New method extracts massive training data from AI models