Australian Government, Of All Places, Says Age Verification Is A Privacy & Security Nightmare

In the past I’ve sometimes described Australia as the land where internet policy is completely upside down. Rather than having a system that protects intermediaries from liability for third party content, Australia went the opposite direction. Rather than recognizing that a search engine merely links to content and isn’t responsible for the content at those links, Australia has said that search engines can be held liable for what they link to. Rather than protect the free expression of people on the internet who criticize the rich and powerful, Australia has extremely problematic defamation laws that result in regular SLAPP suits and suppression of speech. Rather than embrace encryption that protects everyone’s privacy and security, Australia requires companies to break encryption, insisting only criminals use it.

It’s basically been “bad internet policy central,” or the place where good internet policy goes to die.

And, yet, there are some lines that even Australia won’t cross. Specifically, the Australian eSafety commission says that it will not require adult websites to use age verification tools, because it would put the privacy and security of Australians’ data at risk. (For unclear reasons, the Guardian does not provide the underlying documents, so we’re fixing that and providing both the original roadmap and the Australian government’s response

[…]

Of course, in France, the Data Protection authority released a paper similarly noting that age verification was a privacy and security nightmare… and the French government just went right on mandating the use of the technology. In Australia, the eSafety Commission pointed to the French concerns as a reason not to rush into the tech, meaning that Australia took the lessons from French data protection experts more seriously than the French government did.

And, of course, here in the US, the Congressional Research Service similarly found serious problems with age verification technology, but it hasn’t stopped Congress from releasing a whole bunch of “save the children” bills that are built on a foundation of age verification.

[…]

Source: Australian Government, Of All Places, Says Age Verification Is A Privacy & Security Nightmare | Techdirt

Don’t update Baldur’s Gate 3: Companions Hornyness and sex is being cancelled

Sorry, it turns out it wasn’t that there was just something irresistible about you. Instead it seems that Baldur’s Gate 3 shipped with a bug that meant all the companions were way hornier than intended.

I thought something felt odd. Having played enough BioWare games over the years to know that all my companions would inevitably find me impossibly alluring at some point, I kind of shrugged when they began throwing themselves at me almost from the off. I figured Baldur’s Gate 3 developers Larian just wanted to get it out of the way, have Gale and Karlach and try to get in my pants sooner rather than later, but it certainly seemed hasty.

It turns out, as discovered by TheGamer, that this wasn’t meant to be the case. A bug slipped through that meant the requirements for companions to be unable to resist your illithid charms were set way too low.

Speaking to the game’s director and Larian boss-guy, Swen Vincke, TheGamer learned that “approval thresholds” were set too low, meaning the buddies you gather into your gang were ready to have special cuddles far sooner than planned. “That’s why they were so horny in the beginning,” explained Vincke.

This has already been fixed for a bunch of the game’s companions, but some still have their libido set to 11, awaiting cold showers in forthcoming patches. Gale was the most affected, as you probably noticed if you played the game, the thirsty wizard ready to make magic happen from the moment he meets you. Vincke told the site that he “wasn’t supposed to be, like, instantly there.”

Read More: 7 Horny Fantasy Games To Play After Baldur’s Gate 3

It’s interesting that Larian has stuck to this being a bug, not a feature, given that being ready to go isn’t exactly abnormal human/tiefling/drow behavior. “It was supposed to simulate how real relationships are,” Vincke told TheGamer, adding that behaving like this would be “problematic” in real life. Well…to some, certainly. But, you know.

It also seems less immediately untoward given Baldur’s Gate 3‘s laudable conversation options to make it clear to your NPC chums that sex isn’t something you’re interested in, even if you do want to roleplay being in love with them.

Even to my old fuddy-duddy British ways, it seems rather quaint, seeing sexual relationships as something only feasible after enough time and approval, as if an instant attraction is so unlikely or impossible. Of course, that’d be kind of weird if it were every companion, as was the case at launch. But this more conservative approach is already going to be in place for many companions for those starting the game today. Sorry, PS5 players.

Source: Baldur’s Gate 3 Companions Are So Horny Because Of A Bug

It must be Americans having complained or something. Boo.

Posted in Sex

The AI Act needs a practical definition of ‘subliminal techniques’ (because those used in Advertising aren’t enough)

While the draft EU AI Act prohibits harmful ‘subliminal techniques’, it doesn’t define the term – we suggest a broader definition that captures problematic manipulation cases without overburdening regulators or companies, write Juan Pablo Bermúdez, Rune Nyrup, Sebastian Deterding and Rafael A. Calvo.

Juan Pablo Bermúdez is a Research Associate at Imperial College London; Rune Nyrup is an Associate Professor at Aarhus University; Sebastian Deterding is a Chair in Design Engineering at Imperial College London; Rafael A. Calvo is a Chair in Engineering Design at Imperial College London.

If you ever worried that organisations use AI systems to manipulate you, you are not alone. Many fear that social media feeds, search, recommendation systems, or chatbots can unconsciously affect our emotions, beliefs, or behaviours.

The EU’s draft AI Act articulates this concern mentioning “subliminal techniques” that impair autonomous choice “in ways that people are not consciously aware of, or even if aware not able to control or resist” (Recital 16, EU Council version). Article 5 prohibits systems using subliminal techniques that modify people’s decisions or actions in ways likely to cause significant harm.

This prohibition could helpfully safeguard users. But as written, it also runs the risk of being inoperable. It all depends on how we define ‘subliminal techniques’ – which the draft Act does not do yet.

Why narrow definitions are bound to fail

The term ‘subliminal’ traditionally refers to sensory stimuli that are weak enough to escape conscious perception but strong enough to influence behaviour; for example, showing an image for less than 50 milliseconds.

Defining ‘subliminal techniques’ in this narrow sense presents problems. First, experts agree that subliminal stimuli have very short-lived effects at best, and only move people to do things they are already motivated to do.

Further, this would not cover most problematic cases motivating the prohibition: when an online ad influences us, we are aware of the sensory stimulus (the visible ad).

Furthermore, such legal prohibitions have been ineffective because subliminal stimuli are, by definition, not plainly visible. As Neuwirth’s historical analysis shows, Europe prohibited subliminal advertising more than three decades ago, but regulators have hardly ever pursued cases.

Thus, narrowly defining ‘subliminal techniques’ as subliminal stimulus presentation is likely to miss most manipulation cases of concern and end up as dead letter.

A broader definition can align manipulation and practical concerns

We agree with the AI Act’s starting point: AI-driven influence is often problematic due to lack of awareness.

However, unawareness of sensory stimuli is not the key issue. Rather, as we argue in a recent paper, manipulative techniques are problematic if they hide any of the following:

  • The influence attempt. Many internet users are not aware that websites adapt based on personal information to optimize “customer engagement”, sales, or other business concerns. Web content is often tailored to nudge us towards certain behaviours, while we remain unaware that such tailoring occurs.
  • The influence methods. Even when we know that some online content seeks to influence, we frequently don’t know why we are presented with a particular image or message – was it chosen through psychographic profiling, nudges, something else? Thus, we can remain unaware of how we are influenced.
  • The influence’s effects. Recommender systems are meant to learn our preferences and suggest content that aligns with them, but they can end up changing our preferences. Even if we know how we are influenced, we may still ignore how the influence changed our decisions and behaviours.

To see why this matters, ask yourself: as a user of digital services, would you rather not be informed about these influence techniques?

Or would you prefer knowing when you are targeted for influence; how influence tricks push your psychological buttons (that ‘Only 1 left!’ sign targets your aversion to loss); and what consequences influence is likely to have (the sign makes you more likely to purchase impulsively)?

We thus propose the following definition:

Subliminal techniques aim at influencing a person’s behaviour in ways in which the person is likely to remain unaware of (1) the influence attempt, (2) how the influence works, or (3) the influence attempt’s effects on decision-making or value- and belief-formation processes.

This definition is broad enough to capture most cases of problematic AI-driven influence; but not so broad as to become meaningless, nor excessively hard to put into practice. Our definition specifically targets techniques: procedures that predictably produce certain outcomes.

Such techniques are already being classified, for example, in lists of nudges and dark patterns, so companies can check those lists and ensure that they either don’t use them or disclose their usage.

Moreover, the AI Act prohibits, not subliminal techniques per se, but only those that may cause significant harm. Thus, the real (self-)regulatory burden lies with testing whether a system increases risks of significant harm—arguably already part of standard user protection diligence.

Conclusion

The default interpretation of ‘subliminal techniques’ would render the AI Act’s prohibition irrelevant for most forms of problematic manipulative influence, and toothless in practice.

Therefore, ensuring the AI Act is legally practicable and reduces regulatory uncertainty requires a different, explicit definition – one that addresses the underlying societal concerns over manipulation while not over-burdening service providers.

We believe our definition achieves just this balance.

(The EU Parliament draft added prohibitions of “manipulative or deceptive techniques”, which present challenges worth discussing separately. Here we claim that subliminal techniques prohibitions, properly defined, could tackle manipulation concerns.)

Source: The AI Act needs a practical definition of ‘subliminal techniques’ – EURACTIV.com

Lenovo Yoga Book 9i: a dual-screen laptop

Photo by Sam Rutherford/Engadget

Photo by Sam Rutherford/Engadget

Photo by Sam Rutherford/Engadget

Photo by Sam Rutherford/Engadget

Every now and then, a device comes along and challenges you to consider the viability of an entirely new product category. That’s precisely what Lenovo is doing with the Yoga Book 9i. By replacing the traditional physical keyboard with a second display, the company is rethinking what a laptop can do. In tight confines, you can rely on a virtual keyboard or an included magnetic alternative.

[…]

The dual 13.3-inch displays (2,880 x 1,800) look great too, boasting OLED panels with rich colors and a tested brightness just shy of 400 nits.

[…]

Around the outside, the Yoga Book features a polished metal frame with three Thunderbolt 4 ports, which is nice to see on a system this size. Unfortunately for fans of wired audio, you don’t get a 3.5mm audio jack. Thankfully, Lenovo’s 5-megapixel IR webcam is sharper than what you get on most competing devices, and holding everything together is the company’s signature speaker bar hinge, which is impressively loud and punchy. All told, despite being slightly heavier than a typical 13-inch ultraportable due to that second layer of glass, it’s still very easy to carry around.

[…]

The remaining pieces of the Yoga Book 9i’s kit are its accessories, which include a stylus, a detached magnetic physical keyboard, a folding kickstand cover and even a sleek travel mouse. The keyboard communicates via Bluetooth and has its own USB-C port for charging. Despite its size, it doesn’t feel cramped and offers more key travel than you might expect. During transport, the cover wraps around the keyboard to keep it protected, while Lenovo’s Digital Pen 3 can be stashed in the attached loop.

[…]

you just tap eight fingers on the bottom panel and instantly you get virtual stand-ins. And for times when you only need to mouse around, you can use a three-finger tap instead, which summons a floating touchpad that leaves room for Lenovo’s widgets (weather, news, etc.) or anything else you’d like to put down there.

Surprisingly, typing on a touchscreen isn’t as bad as you might think. Don’t get me wrong, it’s still not nearly as fast or accurate as using a physical keyboard. But it’s serviceable, as long as you’re willing to make some adjustments.

[…]

What’s most impressive about the Yoga Book 9i’s is its ability to transform into a portable all-in-one PC when it’s propped up on its kickstand cover. In this mode, there are two options for its displays: a stacked setup with one screen on top of the other and a side-by-side arrangement. Both configurations have their uses.

[…]

Packing an Intel Core i7-155U chip, 16GB of RAM and 512GB of storage, the Yoga Book 9i can handle most productivity needs. Even when multitasking across both displays, performance felt relatively snappy. However, if you’re planning on regularly doing more demanding things like video editing, you’ll probably want a beefier machine.

[…]

Even with a relatively large 80Wh battery, for a system with two screens, the Yoga Book 9i fared better than expected on our standard video rundown test. It posted a time of eight hours and 12 minutes

[…]

he Yoga Book 9i is a rather divisive machine. Starting at $2,000, not only is it really expensive, its performance is also slower than more traditional competitors in this price range. However, for people like me who constantly yearn for more screen real estate when I’m away from home, Lenovo has created something that is more than the sum of its parts. When space is limited, the Yoga Book 9i’s clamshell mode feels right at home on an airplane tray table. But when it’s not, it can expand into a portable dual-screen workstation–complete with all the fixings of your desktop at home. And when you need to pack up, everything collapses into a neat, semi-self-contained bundle that fits in the smallest of laptop bags.

The Yoga Book 9i is a nifty little transformer that’s more engaging than anything Michael Bay has directed in the last two decades. With how little laptops have changed recently, it feels like the Yoga Book has even more room to grow in the years to come. Sure, it’s still a bit awkward, but as the starting point for a new type of notebook, Lenovo’s debut dual-screen convertible has me convinced.

Source: Lenovo Yoga Book 9i review: The world isn’t ready for dual-screen laptops, but Lenovo is | Engadget

Sourcegraph published admin token, someone creates API endpoint with free access

An unknown hacker gained administrative control of Sourcegraph, an AI-driven service used by developers at Uber, Reddit, Dropbox, and other companies, and used it to provide free access to resources that normally would have required payment.

In the process, the hacker(s) may have accessed personal information belonging to Sourcegraph users, Diego Comas, Sourcegraph’s head of security, said in a post on Wednesday. For paid users, the information exposed included license keys and the names and email addresses of license key holders. For non-paying users, it was limited to email addresses associated with their accounts. Private code, emails, passwords, usernames, or other personal information were inaccessible.

Free-for-all

The hacker gained administrative access by obtaining an authentication key a Sourcegraph developer accidentally included in a code published to a public Sourcegraph instance hosted on Sourcegraph.com. After creating a normal user Sourcegraph account, the hacker used the token to elevate the account privileges to those of an administrator. The access token appeared in a pull request posted on July 14, the user account was created on August 28, and the elevation to admin occurred on August 30.

“The malicious user, or someone connected to them, created a proxy app allowing users to directly call Sourcegraph’s APIs and leverage the underlying LLM [large language model],” Comas wrote. “Users were instructed to create free Sourcegraph.com accounts, generate access tokens, and then request the malicious user to greatly increase their rate limit. On August 30 (2023-08-30 13:25:54 UTC), the Sourcegraph security team identified the malicious site-admin user, revoked their access, and kicked off an internal investigation for both mitigation and next steps.”

The resource free-for-all generated a spike in calls to Sourcegraph programming interfaces, which are normally rate-limited for free accounts.

A graph showing API usage from July 31 to August 29 with a major spike at the end.
Enlarge / A graph showing API usage from July 31 to August 29 with a major spike at the end.
Sourcegraph

“The promise of free access to Sourcegraph API prompted many to create accounts and start using the proxy app,” Comas wrote. “The app and instructions on how to use it quickly made its way across the web, generating close to 2 million views. As more users discovered the proxy app, they created free Sourcegraph.com accounts, adding their access tokens, and accessing Sourcegraph APIs illegitimately.”

[…]

Source: Hacker gains admin control of Sourcegraph and gives free access to the masses | Ars Technica

Lenovo’s new 27-inch, 4K monitor offers glasses-free 3D

Lenovo’s next 27-inch 4K monitor is unlike any display it has released before. Featuring a lenticular lens and real-time eye-tracking, it’s a 3D monitor that doesn’t require any glasses. Other companies are already pushing stereoscopic products, but Lenovo’s ThinkVision 27 3D Monitor, announced at the IFA conference today, takes the glasses-free experience to a bigger screen.

[…]

Like other glasses-less 3D screens, the ThinkVision works by projecting two different images to each of your eyes, resulting in a 3D effect where, […] it appears that the images are popping out of the screen. Lenovo says the monitor’s 3D resolution is 1920×2160. The lenticular lens in the monitor is switchable, allowing for normal, 2D viewing at 3840×2160, too.

[…]

The ThinkVision’s 27-inch display gives workers a bigger palette. It also means the monitor can be a regular 2D monitor when needed.

PCMag had a “brief demo” with Lenovo’s upcoming monitor, viewing a red race car model “suspended in 3D,” representing a potential use case for creators. The publication said the 3D was impressive and the monitor “would no doubt be useful to those who spend lots of time building 3D objects in software.”

[…]

As a regular 2D monitor, the ThinkVision’s specs are pretty standard. It’s a 4K IPS screen claiming a 60 Hz refresh rate, 310 nits, a 1,000:1 contrast ratio, and 99 percent DCI-P3 and Adobe RGB color coverage with a Delta E under 2.

Like a proper workplace monitor, there’s also a strong port selection: two HDMI 2.1, one DisplayPort 1.4, four USB-A (3.1 Gen 1) ports, one USB-C port (3.2 Gen 1) with up to 15 W power delivery, RJ45, a 3.5mm jack, plus an upstream USB-C port with up to 100 W power delivery.

Glasses-free 3D is having a bit of a moment, with Lenovo being the latest major PC OEM to release a screen with stereoscopic views. It’s a niche product category, of course, but some publications, like PCWorld and CNET, that have tried newer releases have said that they are much better than the 3D TVs that required glasses, which you don’t see anymore.

[…]

Source: Lenovo’s new 27-inch, 4K monitor offers glasses-free 3D | Ars Technica