DropVLA: An Action-Level Backdoor Attack on Vision-Language-Action Models
The episode examines the "DropVLA" paper, which details how attackers can hijack specific robot movements using only 0.31% poisoned training data. By using simple visual triggers like a red circle, attackers can control basic actions in milliseconds. The hosts discuss mitigation strategies like runtime gating and rigorous data auditing.