inswapper_128.onnx may be unsafe

[chrisbward]

First, confirm

• I have read the instruction carefully
• I have searched the existing issues
• I have updated the extension to the latest version

What happened?

Hi, please read the following for your consideration;
deepinsight/insightface#2315

It's important for the community as a whole to not get in to the habit of downloading unknown binaries. I tried my best to get the authors of inswapper_128.onnx to publish the checksum hash of the file, but to no joy.

Proceed with caution.

p.s. runew0lf, you are the lamest

Steps to reproduce the problem

1. Go to ....
2. Press ....
3. ...
   n/a

Sysinfo

n/a

Relevant console log

n/a

Additional information

n/a

[Gourieff]

Hello
ReActor's installation script downloads inswapper model from the original repo, facefusion -> facefusion-assets, created by the original Author of the "inswapper_128.onnx" model (as I know) @henryruhs Henry Ruhs (correct me if I'm wrong)
Henry Ruhs was at the start point of the Roop project and he has the original inswapper_128 model that is now used by the FaceFusion application

[henryruhs]

I'm not the author of that model, the team around insightface is... but I suggest your host your models on your own.

[Gourieff]

Ok, thanks for the answer and clarification

[Gourieff]

So, I'm converting it to discussion, there's no issues here

[chrisbward]

Perhaps you did not read the thread I linked, but there is no guarantee that the file is safe.

At best all you can do is publish the known checksum hash with a caveat.

[Gourieff]

I read it and I understand what you want to say
I've just checked and the model from the facefusion repo has the same hash you provided:

MD5 inswapper_128.onnx:
a3a155b90354160350efd66fed6b3d80

SHA256 inswapper_128.onnx:
e4a3f08c753cb72d04e10aa0f7dbe3deebbf39567d4ead6dce08e98aa49e16af

I will add this info to the readme and perhaps will add an option to check the hash of the applied model

[chrisbward]

the binaries have now been changed, so watch out