Synthetic Content: A Challenge with No Easy Answer

January 30, 2023

Open source intelligence is the go-to method for many crime analysts, investigators, and intelligence professionals. Whether social media or third-party data from marketing companies, useful insights can be obtained. The upside of OSINT means that many of its supporters downplay or choose to sidestep its downsides. I call this “OSINT blindspots”, and each day I see more information about what is becoming a challenge.

For example, “As Deepfakes Flourish, Countries Struggle with Response” is a useful summary of one problem posed by synthetic (fake) content. What looks “real” may not be. A person sifting through data assumes that information is suspect. Verification is needed. But synthetic data can output multiple instances of fake information and then populate channels with “verification” statements of the initial item of information.

The article states:

Deepfake technology — software that allows people to swap faces, voices and other characteristics to create digital forgeries — has been used in recent years to make a synthetic substitute of Elon Musk that shilled a crypto currency scam, to digitally “undress” more than 100,000 women on Telegram and to steal millions of dollars from companies by mimicking their executives’ voices on the phone. In most of the world, authorities can’t do much about it. Even as the software grows more sophisticated and accessible, few laws exist to manage its spread.

For some government professionals, the article says:

problematic applications are also plentiful. Legal experts worry that deepfakes could be misused to erode trust in surveillance videos, body cameras and other evidence. (A doctored recording submitted in a British child custody case in 2019 appeared to show a parent making violent threats, according to the parent’s lawyer.) Digital forgeries could discredit or incite violence against police officers, or send them on wild goose chases. The Department of Homeland Security has also identified risks including cyber bullying, blackmail, stock manipulation and political instability.

The most interesting statement in the essay, in my opinion, is this one:

Some experts predict that as much as 90 per cent of online content could be synthetically generated within a few years.

The number may overstate what will happen because no one knows the uptake of smart software and the applications to which the technology will be put.

Thinking in terms of OSINT blindspots, there are some interesting angles to consider:

  1. Assume the write up is correct and 90 percent of content is authored by smart software, how does a person or system determine accuracy? What happens when a self learning system learns from itself?
  2. How does a human determine what is correct or incorrect? Education appears to be struggling to teach basic skills? What about journals with non reproducible results which spawn volumes of synthetic information about flawed research? Is a person, even one with training in a narrow discipline, able to determine “right” or “wrong” in a digital environment?
  3. Are institutions like libraries being further marginalized? The machine generated content will exceed a library’s capacity to acquire certain types of information? Does one acquire books which are “right” when machine generated content produces information that shouts “wrong”?
  4. What happens to automated sense making systems which have been engineered on the often flawed assumption that available data and information are correct?

Perhaps an OSINT blind spot is a precursor to going blind, unsighted, or dark?

Stephen E Arnold, January 30, 2023

Have You Ever Seen a Killer Dinosaur on a Leash?

January 27, 2023

I have never seen a Tyrannosaurus Rex allow a European regulators to put a leash on its neck and lead the beastie around like a tamed circus animal?

google on a leash

Another illustration generated by the smart software outfit Craiyon.com. The copyright is up in the air just like the outcome of Google’s battles with regulators, OpenAI, and assorted employees.

I think something similar just happened. I read “Consumer Protection: Google Commits to Give Consumers Clearer and More Accurate Information to Comply with EU Rules.” The statement said:

Google has committed to limit its capacity to make unilateral changes related to orders when it comes to price or cancellations, and to create an email address whose use is reserved to consumer protection authorities, so that they can report and request the quick removal of illegal content. Moreover, Google agreed to introduce a series of changes to its practices…

The details appear in the this EU table of Google changes.

Several observations:

  1. A kind and more docile Google may be on parade for some EU regulators. But as the circus act of Roy and Siegfried learned, one must not assume a circus animal will not fight back
  2. More problematic may be Google’s internal management methods. I have used the phrase “high school science club management methods.” Now that wizards were and are being terminated like insects in a sophomore biology class, getting that old team spirit back may be increasingly difficult. Happy wizards do not create problems for their employer or former employer as the case may be. Unhappy folks can be clever, quite clever.
  3. The hyper-problem in my opinion is how the tide of online user sentiment has shifted from “just Google it” to ladies in my wife’s bridge club asking me, “How can I use ChatGPT to find a good hotel in Paris?” Yep, really old ladies in a bridge club in rural Kentucky. Imagine how the buzz is ripping through high school and college students looking for a way to knock out an essay about the Louisiana Purchase for that stupid required American history class? ChatGPT has not needed too much search engine optimization, has it.

Net net: The friendly Google faces a multi-bladed meat grinder behind Door One, Door Two, and Door Three. As Monte Hall, game show host of “Let’s Make a Deal” said:

“It’s time for the Big Deal of the Day!”

Stephen E Arnold, January 27, 2023

Microsoft Security and the Azure Cloud: Good Enough?

January 27, 2023

I don’t know anything about the cyber security firm called Silverfort. The company’s Web site makes it clear that the company’s management likes moving icons and Microsoft. Nevertheless, “Microsoft Azure-Based Kerberos Attacks Crack Open Cloud Accounts” points out some alleged vulnerabilities in what Microsoft has positioned as its present and future money machine. The article says:

Silverfort disclosed the issues to Microsoft, and while the company is aware of the weaknesses, it does not plan to fix them, because they are not “traditional” vulnerabilities, Segal says. Microsoft also confirmed that the company does not consider them vulnerabilities. “This technique is not a vulnerability, and to be used successfully a potential attacker would need elevated or administrative rights that grant access to the storage account data,” a Microsoft spokesperson tells Dark Reading [the online service publishing the report].

So a nothingburger (wow, I detest that trendy jargon). I would view Microsoft’s product with a somewhat skeptical eye. Bad actors show some fondness for Microsoft’s approach to engineering.

Shift gears, the article “Microsoft Is Beating Google at Its Own Game.” I thought, “Advertising.” The write up has a different angle:

Following the news of Microsoft’s $10 billion investment, Wedbush analyst Daniel Ives wrote that ChatGPT is a “potential game changer” for Microsoft, and that the company was “not going to repeat the same mistakes” of missing out on social and mobile that it made two decades ago. Microsoft “is clearly being aggressive on this front and not going to be left behind,” Ives wrote.

Yep, smart software. I think the idea is that using OpenAI as a springboard, Microsoft will leapfrog into high clover. The announcement of Microsoft’s investment in OpenAI provides compute resources. If the bet pays off, Microsoft will get real money.

However, what happens when Microsoft’s “good enough” engineering meets OpenAI.

You may disagree, but I think the security vulnerabilities will continue to exist. Furthermore, it is impossible to know what issues will arise when smart software begins to think for Microsoft systems and users.

Security is a cat-and-mouse game. How quickly will bad actors integrate smart software into malware? How easy will it be for smart software to trawl through technical documents looking for interesting information?

The integration of OpenAI into Microsoft systems, services, and software may require more than “good enough” engineering. Now tell me again why I cannot print after updating Windows 11? Exactly what is Google’s game? Excitement about what people believe is the next big thing is one thing. Ignoring some here-and-now issues may be another.

Stephen E Arnold, January 27, 2023

Killing Wickr … Quickly and Without Love

January 27, 2023

Encrypted messaging services are popular for privacy-concerned users as well as freedom fighters in authoritarian countries.  Tech companies consider these messaging services to be a wise investment, so Amazon purchased Wickr in 2020.  Wickr is an end-to-end encrypted messaging app and it was made available for AWS users.  Gizmodo explains that Wickr will soon be nonexistent in the article, “Amazon Plans To Close Up Wickr’s User-Centric Encrypted Messaging App.”

Amazon no longer wants to be part of the encrypted messaging services, because it got too saturated like the ugly Christmas sweater market.  Amazon is killing the Wickr Me app, limiting use to business and public sectors through AWS Wickr and Wickr Enterprise.  New registrations end on December 31 and the app will be obsolete by the end of 2023.  

Wickr was worth $60 million went Amazon purchased it.  Amazon, however, lost $1 trillion in stock vaguer in November 2022, becoming the first company in history to claim that “honor.”  Amazon is laying off employees and working through company buyouts.  Changing Wickr’s target market could recoup some of the losses:

“But AWS apparently wants Wickr to focus on its business and government customers much more than its regular users. Among those public entities using Wickr is U.S. Customs and Border Protection. That contract was reportedly worth around $900,000 when first reported in September last year. Sure, the CBP wants encrypted communications, but Wickr can delete all messages sent via the app, which is an increasingly dangerous proposition for open government advocates.”

Wickr, like other encryption services, does not have a clean record.  It has been used for illegal drug sales and other illicit items via the Dark Web.  

Whitney Grace, January 27, 2022

How Do You Know You Have Been Fired? 700 Hundred Words about People Skills

January 26, 2023

I read “Some Google Employees Didn’t Realize They Were Laid Off Until Their Badges Wouldn’t Let Them into the Office.” The write up reports in the manner of an person learning something quite surprising:

One laid-off Google employee, a software engineer who requested anonymity to speak freely, told Insider that he witnessed one of his co-workers repeatedly try to scan his employee badge to get into Google’s Chelsea, New York office, only for the card reader to turn red and deny him entry.

Yep. Code Red. Badge denied light Red. Google management Red Faced? Nah. Just marketing and a few others. No big deal.

How is Googzilla supposed to fire people? Get one of the crack People People to talk face-to-face with a Google wizard? Ain’t happening, kiddo. Perhaps a chill video call to which the newly unemployed super brains can connect and watch a video explaining that your are now officially non-essential. The good news, of course, is that one can say, “I am a Xoogler. I will start a venture fund. Or, I will invent the next great app powered by ChatGPT. Or, Mom I will be moving in next week. I’ve been fired.

Let’s go back in time. How about the mid 1970s when the US government urged buildings housing work deemed sensitive to implement better security systems. At the time, many buildings used a person sitting behind a big desk with a bunch of paper. One would state one’s name and the person one wanted to visit face-to-face. I told you we were going back in time. The person at the desk would use a telephone handset connected to a big console and call the extension of the person whom one wanted to meet. Then that person would send someone down to escort the outsider to a suitable meeting room. (Don’t ask about the measures in place in the meeting room, please.)

An employee would show an official badge, typically connected to an item of clothing or hanging from a lanyard. The person behind the desk would smile in recognition, push a button, and a gate would open. The person with the badge would walk to the elevators and ride to the appropriate floor. There are variations, of course.

But the main idea is that this electronic smart security was not in place. When a person was to be fired, that person would typically be in a cube or a manager’s office. The blow was delivered in person, sometimes with a bloodhound’s sad look or a bit of a smile that suggested the manager delivering the death blow was having fun.

Then the revolution. The building in which I worked toward the end of the 1970s got the electric key card thing. The day after that system was installed, my boss who ran the standalone unit of a blue chip consulting firm decided to fire people by disabling the person’s key card. Believe it or not, the Big Boss, the head of what was then called Human Resources, and I drove from the underground parking garage to the No Parking zone in front of the building and watched as people found their key card had been disabled.

My recollection is that because the firm had RIFed a couple of hundred people earlier in the week, we could observe the former blue chippers reaction. It was interesting. The most amazing thing is that the head of Human Resources put in place a procedure to terminate people via a phone call, allow them to return to the building and enter with a security escort to retrieve pictures of the wives, girl friends, animals, boats, or swimming trophy. Then the person could put the personal effects in a banker’s box and the escort would get the person out of the building. The escort then collected the dead key card.

That’s humane. What’s interesting is that Google’s management team ignored the insight out Human Resources’ person had: Find a way to minimize the craziness outside of the building. Avoid creating a news event on a busy street in Washington, DC. Figure out a procedure that eliminates, “Can you send me the picture of my dog Freddy?” to a person still working at the blue chip outfit.

But Google. Nope. Now it’s headline time and public exposure of the firm’s management excellence.

Stephen E Arnold, January 26, 2023

Social Media Scam-A-Rama

January 26, 2023

The Internet is a virtual playground for scam artists.  While it is horrible that bad actors can get away with their crimes, it is also impressive the depth and creativity they go to for “easy money.”  Fortune shares the soap opera-worthy saga of how: “Social Media Influencers Are Charged With Feeding Followers ‘A Steady Diet Of Misinformation’ In A Pump And Dump Stock Scheme That Netted $100 Million.”

The US Justice Department and the Securities and Exchange Commission (SEC) busted eight purported social media influencers who specialized in stock market trading advice.  From 2020 to April 2022, they tricked their amateur investor audience of over 1.5 million Twitter users to invest funds in a “pump-and-dump” scheme.  The scheme worked as follows:

“Seven of the social-media influencers promoted themselves as successful traders on Twitter and in Discord chat rooms and encouraged their followers to buy certain stocks, the SEC said. When prices or volumes of the promoted stocks would rise, the influencers ‘regularly sold their shares without ever having disclosed their plans to dump the securities while they were promoting them,’ the agency said. ‘The defendants used social media to amass a large following of novice investors and then took advantage of their followers by repeatedly feeding them a steady diet of misinformation,’ said the SEC’s Joseph Sansone, chief of the SEC Enforcement Division’s Market Abuse Unit.”

The ring’s eighth member hosted a podcast that promoted the co-conspirators as experts.  The entire group posted about their luxury lifestyles to fool their audiences further about their stock market expertise.

All of the bad actors could face a max penalty of ten to twenty-five years in prison for fraud and/or unlawful monetary transactions.  The SEC is cracking down on cryptocurrency schemes given the large number of celebrities who are hired to promote schemes.  The celebrities claim to be innocent, because they were paid to promote a product and were not aware of the scam.  

However, how innocent are these people when they use their status to make more money off their fans?  They should follow Shaq’s example and research the products they are associated with before accepting a check…unless they are paid in cryptocurrency.   That would be poetic justice!

Whitney Grace, January 26, 2023

Killing Wickr

January 26, 2023

Encrypted messaging services are popular for privacy-concerned users as well as freedom fighters in authoritarian countries.  Tech companies consider these messaging services to be a wise investment, so Amazon purchased Wickr in 2020.  Wickr is an end-to-end encrypted messaging app and it was made available for AWS users.  Gizmodo explains that Wickr will soon be nonexistent in the article, “Amazon Plans To Close Up Wickr’s User-Centric Encrypted Messaging App.”

Amazon no longer wants to be part of the encrypted messaging services, because it got too saturated like the ugly Christmas sweater market.  Amazon is killing the Wickr Me app, limiting use to business and public sectors through AWS Wickr and Wickr Enterprise.  New registrations end on December 31 and the app will be obsolete by the end of 2023.  

Wickr was worth $60 million went Amazon purchased it.  Amazon, however, lost $1 trillion in stock vaguer in November 2022, becoming the first company in history to claim that “honor.”  Amazon is laying off employees and working through company buyouts.  Changing Wickr’s target market could recoup some of the losses:

“But AWS apparently wants Wickr to focus on its business and government customers much more than its regular users. Among those public entities using Wickr is U.S. Customs and Border Protection. That contract was reportedly worth around $900,000 when first reported in September last year. Sure, the CBP wants encrypted communications, but Wickr can delete all messages sent via the app, which is an increasingly dangerous proposition for open government advocates.”

Wickr, like other encryption services, does not have a clean record.  It has been used for illegal drug sales and other illicit items via the Dark Web.  At one time, Wickr might have been a source of useful metadata. Not now. Odd.

Whitney Grace, January 26, 2023

Googzilla Squeezed: Will the Beastie Wriggle Free? Can Parents Help Google Wiggle Out?

January 25, 2023

How easy was it for our prehistoric predecessors to capture a maturing reptile. I am thinking of Googzilla. (That’s my way of conceptualizing the Alphabet Google DeepMind outfit.)

image

This capturing the dangerous dinosaur shows one regulator and one ChatGPT dev in the style of Normal Rockwell (who may be spinning in his grave). The art was output by the smart software in use at Craiyon.com. I love those wonky spellings and the weird video ads and the image obscuring Next and Stay buttons. Is this the type of software the Google fears? I believe so.

On one side of the creature is the pesky ChatGPT PR tsunami. Google’s management team had to call Google’s parents to come to the garage. The whiz kids find themselves in a marketing battle. Imagine, a technology that Facebook dismisses as not a big deal, needs help. So the parents come back home from their vacations and social life to help out Sundar and Prabhakar. I wonder if the parents are asking, “What now?” and “Do you think these whiz kids want us to move in with them.” Forbes, the capitalist tool with annoying pop ups, tells one side of the story in “How ChatGPT Suddenly Became Google’s Code Red, Prompting Return of Page and Brin.

On the other side of Googzilla is a weak looking government regulator. The Wall Street Journal (January 25, 2023) published “US Sues to Split Google’s Ad Empire.” (Paywall alert!) The main idea is that after a couple of decades of Google is free, great, and gives away nice tchotchkes US Federal and state officials want the Google to morph into a tame lizard.

Several observations:

  1. I find it amusing that Google had to call its parents for help. There’s nothing like a really tough, decisive set of whiz kids
  2. The Google has some inner strengths, including lawyers, lobbyists, and friends who really like Google mouse pads, LED pins, and T shirts
  3. Users of ChatGPT may find that as poor as Google’s search results are, the burden of figuring out an “answer” falls on the user. If the user cooks up an incorrect answer, the Google is just presenting links or it used to. When the user accepts a ChatGPT output as ready to use, some unforeseen consequences may ensue; for example, getting called out for presenting incorrect or stupid information, getting sued for copyright violations, or assuming everyone is using ChatGPT so go with the flow

Net net: Capturing and getting the vet to neuter the beastie may be difficult. Even more interesting is the impact of ChatGPT on allegedly calm, mature, and seasoned managers. Yep, Code Red. “Hey, sorry to bother you. But we need your help. Right now.”

Stephen E Arnold, January 25, 2023

Fixing Social Media: Sure Enough

January 25, 2023

It is not that social media platforms set out to do harm, exactly. They just regularly prioritize profits above the wellbeing of society. BrookingsTech Stream hopes to help mitigate one such ill in, “How Social Media Platforms Can Reduce Polarization.” The advice is just a bit late, though, by about 15 years. If we had known then what we know now, perhaps we could have kept tech companies from getting addicted to stirring the pot in the first place.

Nevertheless, journalists Christian Staal Bruun Overgaard and Samuel Woolley do a good job describing the dangers of today’s high polarization, how we got here, and what might be done about it. See the article for that discussion complete with many informative links. Regarding where to go from here, the authors note that (perhaps ironically) social media platforms are in a good position to help reverse the trend, should they choose to do so. They tell us:

Our review of the scientific literature on how to bridge societal divides points to two key ideas for how to reduce polarization. First, decades of research show that when people interact with someone from their social ‘outgroup,’ they often come to view that outgroup in a more favorable light. Significantly, individuals do not need to take part in these interactions themselves. Exposure to accounts of outgroup contact in the media, from news articles to online videos, can also have an impact. Both positive intergroup contact and stories about such contact have been shown to dampen prejudice toward various minority groups.

The second key finding of our review concerns how people perceive the problem of polarization. Even as polarization has increased in recent years, survey research has consistently shown that many Americans think the nation is more divided than it truly is. Meanwhile, Democrats and Republicans think they dislike each other more than they actually do. These misconceptions can, ironically, drive the two sides further apart. Any effort to reduce polarization thus also needs to correct perceptions about how bad polarization really is. For social media platforms, the literature on bridging societal divides has important implications.”

The piece discusses five specific recommendations for platforms: surface more positive interparty contact, prioritize content that’s popular among disparate user groups, correct misconceptions, design better user interfaces, and collaborate with researchers. Will social media companies take the researchers’ advice to actively promote civil discourse over knee-jerk negativity? Only if accountability legislation and PR headaches can ever outweigh the profit motive.

The UK has a different idea: Send the executives of US social media companies to prison.

Cynthia Murrell, January 25, 2023

Japan Does Not Want a Bad Apple on Its Tax Rolls

January 25, 2023

Everyone is falling over themselves about a low-cost Mac Mini, just  not a few Japanese government officials, however.

An accountant once gave me some advice: never anger the IRS. A governmental accounting agency that arms its employees with guns is worrisome. It is even more terrifying to anger a foreign government accounting agency. The Japanese equivalent of the IRS smacked Apple with the force of a tsunami in fees and tax penalties Channel News Asia reported: “Apple Japan Hit With $98 Million In Back Taxes-Nikkei.”

The Japanese branch of Apple is being charged with $98 million (13 billion yen) for bulk sales of Apple products sold to tourists. The product sales, mostly consisting of iPhones, were wrongly exempted from consumption tax. The error was caught when a foreigner was caught purchasing large amounts of handsets in one shopping trip. If a foreigner visits Japan for less than six months they are exempt from the ten percent consumption tax unless the products are intended for resale. Because the foreign shopper purchased so many handsets at once, it is believed they were cheating the Japanese tax system.

The Japanese counterpart to the IRS brought this to Apple Japan’s attention and the company handled it in the most Japanese way possible: quiet acceptance. Apple will pay the large tax bill:

“Apple Japan is believed to have filed an amended tax return, according to Nikkei. In response to a Reuters’ request for comment, the company only said in an emailed message that tax-exempt purchases were currently unavailable at its stores. The Tokyo Regional Taxation Bureau declined to comment.”

Apple America responded that the company invested over $100 billion in the Japanese supply network in the past five years.

Japan is a country dedicated to advancing technology and, despite its declining population, it possesses one of the most robust economies in Asia. Apple does not want to lose that business, so paying $98 million is a small hindrance to continue doing business in Japan.

Whitney Grace, January 25, 2023

« Previous PageNext Page »

  • Archives

  • Recent Posts

  • Meta