Backdooring a summarizerbot to shape opinion

«If you can poison a machine learning model so that it usually works, but fails in ways that the attacker can predict and the user of the model doesn’t even notice, the scenarios write themselves…» Summary of a fascinating and frightening research paper.