The Privacy Onion Effect: Memorization is Relative - Carlini, Nicholas; Jagielski, Matthew; Zhang, Chiyuan; Papernot, Nicolas; Terzis, Andreas; Tramer, Florian (Advances in Neural Information Processing Systems, 2022)