XSMerge-RealisticVisionV3-ForArchitectural（建筑向RV3）

Thank you! I mistakenly included this with some models I was using to generate people, and the results were only slightly horrific! I had to laugh when I realized what model did that, I can't wait to use it for its intended purpose!

well i cant say much more than what i read in subreddits:

AFAIK .pt .bin and .ckpt can all include arbitrary python code, so without any security check at all, theres the potential thread of basically any virus/trojan/malware attack imaginable.

The .safetensor format tried to mitigate this risk by being basically just plain data. ive read someone probably much more qualified then myself saying that its theoretically possible to create a safetensor in such a way that it would be able to surpass this barrier by breaking out of memory and then being able to execute code, but ive yet to see anything on the web related to executing such an attack.

for stuff scanned by civitai its like with a normal anti-virus, the pickle scanner will look for code inside the data that could execute malicious commands, but it can only recognize what it knows. so there is always the possibility that someone could craft a file in such a way that the scanner wouldnt recognize their new yet to be catalogued malicious code.

for safetensors the same risk exists, but its definitely more complex to write something that breaks out of the plain data restriction and then execute said malicious code, it takes more layers and a much more sophisticated attack for this filetype, and those who would first find a way (if there arent already thousands of those on the dark web that i dont know about) should definitely sell the code for millions or hack some pedo billionaires instead of some poor as weebs on the internet.

Thus we can conclude that no filetype is safe. nothing is safe with computers, EVER.

its all about your personal risk evaluation and the risks you take.
downloading safetensors from reputable sources with many followers and downloads who even give out personal information and stand behind their models with their own name are no guarantee you wont get hacked, but they surely are the most risk free option atm.

on the other hand "leaked" sdxl checkpoints in .ckpt format, of which staff of stability ai themselves warns against on reddit are a sure fire way to get hacked.

same goes for not yet verified .pt embeddings from people with just one upload. they certainly dont have to be nefarious, but i'd recommend letting someone else try it out first.

This is where we come fake likes and stuff. one could easily make a few accounts to download and heart a malicious model that you just crafted and uploaded to make it seem more legit, look at their followers and the followers uploaded models and generated images if your suspicion is raised.

if you work with stable diffusion and your monthly income depends on it, i'd be extemely careful to only download safetensors from reputable sources.

if you got an off side backup and are a normal everyday consumer, just dont download files in not safetensor formats from people you dont trust.

no matter what, if you join the realm of downloading cutting edge technological files from the interwebs that in any shape or form break anyones copyright, you should always protect yourself as if you're downloading random files from strangers on piratebay. Use a good (better multiple) anti-virus software, regularely update windows/linux, especially security updates. have a backup of your files, and another backup off-site, meaning air-gapped, not connected to the internet or pc, update it monthly or something, not too often. modern malware can be as intelligent to wait on your pc for a certain amount of time in the hopes of being backed up on all your storages so you cant roll back when they encrypt all your files and ransom you to pay them in Monero or some other dogshit memecoin. If you get caught by this scheme, dont pay the ransom, its almost certainly not resulting in them decrypting your files. if they want bitcoin, call the cops, the blockchain records every transaction ever, if you're lucky and they aren't mixing their coins randomly with other criminals, they can certainly be traced back and stopped from scamming more people.

And lastly, take everything you just read with a grain of salt. you never know what exploits may already be available to paying customers on the dark web or governments.

one should think you're safe if you arent downloading shit like cp or bestiality, but its not that easy.

I can imagine downloading russian/ukrainian models midst an ongoing war being much more likely to contain trojans than for example these architectural models.

on the other hand, just bc it seems professional doesnt neccassitate professionalism, theres a lot of money in architecture, if you can hack everyone using your models to then let a scanner automatically rate the best generations and use these to sell as your own architectural ideas to customers could be a great dirty business scheme. Im of the strong belief at this point that XSarchitectural is a fair player and i love his models, just picked this example so you realize the most important thought process before downloading anything from the web: "what could the hacker get out of it?"

if you load illegal stuff you can get blackmailed, if you load legal stuff that has a potential monetary benefit, people will try to get rich off of your work/compute resources.

you will like with everything you do in life do a risk benefit analysis and evaluate weither its worth it to you personally.

also dont trust other sites without a scanner at all and don't support sites that dont credit the creators. It may seem safer to download from a site you pay to use, but most of these sites just scraped civitai and are selling free models without giving credit and sometimes even injecting malware additionally to scamming you.

Stay safe out there, much love y'all