockquote>\n\n\n\n<p><strong>All of this boils down to one thing: downloading and using a Stable Diffusion model is just like downloading a .exe program from the internet and installing it. If you don\u2019t know what the program contains or know who actually made it, are you willing to give it access to your computer?<\/strong><\/p>\n\n\n<h1 class=\"wp-block-heading\" id=\"how-can-i-stay-safe-when-downloading-models\">How Can I Stay Safe When Downloading Models?<\/h1>\n\n\n<p>Now, I\u2019m not suggesting you should never use any Stable Diffusion model ever. So far, I have not seen any confirmed cases of a malicious Stable Diffusion model in the wild. But you need to keep in mind that: the more popular this technology gets, the more likely a malicious actor will use it for nefarious purposes.<\/p>\n\n\n\n<p><strong>A pickle is not safe by itself, but there are some safe practices you can perform to reduce your own risk of malware or hack. They are:<\/strong><\/p>\n\n\n\n<ol>\n<li>Only download from trusted sources<\/li>\n\n\n\n<li>Use pickle scanners whenever possible<\/li>\n\n\n\n<li>Unpickle files in a sandbox first<\/li>\n<\/ol>\n\n\n<h2 class=\"wp-block-heading\" id=\"1-use-trusted-sources\">1. Use Trusted Sources<\/h2>\n\n\n<p>The best way of preventing malicious pickle operations is knowing who made the model\u2019s code and how trustworthy they are. Is the source for your desired model a legitimate company, or a random person on the internet? Is your source susceptible to public scrutiny in the event they committed a cyber crime such as this? If the model was released by an individual, was it at least someone with a public profile (using their legal name, having social media for contact, etc) whose validity can be ascertained?<\/p>\n\n\n\n<p><strong>Always consider the trustworthiness of whoever pickled a model before running it on your system. <\/strong>For example, I felt relatively comfortable downloading the base models of v1.4 from StabilityAI and v1.5 from RunwayML because they are registered companies. You can easily research their business information, corporate leaders, and contacts. They have a good deal to lose if they are caught embedding viruses or stealing data from their customers in such a brazen manner. They would also be easy to identify if a legal complaint ever needed to be filed.<\/p>\n\n\n<h2 class=\"wp-block-heading\" id=\"2-pickle-scanners\">2. Pickle Scanners<\/h2>\n\n\n<p>There are a few open-source scanners available for download that will review Pickle code for malicious operations. What these scanners do is check what imports are included in the Pickle file; these imports are how a hacker could call up a malicious code execution. If there is a line of code that wants to import something \u201cextra\u201d (not needed for the actual model being loaded), it will give you a warning about that pickle file. <strong>This is an added layer of protection that needs to be used BEFORE you ever load a pickle file; it\u2019s not like your average Windows anti-virus that monitors in real-time for infections.<\/strong><\/p>\n\n\n\n<p><strong>Two of the most popular model repositories <\/strong><strong>already have scanners in place that <\/strong><strong>automatically <\/strong><strong>check uploaded<\/strong><strong> pickle files and display if any suspicious imports are present in <\/strong><strong>them<\/strong><strong>. <\/strong>These model sites I\u2019m talking about are:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/huggingface.co\/models\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/huggingface.co\/models<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/civitai.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/civitai.com<\/a><\/li>\n<\/ul>\n\n\n\n<p>But still, don\u2019t expect these scanners to be a completely soundproof malware prevention method in their own right. I don\u2019t program in Python myself so I don\u2019t know all the possibilities, but I have read an argument or two from <a href=\"https:\/\/nedbatchelder.com\/blog\/201206\/eval_really_is_dangerous.html\" target=\"_blank\" rel=\"noreferrer noopener\">actual programmers<\/a> explaining how malicious code could be called up in a pickle file through various indirect commands<a id=\"sdfootnote6anc\" href=\"#sdfootnote6sym\"><sup>6<\/sup><\/a>.<\/p>\n\n\n<h3 class=\"wp-block-heading\" id=\"pickle-scanners-to-try\">Pickle Scanners to Try<\/h3>\n\n\n<p>Here is a list of pickle scanners I know of that you can test out:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/pypi.org\/project\/picklescan\/0.0.7\/\" target=\"_blank\" rel=\"noreferrer noopener\">Python Pickle Malware Scanner<\/a> from the Python Software Foundation<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/zxix\/stable-diffusion-pickle-scanner\/issues\" target=\"_blank\" rel=\"noreferrer noopener\">Stable Diffusion Pickle Scanner<\/a> by Zxix on Github<\/li>\n\n\n\n<li><a href=\"https:\/\/github.com\/diStyApps\/Stable-Diffusion-Pickle-Scanner-GUI\" target=\"_blank\" rel=\"noreferrer noopener\">Stable Diffusion Pickl Scanner GUI<\/a> by DiStyApps (this is just a GUI for the Python Software Foundation scanner; if you don\u2019t feel comfortable installing this as an .exe on your computer, using the commands in the first scanner link will do the same thing).<\/li>\n<\/ul>\n\n\n<h2 class=\"wp-block-heading\" id=\"3-manually-review-the-code\">3. Manually Review the Code<\/h2>\n\n\n<p>If you really want to get nitty-gritty with your safety concerns, you could try reading the code inside of the pickle before using it. Normally, this would not be possible because Python pickles are not human-readable when opened in a txt format.<\/p>\n\n\n\n<p>However, there is a software called <a href=\"https:\/\/github.com\/trailofbits\/fickling\" target=\"_blank\" rel=\"noreferrer noopener\">Fickling<\/a> that makes this possible. Fickling can do two relevant things for us:<\/p>\n\n\n\n<ol>\n<li>It can symbolically execute the code within a pickle file and <strong>output it as a readable <\/strong><strong>text<\/strong> for manual review<a href=\"#sdfootnote7sym\" id=\"sdfootnote7anc\"><sup>7<\/sup><\/a>; and<\/li>\n\n\n\n<li>It\u2019s<strong> Check Safety <\/strong>command can be run, which will check for certain classes in the pickle file that may be malicious<\/li>\n<\/ol>\n\n\n\n<p>Now using Fickling will require some basic understanding of coding: you\u2019ll need to enter some pre-written commands into a command terminal. If you output a readable file, then you\u2019ll need to study up on how to read Python language in order to actually see malicious code.<\/p>\n\n\n<h1 class=\"wp-block-heading\" id=\"alternatives-to-downloading-ckpt-models\">Alternatives to Downloading CKPT Models<\/h1>\n\n\n<p>Clearly, we\u2019re not going to stop using extra models. One of the greatest strengths of Stable Diffusion is that users can retrain it to make their own custom models. Midjourney and Dall-E cannot do that! So, now that I\u2019ve scared you out of downloading 100 models to play with, you might be asking: is there any safer way to have custom models for Stable Diffusion? And yes, yes there is. There are 2 specific alternatives to using Stable Diffusion models in the standard pickle format:<\/p>\n\n\n\n<ol>\n<li>Use Safetensors format models instead<\/li>\n\n\n\n<li>Train your own models or embeddings using Dreambooth or Textual Inversion<\/li>\n<\/ol>\n\n\n\n<p>For the sake of my own sanity, I would dive into the process of training models in this article. That\u2019s a topic worthy of it\u2019s own guide. For that reason, I\u2019m just going to cover the topic of Safetensors&#8230;<\/p>\n\n\n<h1 class=\"wp-block-heading\" id=\"safetensors\">Safetensors<\/h1>\n\n\n<p>This might be my favorite alternative to pickle models to date. If you want to try out someone else\u2019s model but you don\u2019t want to risk arbitrary code execution on your computer, then you can convert their model to the Safetensors format<a href=\"#sdfootnote8sym\" id=\"sdfootnote8anc\"><sup>8<\/sup><\/a>.<\/p>\n\n\n\n<p class=\"has-medium-font-size\"><strong>But what is Safetensors?<\/strong> It\u2019s an alternative <a href=\"https:\/\/github.com\/huggingface\/safetensors\" target=\"_blank\" rel=\"noreferrer noopener\">simple serialization format<\/a> being developed by Huggingface, Inc. that <strong>does not allow for arbitrary code execution<a id=\"sdfootnote9anc\" href=\"#sdfootnote9sym\"><sup>9<\/sup><\/a><\/strong>!<\/p>\n\n\n\n<p>What\u2019s even better is that HuggingFace has a converter on their website. If you find a standard pickle-format model you like in their repository and you want a Safetensors version, you can run it through this <a href=\"https:\/\/huggingface.co\/spaces\/safetensors\/convert\" target=\"_blank\" rel=\"noreferrer noopener\">page<\/a>.<\/p>\n\n\n\n<p><strong>In fact, some of the models already have the SafeTensors format available in their repository, so look for it in the model\u2019s \u201cFiles and versions\u201d section before you do the conversion request.<\/strong><\/p>\n\n\n\n<p>CivitAI has also implemented SafeTensors support on their website; if a model is available with a SafeTensors file, it will specify that next to the download button<a href=\"#sdfootnote10sym\" id=\"sdfootnote10anc\"><sup>10<\/sup><\/a>:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter size-full\"><img decoding=\"async\" width=\"393\" height=\"199\" src=\"https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/Safetensors-Download-Option.png\" alt=\"\" class=\"wp-image-66\" srcset=\"https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/Safetensors-Download-Option.png 393w, https:\/\/promptphantom.com\/wp-content\/uploads\/2023\/01\/Safetensors-Download-Option-300x152.png 300w\" sizes=\"(max-width: 393px) 100vw, 393px\" \/><\/figure>\n\n\n<h1 class=\"wp-block-heading\" id=\"conclusion\">Conclusion<\/h1>\n\n\n<p>The number of AI art models available for download are expanding with each passing day. It\u2019s very tempting to catch \u2018em all and go nuts testing out each new style. But for the safety of your computer and it\u2019s contents, it\u2019s highly recommended that you avoid loading pickle files from sources you don\u2019t know or trust.<\/p>\n\n\n\n<p>If you have already downloaded models and want to check for malicious code in them, I suggest you scan them as soon as possible. Thankfully, the creation of the SafeTensors format is making model trading a much safer activity; as this simpler model gains popularity, the risk of dangerous pickle files will be greatly diminished. If there\u2019s a certain model you want to try but you can\u2019t find a SafeTensors version of it, try contacting the site hosting it and ask when they will start supporting the new format.<\/p>\n\n\n<h1 class=\"wp-block-heading\" id=\"further-reading\">Further Reading<\/h1>\n\n\n<p>If you found this article helpful, here are a few more you may like:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/promptphantom.com\/the-complete-beginners-guide-to-the-stable-diffusion-interface\/\" target=\"_blank\" rel=\"noopener\" title=\"\">The Complete Beginner\u2019s Guide to the Stable Diffusion Interface<\/a><\/li>\n\n\n\n<li><a href=\"https:\/\/promptphantom.com\/the-beginners-guide-to-img2img-in-stable-diffusion\/\" target=\"_blank\" rel=\"noopener\" title=\"\">The Beginner\u2019s Guide to Img2Img in Stable Diffusion<\/a><\/li>\n<\/ul>\n\n\n<h1 class=\"wp-block-heading\" id=\"references\">References<\/h1>\n\n\n<p><a id=\"sdfootnote1sym\" href=\"#sdfootnote1anc\">1<\/a><a href=\"https:\/\/chooch.ai\/computer-vision\/what-is-an-ai-model\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/chooch.ai\/computer-vision\/what-is-an-ai-model\/<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote2sym\" href=\"#sdfootnote2anc\">2<\/a><a href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/analytics\/data-modeling.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.intel.com\/content\/www\/us\/en\/analytics\/data-modeling.html<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote3sym\" href=\"#sdfootnote3anc\">3<\/a><a href=\"https:\/\/stackoverflow.com\/questions\/2170686\/what-is-a-serialized-object-in-programming\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/stackoverflow.com\/questions\/2170686\/what-is-a-serialized-object-in-programming<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote4sym\" href=\"#sdfootnote4anc\">4<\/a><a href=\"https:\/\/www.synopsys.com\/blogs\/software-security\/python-pickling\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/www.synopsys.com\/blogs\/software-security\/python-pickling\/<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote5sym\" href=\"#sdfootnote5anc\">5<\/a><a href=\"https:\/\/docs.python.org\/3\/library\/pickle.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.python.org\/3\/library\/pickle.html<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote6sym\" href=\"#sdfootnote6anc\">6<\/a><a href=\"https:\/\/nedbatchelder.com\/blog\/201206\/eval_really_is_dangerous.html\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/nedbatchelder.com\/blog\/201206\/eval_really_is_dangerous.html<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote7sym\" href=\"#sdfootnote7anc\">7<\/a><a href=\"https:\/\/blog.trailofbits.com\/2021\/03\/15\/never-a-dill-moment-exploiting-machine-learning-pickle-files\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/blog.trailofbits.com\/2021\/03\/15\/never-a-dill-moment-exploiting-machine-learning-pickle-files\/<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote8sym\" href=\"#sdfootnote8anc\">8<\/a><a href=\"https:\/\/huggingface.co\/docs\/hub\/security-pickle\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/huggingface.co\/docs\/hub\/security-pickle<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote9sym\" href=\"#sdfootnote9anc\">9<\/a><a href=\"https:\/\/github.com\/huggingface\/safetensors\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/github.com\/huggingface\/safetensors<\/a><\/p>\n\n\n\n<p><a id=\"sdfootnote10sym\" href=\"#sdfootnote10anc\">10<\/a><a href=\"https:\/\/github.com\/civitai\/civitai\/discussions\/59\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/github.com\/civitai\/civitai\/discussions\/59<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Truth About Checkpoint Security and Safety Tips To Prevent Malware The rate at which open-source AI art generation scene is expanding could give the big bang some motion sickness. Every day, I see new custom-made models being shared with the world. But many of the people interested in AI art do not have backgrounds [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":68,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-gradient":""}},"iawp_total_views":125,"footnotes":""},"categories":[4,3],"tags":[8,9,6],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/posts\/65"}],"collection":[{"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/comments?post=65"}],"version-history":[{"count":4,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/posts\/65\/revisions"}],"predecessor-version":[{"id":817,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/posts\/65\/revisions\/817"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/media\/68"}],"wp:attachment":[{"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/media?parent=65"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/categories?post=65"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/promptphantom.com\/wp-json\/wp\/v2\/tags?post=65"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}