c4ede56bbd98819ae6112b20ac6bf145-AuthorFeedback.pdf
–Neural Information Processing Systems
Reviewer 2: Regarding technical novelty, note that we propose a deceptively simple new attack that nevertheless19 significantly broadens the applicability of gradient inversion attacks. However, as these merely confirm the proven statement of Prop. Ananalysisofattacks47 against differentially private models is highly interesting and a topic of future work for us.
