Did they do so by looking at inference prompts against their explicit promises, or maybe just because somebody tipped them off about his unpublished work?
If it's not the former, while certainly concerning, I don't see how that's relevant here (other than maybe in a very vague general sense of "entities doing immoral/illegal thing X are likely to also do immoral/illegal thing Y").
A faster engine is still very useful in practice, for example for position evaluations in game review.
Not that an engine evaluation will always be helpful (the line in question making a position strong or weak might be effectively unplayable/impossible to find by a human), but it’s useful for studying nevertheless.
It also sounds pretty useful for anyone involved in a lawsuit to be able to present photographic evidence again. I’m sure GenAI is already a big headache for forensics, and enforcing AI watermarks will clearly not be bulletproof.
Will it ever work until a TPM like module is directly integrated into camera sensor? Older attempts of Nikon and Canon got broken, same had happened with C2PA implementation for Android - if it gets anywhere close to CPU it is insecure.
Yes, presumably there will be a cat and mouse game until the entire system including all peripherals has been brought into the trusted computing base, either physically or logically (usually with secured/authenticated communication). This has been the case for all applications of trusted computing.
Security is never a binary property, however, and can usually be better expressed in terms of how expensive it would be to subvert a given mechanism. "This image is either authentic or would have cost at least $x to fake" is already much more useful than nothing at all even without $x trending to infinity.
Images that are meant to be 2d (E.g. a photo of something on paper) isn't going to look 3d. I guess this approach will just have to let anything flat through?
"I took a real photo of this image printed on paper" seems possible to falsify, yeah, but that doesn't seem too surprising to me, given that anyone with a printer can print literally any possible image.
How would the server know that the request is coming from a real iPhone?
This is a pretty standard application of trusted computing and can be done entirely on the iPhone. A server would only possibly be needed for anonymization (while retaining key revocation capabilities if a key does end up leaking), but there are serverless ways to do even that (TPMs have supported these for a while now).
It wouldn't, but you could validate that a particular picture was created at a particular time, and had not changed, for example, especially with metadata that you may not want to share but that establishes certain parameters like gps coordinates. A lock, rather than an end-to-end pixel signature, which shows what was contemporaneous rather than exact provenance. If an event happened on day 0000-00-00 00:00:00am, but your photo was taken at some other time, it casts doubt.
I think a big part of validation for things like these are just "could it have been modified since Z event happened", because Z was not something people paid attention to before.
That's just a timestamping service then, not a content provenance/authentication scheme. Timestamping has been a solved problem for years; certificate authorities offer this, or you could just throw a hash onto any sufficiently trusted blockchain.
Nothing prevents anyone from opportunistically pre-generating and timestamping millions of permutations of fake kompromat and then selectively revealing the one that turns out to be useful after the fact.
You could charge per attestation, but the economics of that don't look great; you could demand publication of the image itself before attestation, but that would obviously not fly for most use cases out of privacy concerns.
> Nothing prevents anyone from opportunistically pre-generating and timestamping millions of permutations of fake kompromat and then selectively revealing the one that turns out to be useful after the fact.
If you're doing server-side timestamping and someone is sending millions of items, I think you just ban them. Apple accounts are free but not inexpensive.
FedNow is a payments rail, which is a long shot away from being a full retail payments scheme. The latter needs a disputes story, customer knowledge, merchant acceptance…
Take SEPA Instant, for example. It’s great for many things, but effectively nobody pays using it in stores or even online.
That’s a list of news articles (notably none about SEPA Instant, the closest analogy to FedNow!), not a response to my point.
It actually supports my point: FedNow could be SEPA Instant (if it were to be widely supported and available to retail bank customers), but it’s definitely not UPI, Pix, Wero etc.
> Take SEPA Instant, for example. It’s great for many things, but effectively nobody pays using it in stores or even online.
My link mentions how Wero, replacement for US credit card rails in Europe, is being built on top of SEPA Instant. An adoption tracker is included, to show uptake progress. ~35% of tracked banks in scope in Europe for Wero have adopted it, as of this comment. They are actively building to get off of US credit card rail infrastructure.
In the US, similarly, it will take time to move off credit card rails, but we’ll get there. As mentioned, Walmart is already running live trials for pay by bank. I agree it is not fully operationalized yet, but it will be eventually. The most important primitive already exists (FedNow rails). Everything else is app experience and consumer training (for payment requests and transfers).
I see the pattern between the EU and US credit card -> instant payment transformation journeys, but maybe you don’t. Pix and UPI have shown how easy it is.
(Almost every deposit institution in the US currently has access to FedNow, per the Federal Reserve’s latest participant report, and through those deposit institutions and service providers, their customers)
I can definitely see that it would look like that – if stakeholders wanted to. On that, I’m not convinced at all, for these reasons:
Banks earn money on card payments and pay (or potentially even lose, due to fraud liability) money on ACH and FedNow. The card networks compete with each other exclusively on the issuer side for structural reasons (a merchant generally has to accept whatever the cardholder pulls out of their wallet or risks losing the purchase) and can for this discussion be considered aligned with the banks.
Cardholders get (often opaquely valued, sometimes even gambling adjacent) points and perceive credit cards as having better dispute rights for them, so they also prefer them over anything else, including cash and bank transfers, and any legal action against cards will face immediate popular backlash. (I can hear the "mile optimization" influencers screaming bloody murder just thinking about it.)
Merchants are the only stakeholder heavily lobbying congress for literally anything cheaper, but so far it hasn't made a real dent, despite decades of trying. I think the Durbin amendment can be considered a failure, all things considered; not many stores offer discounts on debit cards or surcharges on credit cards specifically, and those that do seem to often just make a completely disproportionate money grab of 4% or more, vastly beyond their actual costs. Besides that, the "small issuer exemption" ends up benefiting large fintech players at least as much as the actual local and community banks it was intended to serve.
> So the article shows how visa and mastercard are, by far, not the ones taking the largest fee
But they set the interchange rates and disallow (or at least have until recently, in the US) merchants to discriminate against cards based on rate or type via their “honor all cards” rules.
They are absolutely propping up and benefiting from the high fees.
Many more restaurants and grocery stores don’t, and then it’s 2-5% of cashback vs. 0% cash discount. Doesn’t sound like a rounding error to me.
There are a lot of good reasons to dislike the market structure and game theory of card payments in the US, but please don’t accuse consumers of being short-sighted or irrational.
The only way to break the cycle of self-reinforcing incentives would be swift regulatory action. Absent that, playing the game is the rational move at the individual level for both merchants and consumers.
Cards have supported strong, positive cardholder authentication at the POS (chip and PIN) and online (3DS) since the 90s.
It’s entirely the US credit card industry and its regulating bodies’ fault that it has made neither mandatory in the way that e.g. the EU did, and is in fact fighting any attempt to do so tooth and nail (please think of the conversion rate!!)
Can you guys still write a check at the supermarket checkout? No pin credit cards are small potatoes next to personal checks in terms of weirdness. But I wish we had that trust culture everywhere.
If it's not the former, while certainly concerning, I don't see how that's relevant here (other than maybe in a very vague general sense of "entities doing immoral/illegal thing X are likely to also do immoral/illegal thing Y").
reply