# A deep dive on AI model distillation attacks

Page: https://stenobird.com/podcast/risky-business-features-7716365/a-deep-dive-on-ai-model-distillation-attacks
Text version: https://stenobird.com/podcast/risky-business-features-7716365/a-deep-dive-on-ai-model-distillation-attacks.md
Podcast: [Risky Business Features](https://stenobird.com/podcast/risky-business-features-7716365)
Published: 2026-04-29T04:24:47+00:00
Episode link: https://risky.biz/RBFEATURES17/
Audio file: https://dts.podtrac.com/redirect.mp3/media3.risky.biz/RBFEATURES17.mp3
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/risky-business-features-7716365/episodes/a-deep-dive-on-ai-model-distillation-attacks
Duration seconds: 4328

## Resource

In this solo episode of Risky Business Features James Wilson explores how distillation techniques are both a legitimate way to train smaller models, as well as a way to steal model capabilities. It’s not just a problem for frontier labs! Any LLM-based product could have its competitive advantage stolen through these attacks. James covers: High-level concept of distillation Why it matters including close/open-weight/open-source explanation Types of distillation and the prompts used The distillation pipeline end to end Distillation at scale and mitigation techniques Hardware resource constraints for distillation

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/risky-business-features-7716365/episodes/a-deep-dive-on-ai-model-distillation-attacks/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/risky-business-features-7716365/a-deep-dive-on-ai-model-distillation-attacks.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.