TGTGInsighttelegram intelligenceLIVE / telegram public index
← Python Заметки

TGINSIGHT SIMILAR POSTS

Најди сличен содржај

Изворен канал @pythonotes · Post #336 · 22 мај

Популярность имеет свои минусы. Чем популярней язык программирования, тем выше его распространённость, а значит найдутся те кто поспешит воспользоваться этим. С ростом популярности Python всё больше на PyPi появляется вредоносных пакетов. Трояны, стиллеры и доставщики более опасных вредоносов. Команда PyPi постоянно мониторит подобные случаи но и их возможности достигли предела. В результате сервис временно закрывает возможность заливки новых пакетов и регистрации юзеров. PyPI new user and new project registrations temporarily suspended Возможно одной из причин большого наплыва вредоносов является резко возросшая доступность их создания. Сегодня любой, даже не программист, может попросить у ChatGPT написать необходимый код и все инструкции для атаки. Основной тип атаки - рассчёт на опечатку в названии пакета. Если невнимательный программист случайно установит pilow или djangoo, считай что вредонос уже в системе. Чтобы избежать подобных факапов я рекомендую: ▫️ Всегда работайте в виртуальном окружении, неизвестные проекты устанавливайте внутри контейнеров. ▫️ Используйте файл requirements.txt вместо ручной установки пакетов ▫️ Очень внимательно пишите названия пакетов, а после написания проверьте еще раз. Сверьте с названием из документации. ▫️ После успешных тестов всегда фиксируйте версию пакета. Бывали случаи когда опасный код добавляли в новые версии. К тому же и без этой опасности не рекомендуется ставить по умолчанию последнюю версию. ▫️ Используйте вспомогательные инструменты для проверки безопасности, например https://pyup.io/safety или https://github.com/PyCQA/bandit. Они помогут не только найти опасный код в чужих пакетах, но и ваш код проверит на уязвимости. Будем надеяться что PyPi переосмыслит методы борьбы с вредоносами, например внедрит ИИ для проверки как симметричный шаг. #offtop

Hashtags

Резултати

Пронајдени 3 слични објави

Пребарај: #copyrightprotection

当前筛选 #copyrightprotection清除筛选
AI & Law

@ai_and_law · Post #77 · 07.08.2023 г., 07:04

Copyright in the Age of AI: Artists Take a Stand Hey there, AI & Law community! Have you ever wondered about the complex interplay between art and artificial intelligence? A recent legal battle is shedding light on how AI-generated content intersects with copyright law. Imagine discovering that your artwork has been used to train an AI system without your consent. That's exactly what happened to Kelly McKernan, a talented watercolor and acrylic illustrator. She found her creations uploaded to the LAION dataset, fueling AI image generators. This revelation transformed her relationship with her art, raising concerns about her career and the rights of countless creators. Kelly McKernan isn't alone in her struggle. Alongside cartoonist Sarah Anderson and illustrator Karla Ortiz, she's taking a stand against AI firm Stability AI, the company behind Stable Diffusion, Midjourney, and DeviantArt. These artists are filing a lawsuit, questioning the use of their work to train AI systems. This legal challenge adds to a growing list of cases that highlight the copyright complexities brought about by AI. Artists worldwide are coming together to address the concerns surrounding AI's impact on their creations. The European Guild of Artificial Intelligence Regulation is a prime example, aiming to create legislation that safeguards artists from predatory AI practices. The lack of protective measures and the potential for AI-generated art to replace human creativity is a pressing issue that demands attention. The case brings to the forefront the need for updated copyright laws in the face of AI advancements. The current framework often falls short in addressing the challenges posed by generative AI. #AIandArt#CopyrightProtection#ArtificialIntelligence#AIinLaw

AI & Law

@ai_and_law · Post #87 · 18.08.2023 г., 07:04

US: News Outlets Call for Transparency in AI Data Usage Hello everyone! A collective of news organizations has issued an open letter advocating for stricter regulations to safeguard copyright and ensure transparency in the use of training data for generative AI models. The open letter urges global lawmakers to enforce rules demanding data transparency, rights holders' consent for training data usage, and provisions for media companies to negotiate with AI model operators. It also calls for AI firms to tackle bias and misinformation and identify AI-generated content. Signatories include Agence France-Presse, Getty Images, The Associated Press, and more. They argue that foundation models using media content without proper consideration undermine media diversity and financial viability. The call comes in light of Google's AI news writing tool and concerns over AI training on copyrighted content. The US Senate and legal cases have addressed these issues, emphasizing the need to protect creators' rights. #AIandMedia#AIRegulation#DataTransparency#CopyrightProtection

AI & Law

@ai_and_law · Post #27 · 14.06.2023 г., 07:04

Balancing AI regulation and copyright protection: lessons from China's Generative AI Law Kris Shrishak, Senior Fellow at the Irish Council for Civil Liberties, urges the EU to take inspiration from China's draft law on generative AI. Shrishak highlights the EU's progress in regulating AI while underscoring its oversight in addressing the use of copyrighted material. China's draft law stands out for its explicit prohibition of unconsented use of copyright-protected content and personal data for training AI models. Shrishak points out that while the EU has taken steps to address AI risks, it primarily relies on self-assessments by AI developers rather than robust third-party assessments. This approach could potentially lead to enforcement challenges, as seen with the General Data Protection Regulation (GDPR). Learning from China's draft law, the EU can enhance its AI Act by incorporating stricter provisions against unconsented use of copyrighted content and personal data. Implementing third-party assessments and robust enforcement mechanisms will bolster intellectual property rights and privacy protection. #AIRegulation#CopyrightProtection#GenerativeAI#EU#China#DataProtection#Ethics#AIAct#Enforcement#PrivacyProtection