Musk denied he was aware Grok ever produced ‘any naked underage images’
A survivor of child sexual abuse has sued Elon Musk’s artificial intelligence company, alleging that its chatbot used pictures of her abuse to generate new illegal pornographic images that depict her.
“Using real images of Plaintiff and class members, Grok generated child pornography depicting Plaintiff and class members,” states the complaint, which was filed last week in a US district court in California.
Attorneys for the plaintiff, who is listed as Jane Doe in the case to protect her identity, accuse xAI of both generating CSAM of their client and of ingesting child sexual abuse images depicting her into the company’s datasets after new images were publicly posted.
From my understanding a hash completely changes when a single part of it is changed. That’s the point of a hash. Sounds like they identified the hashed images from the training set.
Nope. They use perceptual hashing. That way water marking and cropped images still trigger against the casm scanners.
The known casm results in a specific hash. Modified versions of that will result in a different hash but such that the “distance” is meaningful. The distance is how many bits need to flip to match the known casm hash.
It can lead to false positives so that’s why manually checking occurs. It’s also why people got very upset that Apple and perhaps others were going to automatically do these checks during upload to the cloud. When performed against billions of images, the false positive rate becomes huge and manually checking becomes too much overhead so people would be falsely accused.
It’s very likely what they found in groks models is a false positive but in this case they can probably compel twitter to prove it’s a false positive.
They were planning on doing checks locally, potentially impacting device performance, battery life and privacy as false positives would still be reviewed by humans. Potentially leading to individuals intimate photos being viewed without consent.
you would think, but then it would be lost when any part of the image changed (like adding a watermark or jpeg compression) instead it is a reversable algorithm https://www.researchgate.net/figure/mage-reconstructions-from-PhotoDNA-hashes-4_fig4_374838370
there are other, more robust, ways of fingerprinting images than hashing the data. I’m not sure how it works exactly though, but I can imagine it is not completely different from how shazam can pick out a song in a noisy environment.