Fetching the paper…

Auditing Differentially Private Machine Learning: How Private is Private SGD? · Around