unlearning

Two white-box attacks recovered knowledge that LUNAR, a state-of-the-art unlearning method, was supposed to have removed - suggesting localised edits may not be enough for robust unlearning.