To summarize the previous discussion-even if the private data itself is not shared with the server, the gradients of the trained network are, which makes it possible to extract information about the t...