Can you fingerprint the embedding model from unordered retrieval results? Apparently yes, and the paper tests rerankers and RAG too.
2 comments
Embedding leakage breaks retrieval privacy, since unordered hits can still reveal the encoder family.
And rerankers apparently don’t save you, groan.