AI

Nvidia's AI Software Tricked Into Leaking Data 10

An anonymous reader quotes a report from Ars Technica: A feature in Nvidia's artificial intelligence software can be manipulated into ignoring safety restraints and reveal private information, according to new research. Nvidia has created a system called the "NeMo Framework," which allows developers to work with a range of large language models -- the underlying technology that powers generative AI products such as chatbots. The chipmaker's framework is designed to be adopted by businesses, such as using a company's proprietary data alongside language models to provide responses to questions -- a feature that could, for example, replicate the work of customer service representatives, or advise people seeking simple health care advice.

Researchers at San Francisco-based Robust Intelligence found they could easily break through so-called guardrails instituted to ensure the AI system could be used safely. After using the Nvidia system on its own data sets, it only took hours for Robust Intelligence analysts to get language models to overcome restrictions. In one test scenario, the researchers instructed Nvidia's system to swap the letter 'I' with 'J.' That move prompted the technology to release personally identifiable information, or PII, from a database.

The researchers found they could jump safety controls in other ways, such as getting the model to digress in ways it was not supposed to. By replicating Nvidia's own example of a narrow discussion about a jobs report, they could get the model into topics such as a Hollywood movie star's health and the Franco-Prussian war -- despite guardrails designed to stop the AI moving beyond specific subjects. In the wake of its test results, the researchers have advised their clients to avoid Nvidia's software product. After the Financial Times asked Nvidia to comment on the research earlier this week, the chipmaker informed Robust Intelligence that it had fixed one of the root causes behind the issues the analysts had raised.
Twitter

What Instagram's Upcoming Twitter Competitor Looks Like (theverge.com) 13

During a companywide meeting, Meta's chief product officer, Chris Cox, revealed a preview of the company's upcoming Twitter competitor, a standalone app based on Instagram that will integrate with the decentralized social media protocol, ActivityPub. "That will theoretically allow users of the new app to take their accounts and followers with them to other apps that support ActivityPub, including Mastodon," reports The Verge. From the report: The forthcoming app, which, in the meeting today, Meta chief product officer Chris Cox called "our response to Twitter," will use Instagram's account system to automatically populate a user's information. The internal codename for the app is "Project 92," and its public name could be Threads, based on internal documents also seen by The Verge.

"We've been hearing from creators and public figures who are interested in having a platform that is sanely run, that they believe that they can trust and rely upon for distribution," Cox said, throwing direct shade at Elon Musk's handling of Twitter, to cheers from the audience. He said the company's goal for the app was "safety, ease of use, reliability" and making sure that creators have a "stable place to build and grow their audiences."

Cox said the company already has celebrities committed to using the app, including DJ Slime, and was in discussions with other big names, including Oprah and the Dalai Lama. He said "coding began" for the app in January and that Meta will be making the app available "as soon as we can."

China

China Is Planning To Restrict and Scrutinise the Use of Wireless Filesharing Services (theguardian.com) 17

Longtime Slashdot reader mspohr shares a report from The Guardian: China is planning to restrict and scrutinize the use of wireless filesharing services between mobile devices, such as airdrop and Bluetooth, after they were used by protesters to evade censorship and spread protest messages. The Cyberspace Administration of China, the country's top internet regulator, has released draft regulations on "close-range mesh network services" and launched a month-long public consultation on Tuesday.

Under the proposed rules, service providers would have to prevent the dissemination of harmful and illegal information, save relevant records and report their discovery to regulators. Service providers would also have to provide data and technical assistance to the relevant authorities, including internet regulators and the police, when they conduct inspections. Users must also register with their real names. In addition, features and technologies that have the capability to mobilize public opinion must undergo a security assessment before they could be introduced.

Apple, in particular, came under the spotlight after some Chinese protesters used airdrop in 2022 to bypass surveillance and circulate messages critical of the regime by sending them to strangers on public transport. The tool was a relatively untraceable method for sharing files in China, where most social media and messaging platforms are tightly monitored. Shortly later, Apple limited the use of airdrop on iPhones in China, allowing Chinese users to receive files from non-contacts for only ten minutes at a time. The proposed rules will take control of similar functions up a notch, requiring the receiving of files and preview of thumbnails to be disabled by default.

Facebook

Meta's First Generative AI Feature Will Be AI Stickers In Messenger 15

Meta is planning to introduce AI-generated stickers on Messenger, allowing users to create stickers based on text prompts. The Verge reports: During a companywide meeting today that The Verge listened to, Ahmad Al-Dahle, Meta's vice president of AI, told employees that the company will leverage its image generation model to let users create stickers based on text prompts. Employees will begin testing the feature internally before it's made available to the public. "With AI-generated stickers, our users can have infinitely more options for self-expression, cultural representations, and even trend relevance," Al-Dahle says. "Of course, stickers are just the tip of the iceberg."

Al-Dahle adds that the company is also "working on AI models that are going to transform any image you want in any way you want." That includes doing things like "changing the aspect ratio of your picture" or turning a picture of a corgi "into a painting."
Transportation

Mercedes First To Sell Vehicles In California With Hands-Free, Eyes-Off Automated Driving (techcrunch.com) 56

An anonymous reader quotes a report from TechCrunch: Mercedes-Benz received a permit from California regulators that will allow the German automaker to sell or lease vehicles in the state equipped with a conditional automated driving system that allows for hands-off, eyes-off driving on certain highways. The California Department of Motor Vehicles said Thursday it issued an autonomous vehicle deployment permit to Mercedes-Benz for its branded Drive Pilot system. The hands-off, eyes-off system can be used on designated California highways, including Interstate 15, under certain conditions without the active control of a human driver. This means drivers can watch videos, text or talk to a passenger (or even mess around with any number of third-party apps coming to new Mercedes models) without watching the road ahead or having their hands on the wheel.

Mercedes-Benz is the fourth company to receive an autonomous vehicle deployment permit in California and the first authorized to sell or lease vehicles with an automated driving system to the public, according to the DMV, which regulates autonomous vehicles in the state. The deployment permit allows Drive Pilot to be used on highways in the Bay area, central valley, Los Angeles, Sacramento and San Diego. Drive Pilot is not the same as the fully autonomous systems developed by Waymo, Cruise, Motional and Zoox -- although some of the same principles apply. The Drive Pilot system uses a combination of sensors such as lidar, radar and camera coupled with software to handle driving tasks in certain conditions without the active control of a human driver. Mercedes' system is only available at speeds of up to 40 miles per hour, during daylight hours on certain highways. The system will not engage on city or county roads, in construction zones, during heavy rain or heavy fog, on flooded roads and during weather conditions that are determined to impact performance of the system, according to the DMV.

The DMV has placed other conditions on Mercedes, including that vehicle owners must watch a mandatory video explaining the capabilities of the system and how to engage and disengage the technology before they can access it. Mercedes also has to meet a number of safety, insurance and vehicle registration requirements. Mercedes has taken a conservative approach to its Drive Pilot system, requesting approval from every U.S. state's regulatory body even in cases where there is not a direct restriction from using such technology. The automaker first deployed Drive Pilot in Germany. It received approval from Nevada earlier this year.

Hardware

Acer Is Still Shipping PCs To Russia (yahoo.com) 67

Required Snark writes: Acer is selling computers in Russia even though they claimed they would abide by the Taiwanese government's commitment to the international embargo on western technology. The sales are through their Swiss subsidiary Acer Sales International SA. This subterfuge means Acer's position is nominally true even while they are breaking the embargo. Neither Russian, Swiss or Taiwanese government officials would comment on the report. According to Reuters, "Taiwan-based computer manufacturer Acer supplied at least $70.4 million worth of computer hardware to Russia between April 8, 2022 and March 31, 2023."

The actions aren't illegal because the shipments originated outside Taiwan, circumventing Taipei's sanctions against Russia. "Nor did they involve items restricted at the time of export by Switzerland's sanctions regime, which mirrors that of the European Union," adds Reuters. It does, however, contradict the company's statement on April 8 last year when it said it would "suspend its business in Russia."
Transportation

GM Announces It Will Also Adopt Tesla's NACS Connector, Joining Ford 141

GM has confirmed that it will adopt Tesla's North American Charging Standard (NACS) for its future electric vehicles, following in the footsteps of Ford. Electrek reports: This is likely the next step in a domino effect that should solidify NACS as the new charging standard for electric cars in North America. When Tesla announced last year that it opened up its proprietary charging connector to try to make it the industry standard in North America, we thought it might be too little too late, despite agreeing that Tesla's plug was a much superior design than the current CCS standard. However, we were proven wrong last month when Ford announced that it will integrate the NACS in its future electric vehicles.

GM CEO Mary Barra confirmed that General Motors will also adopt NACS with the help of Tesla in future electric vehicles. Barra made the announcement with Tesla CEO Elon Musk on Twitter. She said that the first vehicles with the plug will come in 2025 and like Ford, GM EV owners will all have access to Tesla's Supercharger network starting in 2024 with a CCS to NACS adapter. Like Ford, GM's Bara referenced the more efficient design of Tesla's connector and the "robustness" of Tesla's Supercharger network as reasons to adopt the standard.
Barra said in a statement: "Our vision of the all-electric future means producing millions of world-class EVs across categories and price points, while creating an ecosystem that will accelerate mass EV adoption. This collaboration is a key part of our strategy and an important next step in quickly expanding access to fast chargers for our customers. Not only will it help make the transition to electric vehicles more seamless for our customers, but it could help move the industry toward a single North American charging standard."
Facebook

What Mark Zuckerberg Thinks About Apple's Vision Pro (theverge.com) 103

An anonymous reader quotes a report from The Verge: Mark Zuckerberg doesn't seem fazed by Apple's introduction of the Vision Pro. In a companywide meeting with Meta employees today that The Verge watched, the CEO said Apple's device didn't present any major breakthroughs in technology that Meta hadn't "already explored" and that its vision for how people will use the device is "not the one that I want." He also pointed to the fact that Meta's upcoming Quest 3 headset will be much cheaper, at $499 compared to the Vision Pro's $3,499 price tag, giving Meta the opening to reach a wider user base.

"I think that their announcement really showcases the difference in the values and the vision that our companies bring to this in a way that I think is really important," Zuckerberg told employees, who were gathered at the company's Menlo Park, California, headquarters for its first all-hands meeting since 2020. Zuckerberg said that the Quest is about "people interacting in new ways and feeling closer" while also "about being active and doing things." "By contrast, every demo that they showed was a person sitting on a couch by themself," he said of Apple's WWDC keynote earlier this week. "I mean, that could be the vision of the future of computing, but like, it's not the one that I want."

Google

Google To Include Office Attendance In Performance Reviews (cnbc.com) 135

Google is implementing stricter measures to enforce office attendance, including tracking badge data, confronting employees who don't come in as required, and factoring attendance into performance reviews. CNBC reports: Google's chief people officer, Fiona Cicconi, wrote an email to employees at the end of the day on Wednesday, which included doubling down on office attendance, reasoning that "there's just no substitute for coming together in person." "Of course, not everyone believes in 'magical hallway conversations,' but there's no question that working together in the same room makes a positive difference," Cicconi's email read. "Many of the products we unveiled at I/O and Google Marketing Live last month were conceived, developed and built by teams working side by side."

Her note said the company will start including their three days per week as a part of their performance reviews and teams will start sending reminders to workers "who are consistently absent from the office." Cicconi even asked already-approved remote workers to reconsider. "For those who are remote and who live near a Google office, we hope you'll consider switching to a hybrid work schedule. Our offices are where you'll be most connected to Google's community." A separate internal document showed that already-approved remote workers may be subject to reevaluation if the company determines "material changes in business need, role, team, structure or location."

In the U.S., the company will periodically track whether employees are adhering to the office attendance policy using badge data, and executives are currently reviewing local requirements to implement in other countries, one of the documents states. If workers don't follow the policy after an extended period of time, human resources will reach out about "next steps." Going forward, Cicconi said, new fully remote work will only be granted "by exception only."
In a statement to CNBC, Google spokesperson Ryan Lamont said, "our hybrid approach is designed to incorporate the best of being together in person with the benefits of working from home for part of the week. Now that we're more than a year into this way of working, we're formally integrating this approach into all of our workplace policies."

Lamont added that the badge data viewed by company leaders is aggregate data and not individualized.
Government

Louisiana Passes Bill Banning Kids From the Internet Without Parental Consent (theverge.com) 108

Louisiana lawmakers have passed a bill that would prohibit minors from creating their own social media accounts without parental consent, potentially impacting popular platforms like Instagram and online games such as Roblox and Fortnite. The Verge reports: The bill, HB61, would ban "interactive computer services" from allowing people under 18 to sign up for their own accounts without parental consent. The bill's definition of online services is extremely broad, seemingly barring minors from creating social media accounts on sites like Instagram, accessing popular online games like Roblox and Fortnite, or even registering for an email address. The bill also goes as far as allowing parents to cancel the terms of service contracts their children entered into when signing up for existing accounts.

As of publication, it's unclear how the state plans to enforce these new rules, but it calls on state entities to review the bill and provide feedback before it would go into effect. The Louisiana State Legislature passed the bill unanimously on Tuesday, sending it to Gov. John Bel Edwards' desk for final approval. The ban would go into effect August 1st of next year if he chooses to sign it.
"We are hopeful that Governor Edwards will veto this bill. It violates First Amendment rights, takes away parental rights for their families and requires massive data collection on all Louisiana citizens," NetChoice vice president and general counsel Carl Szabo said in a statement Thursday.

"It's true that Big Tech's advertising model hurts kids and teens," Fight for the Future said in a call for people to tell their elected officials not to pass online age restrictions. "But age-gating all social media, for anyone under 18? That won't solve the problem, and it's a direct attack on millions of young people's First Amendment rights."

Further reading: Congress Shocked To Discover 10 Year Olds Check the 'I'm Over 18' Box Online [Not The Onion]
Facebook

Meta Plans To Put AI Everywhere on Its Platforms 35

Meta CEO Mark Zuckerberg announced a plan to employees on Thursday that will see it put generative AI text, image and video generators into its flagship products, such as Facebook and Instagram. From a report: At an all-hands meeting with workers on Thursday, Zuckerberg announced a range of technologies at various stages of development, with some for internal use but many designed directly for consumers. One, for example, will allow customers to use a text prompt to modify their own photos and share them in Instagram Stories.

Another will bring AI agents with different personalities and capabilities to help or entertain. That's focused initially for use in Messenger and WhatsApp. The company is also hosting an internal hackathon in July focused on generative AI.
Google

Google Lifts Ban on Downloader App (arstechnica.com) 10

Google has reversed the suspension of an Android TV app that was hit with a copyright complaint simply because it is able to load a pirate website that can also be loaded in any standard web browser. From a report: The Downloader app, which combines a web browser with a file manager, is back in the Google Play Store after an absence of nearly three weeks. As we previously reported, Google suspended the app based on a Digital Millennium Copyright Act (DMCA) complaint from several Israeli TV companies that said the app "allows users to view the infamous copyright infringing website known as SDAROT." But that same website could be viewed on any standard browser, including Google's own Chrome app.

"The app was removed on May 19th due to the DMCA takedown request," developer Elias Saba wrote in a blog post today. "Instead of recognizing the absurdity of the claim that a web browser is somehow liable for all the unauthorized use of copyrighted content on the Internet, Google took a backseat and denied my appeal to have the app reinstated." The free app has been downloaded over 5 million times on Google Play and is available on the Amazon app store for devices such as Fire TVs. In addition to the rejected appeal, Saba filed a DMCA counter notification with Google. That "started a 10-business-day countdown for the [TV companies'] law firm to file legal actions against me," Saba wrote today. "Due to the app being removed on a Friday and the Memorial Day holiday, 10 business days had elapsed with no word from the law firm on June 6th and I contacted Google to have the app reinstated."

Google

Google's Password Manager Gains Biometric Authentication on Desktop (techcrunch.com) 18

Google's aiming to make it easier to use and secure passwords -- at least, for users of the Password Manager tool built into its Chrome browser. From a report: Today, the tech giant announced that Password Manager, which generates unique passwords and autofills them across platforms, will soon gain biometric authentication on PC. (Android and iOS have had biometric authentication for some time.) When enabled, it'll require an additional layer of security, like fingerprint recognition or facial recognition, before Chrome autofills passwords.

Exactly which types of biometrics are available in Password Manager on desktop will depend on the hardware attached to the PC, of course (e.g. a fingerprint reader), as well as whether the PC's operating system supports it. Beyond "soon," Google didn't say when to expect the feature to arrive.

Social Networks

Instagram's Recommendation Algorithms Are Promoting Pedophile Networks (theverge.com) 61

According to a joint investigation from The Wall Street Journal and researchers at Stanford University and the University of Massachusetts Amherst, Instagram's algorithms are actively promoting networks of pedophiles who commission and sell child sexual abuse content on the app. The Verge reports: Accounts found by the researchers are advertised using blatant and explicit hashtags like #pedowhore, #preteensex, and #pedobait. They offer "menus" of content for users to buy or commission, including videos and imagery of self-harm and bestiality. When researchers set up a test account and viewed content shared by these networks, they were immediately recommended more accounts to follow. As the WSJ reports: "Following just a handful of these recommendations was enough to flood a test account with content that sexualizes children."

In addition to problems with Instagram's recommendation algorithms, the investigation also found that the site's moderation practices frequently ignored or rejected reports of child abuse material. The WSJ recounts incidents where users reported posts and accounts containing suspect content (including one account that advertised underage abuse material with the caption "this teen is ready for you pervs") only for the content to be cleared by Instagram's review team or told in an automated message [...]. The report also looked at other platforms but found them less amenable to growing such networks. According to the WSJ, the Stanford investigators found "128 accounts offering to sell child-sex-abuse material on Twitter, less than a third the number they found on Instagram" despite Twitter having far fewer users, and that such content "does not appear to proliferate" on TikTok. The report noted that Snapchat did not actively promote such networks as it's mainly used for direct messaging.

In response to the report, Meta said it was setting up an internal task force to address the issues raised by the investigation. "Child exploitation is a horrific crime," the company said. "We're continuously investigating ways to actively defend against this behavior." Meta noted that in January alone it took down 490,000 accounts that violated its child safety policies and over the last two years has removed 27 pedophile networks. The company, which also owns Facebook and WhatsApp, said it's also blocked thousands of hashtags associated with the sexualization of children and restricted these terms from user searches.

Television

United Airlines Adding 4K OLED TVs For In-Flight Entertainment (androidheadlines.com) 57

United Airlines is set to introduce the next-generation Astrove in-flight entertainment system, featuring Panasonic's 4K OLED TVs, with larger screens and thinner bezels than current models. The system also offers Bluetooth 5.0 connectivity, allowing passengers to use their own wireless headphones, and includes two 67W USB-C chargers for charging mobile devices. However, these new entertainment systems will only be available on United's new Airbus A321XLRs and Boeing 787s starting in 2025. Android Headlines reports: The new Astrova System does also have two 67W USB-C chargers available on the bottom-left edge. This means you can use it to charge your phone as well as your laptop or tablet at the same time. So that when you land, you have fully juiced devices. This is all being done to create a "premium home theater environment."
Cloud

AWS Teases Mysterious Mil-Spec 'Snowblade' Server (theregister.com) 27

Amazon Web Services has announced a new member of its "Snow" family of on-prem hardware -- but the specs of the machine appear not to be available to eyes outside the US military. From a report: AWS announced the "Snowblade" on Tuesday, revealing it's a "portable, compact 5U, half-rack width form-factor" that can offer up to 209 vCPUs running "AWS compute, storage, and other hybrid services in remote locations, including Denied, Disrupted, Intermittent, and Limited (DDIL) environments."

The boxes can run Amazon EC2, AWS IAM, AWS CloudTrail, AWS IoT Greengrass, AWS Deep Learning AMIs, Amazon Sagemaker Neo, and AWS DataSync. The device meets the US military's MIL-STD-810H Ruggedization Standards, meaning it can handle extreme temperatures, vibrations, and shocks. The cloud colossus's brief description also lauds the Snowblade as "the densest compute device of the AWS Snow Family allowing Joint Warfighting Cloud Capability (JWCC) customers to run demanding workloads in space, weight, and power (SWaP) constrained edge locations." The AWS announcement links to more information on its Joint Warfighting Cloud Capability (JWCC) -- and there be dragons. Your correspondent's civilian-grade AWS account was unable to access JWCC resources.

Social Networks

Reddit Will Exempt Accessibility-Focused Apps From Its Unpopular API Pricing Changes (theverge.com) 38

Reddit is creating an exemption to its unpopular new API pricing terms for makers of accessibility apps, which could come as a big relief for some developers worried about how to afford the potentially expensive fees and the users that rely on the apps to browse Reddit. From a report: As long as those apps are noncommercial and "address accessibility needs," they won't have to pay to access Reddit's data. "We've connected with select developers of non-commercial apps that address accessibility needs and offered them exemptions from our large-scale pricing terms," Reddit spokesperson Tim Rathschmidt says in a statement to The Verge.

The Reddit community has been in an uproar over the API pricing changes that might saddle developers with exorbitant charges and force them to shut down. Apollo developer Christian Selig, for example, says he'll be on the hook for about $20 million per year based on the updated pricing. Three days ago, moderators on the r/Blind subreddit posted an extensive message protesting the pricing changes, which could be hugely detrimental to apps for screen reader users like RedditForBlind and Luna For Reddit.

Social Networks

New York City Sues Kia and Hyundai Over Car Thefts That Went Viral on TikTok (theverge.com) 98

New York City became the latest city to file suit against Hyundai and Kia over a rash of vehicle thefts that went viral on TikTok and other social media platforms in recent years, according to The Wall Street Journal. From a report: In its lawsuit, the US attorney's office for the Southern District of New York claims the automakers were guilty of negligence by failing to include anti-theft devices in their cars that would have made them much harder to steal. The so-called "Kia Challenge" has led to hundreds of car thefts nationwide, including at least 14 reported crashes and eight fatalities, according to the National Highway Traffic Safety Administration. Thieves known as the "Kia Boys" would post instructional videos on YouTube and TikTok about how to bypass the vehicles' security systems using tools as simple as a USB cable. Other videos would feature joyrides in stolen vehicles and the resulting property destruction.
Google

Google Cloud is Partnering With Mayo Clinic (cnbc.com) 11

Google's cloud business is expanding its use of new artificial intelligence technologies in health care, giving medical professionals at Mayo Clinic the ability to quickly find patient information using the types of tools powering the latest chatbots. From a report: On Wednesday, Google Cloud said Mayo Clinic is testing a new service called Enterprise Search on Generative AI App Builder, which was introduced Tuesday. The tool effectively lets clients create their own chatbots using Google's technology to scour mounds of disparate internal data. In health care, that means workers can interpret data such as a patient's medical history, imaging records, genomics or labs more quickly and with a simple query, even if the information is stored across different formats and locations. Mayo Clinic, one of the top hospital systems in the U.S. with dozens of locations, is an early adopter of the technology for Google, which is trying to bolster the use of generative AI in the medical system.

Mayo Clinic will test out different use cases for the search tool in the coming months, and Vish Anantraman, chief technology officer at Mayo Clinic, said it has already been "very fulfilling" for helping clinicians with administrative tasks that often contribute to burnout. For instance, if a physician needs to see information about a cohort of female patients aged 45 through 55, including their mammograms and medical charts, they can enter that query into the search tool instead of seeking out each element separately. Similarly, if a physician needs to know which clinical trials a patient may match, they can search for that, too.

United States

Pornhub Attacks States for Passing 'Unsafe' Age-Verification Laws (arstechnica.com) 98

Pornhub visitors in Virginia, Mississippi, and Arkansas will see a "very important message" on the adult website's homepage starting today. From a report: Pornhub's public service announcement prompts visitors to contact representatives and oppose recently passed age-verification laws in these states that Pornhub claims puts children and all users' privacy at risk. If users don't support Pornhub before laws go into effect, the company says, Pornhub could potentially restrict access in these states -- a threat it already followed through on in Utah.

In the PSA, adult entertainer Cherie Deville tells Pornhub users that instead of states requiring ID to access adult content, "the best and most effective solution for protecting children and adults alike is to verify users' age at a device level and allow or block access to age-restricted materials and websites accordingly." According to CNN, this PSA is part of a larger effort by Pornhub and its private equity owners, Ethical Capital Partners (ECP), to work with big tech companies to create new device-based age verification solutions. So far, ECP partner Solomon Friedman told CNN that ECP has lobbied Apple, Google, and Microsoft to "develop a technological standard that might turn a user's electronic device into the proof of age necessary to access restricted online content."

Slashdot Top Deals