{"id":180543,"date":"2023-10-25T10:36:18","date_gmt":"2023-10-25T05:06:18","guid":{"rendered":"https:\/\/dripp.zone\/news\/?p=180543"},"modified":"2023-10-25T10:36:18","modified_gmt":"2023-10-25T05:06:18","slug":"artists-could-use-a-poison-pill-to-combat-ai-exploitation-crypto-news","status":"publish","type":"post","link":"https:\/\/dripp.zone\/news\/artists-could-use-a-poison-pill-to-combat-ai-exploitation-crypto-news\/","title":{"rendered":"Artists Could Use a Poison Pill to Combat AI Exploitation &#8211; Crypto News"},"content":{"rendered":"<div style=\"position:relative;overflow:visible;font-size:1.2em;line-height:1.58\">\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">The astonishing capability of generative AI to create visual images is getting better and <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/199591\/dall-e-3-live-openai-upgrade-now-available-microsoft-bing-creator\" class=\"sc-adb616fe-0 ePvUAp\">more accessible<\/a>, but with their models based on massive libraries of existing art, artists are frantically looking for ways to prevent their work from being harvested without their permission. A new tool, ominously named Nightshade, could be the answer.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">The trick involves using optimized, prompt-specific \u201cdata poisoning attacks\u201d that corrupt the data needed to train AI models when it&#8217;s fed into an image generator.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">\u201cPoisoning has been a known attack vector in machine learning models for years,\u201d Professor Ben Zhao told <i>Decrypt<\/i>. \u201cNightshade is not interesting because it does poisoning, but because it poisons generative AI models, which nobody thought was possible because these models are so big.\u201d<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Combatting intellectual property theft and AI deepfakes has become crucial since generative AI models came into the mainstream this year. In July, a team of researchers at MIT similarly suggested <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/150216\/deepfake-image-protection-mit-immunization\" class=\"sc-adb616fe-0 ePvUAp\">injecting <\/a>small bits of code that would cause the image to distort, rendering it unusable.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/resources\/what-is-generative-ai-the-technology-that-can-teach-itself\" class=\"sc-adb616fe-0 ePvUAp\">Generative AI<\/a> refers to AI models that use prompts to generate text, images, music, or videos. <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/200223\/google-ai-assistant-bard-pixel-phone-photo-editing\" class=\"sc-adb616fe-0 ePvUAp\">Google<\/a>, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/198573\/amazon-invest-4b-ai-firm-anthropic\" class=\"sc-adb616fe-0 ePvUAp\">Amazon<\/a>, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/198409\/microsoft-reveals-major-ai-upgrades-windows-office-bing\" class=\"sc-adb616fe-0 ePvUAp\">Microsoft<\/a>, and <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/198990\/meta-unveils-ambitious-ai-plans-at-connect-conference\" class=\"sc-adb616fe-0 ePvUAp\">Meta<\/a> have all invested heavily in bringing generative AI tools to consumers.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">As Zhao explained, Nightshade gets around the problem of an AI model\u2019s large datasets by targeting the prompt\u2014for example, requests to create an image of a dragon, dog, or horse.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">\u201cAttacking the whole model makes no sense,\u201d Zhao said. \u201cWhat you do want to attack is individual prompts, debilitating the model and disabling it from generating art.\u201d<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">To avoid detection, the research team explained, the text and image within the poisoned data must be crafted to appear natural and crafted to deceive both automated alignment detectors and human inspectors to achieve the intended effect.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Although the poisonous Nightshade dataset is merely a proof of concept, Zhao said the easiest way to deceive an AI model like Stable Diffusion into thinking a cat is a dog is by simply mislabeling a few hundred images of a cat as a dog.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Even without any coordination, artists could begin implementing these poison pills en masse, and it could cause the AI model to collapse.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">\u201cOnce enough attacks become active on the same model, the model becomes worthless,\u201d Zhao said. \u201cBy worthless, I mean, you give it things like \u2018give me a painting,\u2019 and it comes out with what looks like a kaleidoscope of pixels. The model is effectively dumbed down to the version of something akin to a random pixel generator.\u201d<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">Zhao said Nightshade does not require any action be taken against the AI image generator itself but takes effect when the AI model attempts to consume the data that Nightshade has been included in.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">\u201cIt does nothing to them unless they take those images and put them into the training data,\u201d he said, calling it less of an attack and more like self-defense or a barbed wire fence with poison tips aimed at AI developers who do not respect opt-out requests and do-not-scrape directives.<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\">\u201cThis is designed to solve that problem,\u201d Zhao said. \u201cSo we had this barbed wire sting with some poison. Unless you run around and get this stuff all over, you won&#8217;t suffer.\u201d<\/p>\n<p class=\"font-meta-serif-pro scene:font-noto-sans scene:text-base scene:md:text-lg font-normal text-lg md:text-xl md:leading-9 tracking-px text-body gg-dark:text-neutral-100\"><i>Edited by <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/decrypt.co\/author\/ryanozawa\" class=\"sc-adb616fe-0 ePvUAp\">Ryan Ozawa<\/a>.<\/i><\/p>\n<div class=\"my-4 border-b border-decryptGridline\">\n<div class=\"text-left p-8 md:py-12 md:px-12 max-w-prose relative\"><span class=\"border-t-4 border-l-4 w-4 h-4 md:border-t-[6px] md:border-l-[6px] md:w-6 md:h-6 border-decryptPurple dark:border-decryptNeon gg-dark:border-cc-pink-2 absolute top-4 left-4 md:top-6 md:left-6\" \/><span class=\"border-t-4 border-l-4 w-4 h-4 md:border-t-[6px] md:border-l-[6px] md:w-6 md:h-6 border-decryptPurple dark:border-decryptNeon gg-dark:border-cc-pink-2 absolute rotate-180 bottom-4 right-4 md:bottom-6 md:right-6\" \/><\/p>\n<h3 class=\"font-akzidenz-grotesk font-bold text-xl md:text-3xl mb-6 md:text-center gg-dark:text-white\">Stay on top of crypto news, get daily updates in your inbox.<\/h3>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>The astonishing capability of generative AI to create visual images is getting better and more accessible, but with their models based on massive libraries of existing art, artists are frantically looking for ways to prevent their work from being harvested without their permission. A new tool, ominously named Nightshade, could be the answer. The trick [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":180544,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[230,225,221,227,226,228,229,60,223,224,222],"class_list":["post-180543","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","tag-brave","tag-coinbase","tag-crypto","tag-decentralised","tag-decentralized","tag-decentralized-exchange","tag-erc-20","tag-featured","tag-meme-coin","tag-robinhood","tag-solana"],"_links":{"self":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/180543","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/comments?post=180543"}],"version-history":[{"count":2,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/180543\/revisions"}],"predecessor-version":[{"id":180548,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/posts\/180543\/revisions\/180548"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media\/180544"}],"wp:attachment":[{"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/media?parent=180543"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/categories?post=180543"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dripp.zone\/news\/wp-json\/wp\/v2\/tags?post=180543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}