Research question
What do model updates reveal about participants' data in collaborative training?
Key findings
- Updates leak membership and unintended properties of other participants' data - Property inference works even for properties unrelated to the task
