Pirate Face Rescues LLM Models from Deletion
https://pirateface.co/📌 P2P 保種:讓開源模型永遠不會被下架
TL;DR:Pirate Face 把 Hugging Face 上的開源模型轉存成磁力連結,用 BT 網路確保模型即使被下架也能存活。
如果 Hugging Face 有一天把某個模型下架,你還找得到它嗎?Pirate Face 給出的答案很直接:不要依賴單一平臺,讓整個 P2P swarm 替你保管一份位元組級別完全一致的副本。
🤔 開源模型的單點故障問題
Pirate Face 定位自己是「主權 AI 的永久保存層」,目標是把 LLM、圖像、音訊模型與資料集這類開源資產,從依賴單一平臺的狀態,轉成沒有單一擁有者、沒有單點故障的磁力連結(magnet link)。官網強調這是去中心化基礎設施:每個開源模型都會從 Hugging Face 鏡像成 torrent,由全球節點共同持有。
🧩 checksum 驗證 + web-seed 容錯機制
其核心設計有兩層保障。第一層是完整性:每個權重檔案都附帶 Hugging Face 官方的 SHA-256 checksum,不管從哪裡下載,雜湊值都必須吻合,確保拿到的是未被竄改的原始權重。第二層是可用性:每個模型的磁力連結內建 Hugging Face 的 web-seed,只要模型還在 HF 上,就直接從 HF 拉取位元組,速度與直接下載相同;一旦 HF 將模型下架,web-seed 隨之失效,下載會自動退回 P2P swarm,該模型會被標記為「Rescued」,只要還有人在 seed,就能持續下載。
🧩 怎麼用:改一個環境變數,pipeline 不用動
Pirate Face 主打「Drop-in API」,宣稱只要把既有 pipeline 指向的端點換掉即可,例如將 HF_ENDPOINT 環境變數設為 https://pirateface.co,訓練或推論程式碼本身不用修改。瀏覽、下載與 seed 都不需要帳號;建立帳號後可以 claim 一個公開 handle,並驗證對應的 Hugging Face 帳號來取得「Verified creator」徽章,藉此防止冒名。官網也提到未來規劃直接在平臺上發布模型(不必先上傳到 Hugging Face),以及提供免費算力額度等社群福利,但這些功能目前都尚未上線。
📊 目前規模
官網宣稱可瀏覽超過 66.9 萬個符合資格(Apache-2.0、MIT 等授權)的模型,熱門清單中包括 sentence-transformers/all-MiniLM-L6-v2、deepseek-ai/DeepSeek-V4.1-Flash、Qwen/Qwen3.8-27B 等已同步為 checksum 驗證 torrent 的模型;Zhipu AI(zai-org)等機構也已在平臺上取得 Verified 標識,公開 GLM 系列等基礎模型。
⚠️ 目前仍高度依賴 Hugging Face 本身
Pirate Face 自己在 FAQ 中也承認,目前部分機制仍依賴 Hugging Face 及其社群——模型必須先存在於 HF 上才能被收錄,不經 HF 的直接發布功能尚未上線,帳號福利也還在「即將推出」階段。也就是說,現階段它更像是 HF 的容錯鏡像層,而非完全獨立的發布平臺。
🎯 實務啟示
如果你的 pipeline 依賴某些小眾或有爭議的開源模型,擔心未來被下架導致無法復現實驗,Pirate Face 這類 checksum 驗證的鏡像是一個值得評估的備援方向。但在導入生產環境前,仍建議工程團隊自行驗證其更新即時性、checksum 機制的穩定性,以及 web-seed 失效後 swarm 的實際可用性,再決定是否依賴。
🔗 來源
- 標題:Pirate Face Rescues LLM Models from Deletion
- 作者/機構:skepticalgenius(Hacker News 投稿者)
- 連結:https://pirateface.co/
#OpenSource #HuggingFace #LLM #P2P #DecentralizedAI #ModelPreservation #Torrent #AIInfrastructure #MachineLearning #OpenModels
原始資料 Hacker News · 收集於 2026-09-20
摘要原文
Turn AI into torrents that live forever. Open models - LLMs, image, audio, datasets - as 🧲 magnet links that can never be taken down. No single owner or point of failure. pirateface.co/ Enter your handle above Type your handle above to check availability. Live ⚑ @ops-blackfuel claimed a handle · recent ✓ @ops-blackfuel verified · recent # Alibaba-NLP/gte-reranker-modernbert-base · recent ⚑ @pirateonjahfyah claimed a handle · recent ✓ @pirateonjahfyah verified · recent # Alibaba-NLP/gte-large-en-v1.5 · recent # Arrexel/pattern-diffusion · recent # calcuis/illustrious · recent ⚑ @ca claimed a handle · recent # ibm-granite/granite-embedding-small-english-r2 · recent # tencent/WeVisDoc-2B · recent # Mapika/decider-2b · recent ⚑ @ops-blackfuel claimed a handle · recent ✓ @ops-blackfuel verified · recent # Alibaba-NLP/gte-reranker-modernbert-base · recent ⚑ @pirateonjahfyah claimed a handle · recent ✓ @pirateonjahfyah verified · recent # Alibaba-NLP/gte-large-en-v1.5 · recent # Arrexel/pattern-diffusion · recent # calcuis/illustrious · recent ⚑ @ca claimed a handle · recent # ibm-granite/granite-embedding-small-english-r2 · recent # tencent/WeVisDoc-2B · recent # Mapika/decider-2b · recent See all → Trending Models Trending Apache-2.0 & MIT models, synced live from Hugging Face - each becoming a checksum-verified torrent. prism-ml/Ternary-Bonsai-2-27B-gguf updated 3d ago 🧲 Magnet text-generation 54 GB 🌱 2 1.9M sentence-transformers/all-MiniLM-L6-v2 updated today 🧲 Magnet sentence-similarity 91 MB 🌱 10 252M convaiinnovations/laya updated yesterday 🧲 Magnet text-classification 843 MB 🌱 2 0 deepseek-ai/DeepSeek-V4.1-Flash updated 10d ago 🧲 Magnet image-text-to-text 765 GB 🌱 9 497k XingChen-AGI/Xing4.0-29B-A4B updated 2d ago 🧲 Magnet text-generation 62 GB 🌱 1 13k Qwen/Qwen3.8-27B updated 37d ago 🧲 Magnet image-text-to-text 56 GB 🌱 6 7.3M ISTA-DASLab/Qwen3.8-27B-GSQ-RCO-GGUF updated 18d ago 🧲 Magnet image-text-to-text 12 GB 🌱 3 1.2M harshatheg/Qwen-2.5-1B-RLCD updated 5d ago 🧲 Magnet text-generation - Ready 0 baidu/Unlimited-OCR updated today 🧲 Magnet image-text-to-text 6.7 GB 🌱 6 2.2M Browse 669k+ eligible models → The permanence layer for sovereign AI. Pirate Face is decentralized infrastructure for sovereign AI. Every open model is mirrored from Hugging Face as a torrent, held peer-to-peer instead of by a single company. Why models should never die → Censorship-resistant Every model is a torrent that also downloads straight from Hugging Face. The day it's gone, the swarm keeps it alive - there's no single host to shut down. huggingface.co/model removed fallback ↓ pirateface.co/model 1,240 seeding Checksum-verified Every file carries its official Hugging Face SHA-256 - so you verify every byte. Download it anywhere and the hash still has to match: the real weights, never a tampered copy. model-00001.safetensors 6.7 GB SHA-256 9f86d0 81884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08 ✓ Matches Hugging Face - bit-for-bit, untampered Drop-in API soon Point your existing pipeline at Pirate Face - same paths, same API, just a different endpoint. Zero code changes. pirateface - zsh # same pipeline - one env var $ export HF_ENDPOINT = https://pirateface.co $ python train.py ✓ pulling meta-llama/Llama-4 from the swarm Claim your handle Reserve pirateface.co/yourname for your public profile. Verify your matching Hugging Face identity to earn the Verified creator badge and help prevent impersonation. Join the community for upcoming account benefits, including free compute credits and exclusive model releases. Create account You can browse, download and seed without an account. zai-org ✓ verified pirateface.co/zai-org Follow Z.ai · Zhipu AI - GLM foundation models, Beijing LLM zai-org/GLM-5.2 🌱 1,800 LLM zai-org/GLM-4-9B 🌱 1,240 VIS zai-org/CogVideoX-5B 🌱 760 FAQ What is Pirate Face? A decentralized, peer-to-peer layer for sovereign AI. Open models from Hugging Face become checksum-verified torrents, held by a global swarm so they survive any single host taking them down. The goal is permanence for open-source AI. Do I need an account to use Pirate Face? No. You can browse, download, and seed without an account. Claiming is optional. A public claim reserves your Pirate Face handle and helps the network spread. Only your first eligible handle earns welcome points. Hugging Face creator claims require verification. To receive the Verified creator badge for a current Hugging Face username or organization, you must verify the matching Hugging Face account. Until then, the handle is only reserved and does not prove identity. Direct publishing is planned. Accounts will eventually support publishing and managing models directly on Pirate Face, without first uploading them to Hugging Face. That is not live yet. Today, submitting a model requires a Hugging Face account and the model must already be on Hugging Face. Accounts also support upcoming community benefits. See account benefits . Why create a Pirate Face account? An account gives you a place to manage your claimed handles and track your contributions. Claiming reserves a public handle; verifying the matching Hugging Face identity adds the creator badge and helps prevent impersonation. Pirate Face is preparing community benefits for account holders, including free compute credits and exclusive model releases . You can browse, download and seed without an account. Why use Hugging Face verification if the goal is independence from centralized hosting? Hugging Face verification confirms that someone claiming a creator’s handle controls the matching HF account or organization. It helps prevent impersonation and preserves attribution as models spread beyond their original host. You don’t need verification, or an account, to browse, download or seed. Pirate Face’s short-term goal is for model availability to outlive any single hosting platform. Today, parts of Pirate Face depend on Hugging Face and its community. Pirate Face is working to allow direct model publishing soon, without first uploading to HF. Does my Pirate Face handle have to match my Hugging Face username? No. You can reserve an available name, but the verified badge requires a matching Hugging Face identity. For example, a Hugging Face account named john123 can verify john123 , not john . You can still reserve john , but it stays unverified. The matching Hugging Face owner could reclaim that handle without deleting your Pirate Face account. Manage your connected accounts and reserved handles in Account . Could someone impersonate a creator here? Both are protected: The weights can't be faked - every file is checksum-verified against Hugging Face's official SHA-256. The handle - anyone can reserve a name (it shows reserved , no Verified creator ), but only proving the matching Hugging Face identity earns the Verified creator . A squatter can't lock you out: the real owner reclaims a reserved name by verifying. What does “checksum-verified” mean? Every weight file carries its official Hugging Face SHA-256 - a unique fingerprint of the exact bytes. Download it from anywhere and the hash still has to match, so you always know it's the real weights, never a tampered copy. It's the #1 fear with mirrored models, so it's a first-class feature here. How do downloads work, and what if Hugging Face removes a model? Every model is a magnet link (a torrent) with a Hugging Face web-seed built in - so it works even with zero peers. While it's on Hugging Face: you pull the bytes straight from HF - same weights, checksum-verified, same speed. The day HF removes it: the web-seed dies and the download falls back to the peer-to-peer swarm. We mark it Rescued - still reachable, kept alive by whoever's seeding. That fallback is the whole point: the same bytes as downloading from Hugging Face directly, but with no single point of failure (and the swarm can serve far-from-HF regions faster). Can I add my own model? (277 points, 104 comments on Hacker News)
由 claude-code/sonnet 自動生成