Tech Digest 101 http://feed.informer.com/digests/IDAP6RXKUY/feeder Tech Digest 101 Respective post owners and feed distributors Fri, 21 Oct 2016 08:26:35 +0200 Feed Informer http://feed.informer.com/ Microsoft’s VASA-1 can deepfake a person with one photo and one audio track https://arstechnica.com/?p=2018178 Ars Technica » Technology Lab urn:uuid:763588ff-048a-26bd-7381-82a7429bd19b Fri, 19 Apr 2024 15:07:06 +0200 YouTube videos of 6K celebrities helped train AI model to animate photos in real time. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/teaser-800x410.jpg" alt="A sample image from Microsoft for " vasa-1: lifelike audio-driven talking faces generated in real time.> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/teaser-scaled.jpg" class="enlarge-link" data-height="1312" data-width="2560">Enlarge</a> <span class="sep">/</span> A sample image from Microsoft for "VASA-1: Lifelike Audio-Driven Talking Faces Generated in Real Time." (credit: <a rel="nofollow" class="caption-link" href="https://www.microsoft.com/en-us/research/project/vasa-1/">Microsoft</a>)</p> </figure> <div><a name="page-1"></a></div> <p>On Tuesday, Microsoft Research Asia unveiled <a href="https://www.microsoft.com/en-us/research/project/vasa-1/">VASA-1</a>, an AI model that can create a synchronized animated video of a person talking or singing from a single photo and an existing audio track. In the future, it could power virtual avatars that render locally and don't require video feeds—or allow anyone with similar tools to take a photo of a person found online and make them appear to say whatever they want.</p> <p>"It paves the way for real-time engagements with lifelike avatars that emulate human conversational behaviors," reads the abstract of the <a href="https://arxiv.org/abs/2404.10667">accompanying research paper</a> titled, "VASA-1: Lifelike Audio-Driven Talking Faces Generated in Real Time." It's the work of Sicheng Xu, Guojun Chen, Yu-Xiao Guo, Jiaolong Yang, Chong Li, Zhenyu Zang, Yizhong Zhang, Xin Tong, and Baining Guo.</p> <p>The VASA framework (short for "Visual Affective Skills Animator") uses machine learning to analyze a static image along with a speech audio clip. It is then able to generate a realistic video with precise facial expressions, head movements, and lip-syncing to the audio. It does not clone or simulate voices (like <a href="https://arstechnica.com/information-technology/2023/01/microsofts-new-ai-can-simulate-anyones-voice-with-3-seconds-of-audio/">other Microsoft research</a>) but relies on an existing audio input that could be specially recorded or spoken for a particular purpose.</p></div><p><a href="https://arstechnica.com/?p=2018178#p3">Read 11 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2018178&comments=1">Comments</a></p> LLMs keep leaping with Llama 3, Meta’s newest open-weights AI model https://arstechnica.com/?p=2018303 Ars Technica » Technology Lab urn:uuid:b0bede50-96f5-0981-db5f-2d957d162455 Thu, 18 Apr 2024 23:04:42 +0200 Zuckerberg says new AI model "was still learning" when Meta stopped training. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2023/08/code_llamas_hero-800x450.jpg" alt="A group of pink llamas on a pixelated background."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2023/08/code_llamas_hero.jpg" class="enlarge-link" data-height="675" data-width="1200">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/photo/llamas-posing-in-high-desert-royalty-free-image/108005662">Getty Images | Benj Edwards</a>)</p> </figure> <div><a name="page-1"></a></div> <p>On Thursday, Meta unveiled early versions of its <a href="https://llama.meta.com/llama3/">Llama 3</a> open-weights AI model that can be used to power text composition, code generation, or chatbots. It also announced that its <a href="https://about.fb.com/news/2024/04/meta-ai-assistant-built-with-llama-3/">Meta AI Assistant</a> is now <a href="https://www.meta.ai/?utm_source=ai_meta_site&amp;utm_medium=web&amp;utm_content=MetaAI_page&amp;utm_campaign=April_moment">available on a website</a> and is going to be integrated into its major social media apps, intensifying the company's efforts to position its products against other AI assistants like OpenAI's ChatGPT, Microsoft's Copilot, and Google's Gemini.</p> <p>Like its predecessor, <a href="https://arstechnica.com/information-technology/2023/07/meta-launches-llama-2-an-open-source-ai-model-that-allows-commercial-applications/">Llama 2</a>, Llama 3 is notable for being a freely available, open-weights large language model (LLM) provided by a major AI company. Llama 3 technically does not quality as "open source" because that term has a <a href="https://opensource.org/osd">specific meaning</a> in software (as we have mentioned in <a href="https://arstechnica.com/information-technology/2024/03/elon-musks-xai-releases-grok-source-and-weights-taunting-openai/">other coverage</a>), and the industry has not yet settled on terminology for AI model releases that ship either code or weights with restrictions (you can read Llama 3's license <a href="https://llama.meta.com/llama3/license/">here</a>) or that ship without providing training data. We typically call these releases "open weights" instead.</p> <p>At the moment, Llama 3 is available in two parameter sizes: 8 billion (8B) and 70 billion (70B), both of which are available as free downloads through Meta's website with a <a href="https://llama.meta.com/llama-downloads">sign-up.</a> Llama 3 comes in two versions: pre-trained (basically the raw, next-token-prediction model) and instruction-tuned (fine-tuned to follow user instructions). Each has a 8,192 token context limit.</p></div><p><a href="https://arstechnica.com/?p=2018303#p3">Read 8 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2018303&comments=1">Comments</a></p> LastPass users targeted in phishing attacks good enough to trick even the savvy https://arstechnica.com/?p=2018339 Ars Technica » Technology Lab urn:uuid:b214ea73-528a-62b0-903f-85d825391d4f Thu, 18 Apr 2024 20:42:06 +0200 Campaign used email, SMS, and voice calls to trick targets into divulging master passwords. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2022/03/phishing-800x430.jpeg" alt="LastPass users targeted in phishing attacks good enough to trick even the savvy"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2022/03/phishing.jpeg" class="enlarge-link" data-height="538" data-width="1000">Enlarge</a> (credit: Getty Images)</p> </figure> <div><a name="page-1"></a></div> <p>Password-manager LastPass users were recently targeted by a convincing phishing campaign that used a combination of email, SMS, and voice calls to trick targets into divulging their master passwords, company officials said.</p> <p>The attackers used an advanced phishing-as-a-service kit <a href="https://www.lookout.com/threat-intelligence/article/cryptochameleon-fcc-phishing-kit">discovered in February</a> by researchers from mobile security firm Lookout. Dubbed CryptoChameleon for its focus on cryptocurrency accounts, the kit provides all the resources needed to trick even relatively savvy people into believing the communications are legitimate. Elements include high-quality URLs, a counterfeit single sign-on page for the service the target is using, and everything needed to make voice calls or send emails or texts in real time as targets are visiting a fake site. The end-to-end service can also bypass multi-factor authentication in the event a target is using the protection.</p> <h2>LastPass in the crosshairs</h2> <p>Lookout said that LastPass was one of dozens of sensitive services or sites CryptoChameleon was configured to spoof. Others targeted included the Federal Communications Commission, Coinbase and other cryptocurrency exchanges, and email, password management, and single sign-on services including Okta, iCloud, and Outlook. When Lookout researchers accessed a database one CryptoChameleon subscriber used, they found that a high percentage of the contents collected in the scams appeared to be legitimate email addresses, passwords, one-time-password tokens, password reset URLs, and photos of driver’s licenses. Typically, such databases are filled with junk entries.</p></div><p><a href="https://arstechnica.com/?p=2018339#p3">Read 11 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2018339&comments=1">Comments</a></p> OpenAI winds down AI image generator that blew minds and forged friendships in 2022 https://arstechnica.com/?p=2017168 Ars Technica » Technology Lab urn:uuid:d713e18d-91bc-bdeb-5757-a5fbfffabb82 Thu, 18 Apr 2024 13:00:46 +0200 How a group of friends found themselves at the center of a fierce debate about the future of art. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/dalle_hero_2-800x450.jpg" alt="An AI-generated image from DALL-E 2 created with the prompt " a painting by grant wood of an astronaut couple american gothic style.> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/dalle_hero_2.jpg" class="enlarge-link" data-height="675" data-width="1200">Enlarge</a> <span class="sep">/</span> An AI-generated image from DALL-E 2 created with the prompt "A painting by Grant Wood of an astronaut couple, american gothic style." (credit: <a rel="nofollow" class="caption-link" href="https://x.com/AiArtPic/status/1548226438934867968">AI Pictures That Go Hard / X</a>)</p> </figure> <div><a name="page-1"></a></div> <p>When OpenAI's DALL-E 2 <a href="https://x.com/OpenAI/status/1511707245536428034">debuted</a> on April 6, 2022, the idea that a computer could create relatively photorealistic images on demand based on just text descriptions caught a lot of people <a href="https://www.theverge.com/23162454/openai-dall-e-image-generation-tool-creative-revolution">off guard</a>. The launch began an innovative and tumultuous period in AI history, marked by a sense of wonder and a polarizing ethical debate that reverberates in the AI space to this day.</p> <p>Last week, OpenAI <a href="https://help.openai.com/en/articles/4936794-is-dall-e-2-available">turned off</a> the ability for new customers to purchase generation credits for the web version of DALL-E 2, effectively killing it. From a technological point of view, it's not too surprising that OpenAI recently began winding down support for the service. The 2-year-old image generation model was groundbreaking for its time, but it has since been surpassed by <a href="https://arstechnica.com/information-technology/2023/11/from-toy-to-tool-dall-e-3-is-a-wake-up-call-for-visual-artists-and-the-rest-of-us/">DALL-E 3's</a> higher level of detail, and OpenAI has recently begun rolling out DALL-E 3 <a href="https://twitter.com/OpenAI/status/1775569161759985737">editing capabilities</a>.</p> <p>But for a tight-knit group of artists and tech enthusiasts who were there at the start of DALL-E 2, the service's sunset marks the bittersweet end of a period where AI technology briefly felt like a magical portal to boundless creativity. "The arrival of DALL-E 2 was truly mind-blowing," illustrator <a href="https://bonfx.com/">Douglas Bonneville</a> told Ars in an interview. "There was an exhilarating sense of unlimited freedom in those first days that we all suspected AI was going to unleash. It felt like a liberation from something into something else, but it was never clear exactly what."</p></div><p><a href="https://arstechnica.com/?p=2017168#p3">Read 42 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017168&comments=1">Comments</a></p> Kremlin-backed actors spread disinformation ahead of US elections https://arstechnica.com/?p=2018090 Ars Technica » Technology Lab urn:uuid:3d19741e-8b8e-ded5-5404-825c5fa7f3db Wed, 17 Apr 2024 23:55:30 +0200 To a lesser extent, China and Iran also peddle disinfo in hopes of influencing voters. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/us-elections-800x534.jpg" alt="Kremlin-backed actors spread disinformation ahead of US elections"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/us-elections.jpg" class="enlarge-link" data-height="667" data-width="1000">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/photo/united-states-election-royalty-free-image/1434120138">da-kuk/Getty</a>)</p> </figure> <div><a name="page-1"></a></div> <p>Kremlin-backed actors have stepped up efforts to interfere with the US presidential election by planting disinformation and false narratives on social media and fake news sites, analysts with Microsoft reported Wednesday.</p> <p>The analysts have identified several unique influence-peddling groups affiliated with the Russian government seeking to influence the election outcome, with the objective in large part to reduce US support of Ukraine and sow domestic infighting. These groups have so far been less active during the current election cycle than they were during previous ones, likely because of a less contested primary season.</p> <h2>Stoking divisions</h2> <p>Over the past 45 days, the groups have seeded a growing number of social media posts and fake news articles that attempt to foment opposition to US support of Ukraine and stoke divisions over hot-button issues such as election fraud. The influence campaigns also promote questions about President Biden’s mental health and corrupt judges. In all, Microsoft has tracked scores of such operations in recent weeks.</p></div><p><a href="https://arstechnica.com/?p=2018090#p3">Read 13 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2018090&comments=1">Comments</a></p> Broadcom says “many” VMware perpetual licenses got support extensions https://arstechnica.com/?p=2017717 Ars Technica » Technology Lab urn:uuid:a854e203-6eb0-47ca-e960-17e990caee6d Wed, 17 Apr 2024 18:44:44 +0200 Broadcom reportedly accused of changing VMware licensing and support conditions. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2023/12/GettyImages-1247615915-800x532.jpg" alt="The logo of American cloud computing and virtualization technology company VMware is seen at the Mobile World Congress (MWC), the telecom industry's biggest annual gathering, in Barcelona on March 2, 2023."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2023/12/GettyImages-1247615915.jpg" class="enlarge-link" data-height="681" data-width="1024">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/news-photo/the-logo-of-american-cloud-computing-and-virtualization-news-photo/1247615915">Getty</a>)</p> </figure> <div><a name="page-1"></a></div> <p>Broadcom CEO Hock Tan this week publicized some concessions aimed at helping customers and partners ease into VMware’s recent business model changes. Tan reiterated that the controversial changes, like the end of perpetual licensing, <a href="https://arstechnica.com/information-technology/2024/04/broadcom-execs-say-vmware-price-subscription-complaints-are-unwarranted/">aren't going away</a>. But amid questioning from antitrust officials in the European Union (EU), Tan announced that the company has already given support extensions for some VMware perpetual license holders.</p> <p>Broadcom closed its $69 billion VMware acquisition in November. One of its first moves was ending <a href="https://arstechnica.com/information-technology/2023/12/broadcom-ends-vmware-perpetual-license-sales-testing-customers-and-partners/">VMware perpetual license sales</a> in favor of subscriptions. Since December, Broadcom also hasn't sold Support and Subscription renewals for VMware perpetual licenses.</p> <p>In a <a href="https://www.broadcom.com/blog/a-changing-market-landscape-requires-constant-evolution-our-mission-for-vmware-customers">blog post</a> on Monday, Tan admitted that this shift requires "a change in the timing of customers' expenditures and the balance of those expenditures between capital and operating spending." As a result, Broadcom has "given support extensions to many customers who came up for renewal while these changes were rolling out." Tan didn't specify how Broadcom determined who is eligible for an extension or for how long. However, the executive's blog is the first time Broadcom has announced such extensions and opens the door to more extension requests.</p></div><p><a href="https://arstechnica.com/?p=2017717#p3">Read 10 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017717&comments=1">Comments</a></p> Linus Torvalds reiterates his tabs-versus-spaces stance with a kernel trap https://arstechnica.com/?p=2017554 Ars Technica » Technology Lab urn:uuid:a901e224-8b25-5f39-b7c1-5aacd4f56551 Tue, 16 Apr 2024 23:51:20 +0200 One does not simply suggest changing a kernel line to help out a parsing tool. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/GettyImages-595289606-800x533.jpg" alt="Tab soda displayed on a grocery shelf"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/GettyImages-595289606-scaled.jpg" class="enlarge-link" data-height="1707" data-width="2560">Enlarge</a> <span class="sep">/</span> Cans of Tab diet soda on display in 2011. Tab was discontinued in 2020. There has never been a soda named "Spaces" that had a cult following. (credit: Getty Images)</p> </figure> <div><a name="page-1"></a></div> <p>Anybody can contribute to the Linux kernel, but any person's commit suggestion can become the subject of the kernel's master and namesake, Linus Torvalds. Torvalds is famously <a href="https://arstechnica.com/information-technology/2015/01/linus-torvalds-responds-to-ars-about-diversity-niceness-in-open-source/">not overly committed to niceness</a>, though he has been <a href="https://arstechnica.com/gadgets/2018/09/linus-torvalds-apologizes-for-years-of-being-a-jerk-takes-time-off-to-learn-empathy/">working on it since 2018</a>. You can see glimpses of this newer, less curse-laden approach in how Torvalds recently addressed a commit with which he vehemently disagreed. It involves tabs.</p> <p>The commit last week changed <a href="https://git.kernel.dk/?p=linux-block.git;a=commit;h=d96c36004e31">exactly one thing on one line</a>, replacing a tab character with a space: "It helps Kconfig parsers to read file without error." Torvalds responded with a commit of his own, <a href="https://www.theregister.com/2024/04/16/torvalds_complicates_his_indents/">as spotted by The Register</a>, which would "<a href="https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/diff/?id=d5cf50dafc9dd5faa1e61e7021e3496ddf7fd61e">add some hidden tabs on purpose</a>." Trying to smooth over a tabs-versus-spaces matter seemed to awaken Torvalds to the need to have tab-detecting failures be "more obvious." Torvalds would have added more, he wrote, but didn't "want to make things uglier than necessary. But it *might* be necessary if it turns out we see more of this kind of silly tooling."</p> <p>If you've read this far and don't understand what's happening, please allow me, a failed CS minor, to offer a quick explanation: <a href="https://arstechnica.com/information-technology/2017/06/according-to-statistics-programming-with-spaces-instead-of-tabs-makes-you-rich/">Tabs Versus Spaces</a> will <a href="https://roberttruesdale.medium.com/tabs-vs-spaces-the-never-ending-battle-beyond-code-037d493e6dd8">never</a> be truly resolved, codified, or set right by standards, and the energy spent on the issue over time could, if harnessed, likely power one or more small nations. Still, the Linux kernel has <a href="https://www.kernel.org/doc/html/latest/process/coding-style.html">its own coding style</a>, and it directly cites "K&amp;R," or <a href="https://arstechnica.com/gadgets/2022/08/unix-legend-who-owes-us-nothing-keeps-fixing-foundational-awk-code/">Kernighan</a> &amp; <a href="https://arstechnica.com/information-technology/2011/10/dennis-ritchie-the-giant-whose-shoulders-we-stand-on/">Ritchie</a>, the authors of the coding bible <em>The C Programming Language,</em> which is a tabs book. If you are submitting kernel code, it had better use tabs (eight-character tabs, ideally, though that is tied in part to <a href="https://retrocomputing.stackexchange.com/questions/16172/when-did-tabs-start-defaulting-to-8-columns">teletype and line-printer history</a>).</p></div><p><a href="https://arstechnica.com/?p=2017554#p3">Read 3 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017554&comments=1">Comments</a></p> Attackers are pummeling networks around the world with millions of login attempts https://arstechnica.com/?p=2017646 Ars Technica » Technology Lab urn:uuid:cee7d188-e1da-07f0-a246-dcd25ed1482f Tue, 16 Apr 2024 23:31:25 +0200 Attacks coming from nearly 4,000 IP addresses take aim at VPNs, SSH and web apps. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2021/12/password-entry-800x450.jpg" alt="Attackers are pummeling networks around the world with millions of login attempts"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2021/12/password-entry.jpg" class="enlarge-link" data-height="1299" data-width="2309">Enlarge</a> (credit: Matejmo | Getty Images)</p> </figure> <div><a name="page-1"></a></div> <p>Cisco’s Talos security team is warning of a large-scale credential compromise campaign that’s indiscriminately assailing networks with login attempts aimed at gaining unauthorized access to VPN, SSH, and web application accounts.</p> <p>The login attempts use both generic usernames and valid usernames targeted at specific organizations. Cisco included a <a href="https://github.com/Cisco-Talos/IOCs/blob/main/2024/04/large-scale-brute-force-activity-targeting-vpns-ssh-services-with-commonly-used-login-credentials.txt">list</a> of more than 2,000 usernames and almost 100 passwords used in the attacks, along with nearly 4,000 IP addresses sending the login traffic. The IP addresses appear to originate from TOR exit nodes and other anonymizing tunnels and proxies. The attacks appear to be indiscriminate and opportunistic rather than aimed at a particular region or industry.</p> <p>“Depending on the target environment, successful attacks of this type may lead to unauthorized network access, account lockouts, or denial-of-service conditions,” Talos researchers <a href="https://blog.talosintelligence.com/large-scale-brute-force-activity-targeting-vpns-ssh-services-with-commonly-used-login-credentials/">wrote Tuesday</a>. “The traffic related to these attacks has increased with time and is likely to continue to rise.”</p></div><p><a href="https://arstechnica.com/?p=2017646#p3">Read 9 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017646&comments=1">Comments</a></p> New UK law targets “despicable individuals” who create AI sex deepfakes https://arstechnica.com/?p=2017401 Ars Technica » Technology Lab urn:uuid:fcd63d54-d3b7-3de8-2935-efd7a037322f Tue, 16 Apr 2024 16:51:38 +0200 Under new law, those who create the images would face a fine and possible jail time. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/deepfake_illustration_1-800x450.jpg" alt="An illustrator's concept of a deepfake."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/deepfake_illustration_1.jpg" class="enlarge-link" data-height="675" data-width="1200">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/photo/deepfake-concept-royalty-free-image/1470340715">Getty Images</a>)</p> </figure> <div><a name="page-1"></a></div> <p>On Tuesday, the UK government <a href="https://www.gov.uk/government/news/government-cracks-down-on-deepfakes-creation">announced</a> a new law targeting the creation of AI-generated sexually explicit deepfake images. Under the legislation, which has not yet been passed, offenders would face prosecution and an unlimited fine, even if they do not widely share the images but create them with the intent to distress the victim. The government positions the law as part of a broader effort to enhance legal protections for women.</p> <p>Over the past decade, the rise of deep learning image synthesis technology has made it increasingly easy for people with a consumer PC to create misleading pornography by swapping out the faces of the performers with someone else who has not consented to the act. That practice spawned the term "deepfake" around 2017, named after a Reddit user named "deepfakes" that <a href="https://www.vice.com/en/article/gydydm/gal-gadot-fake-ai-porn">shared AI-faked porn</a> on the service. Since then, the term has grown to encompass completely new images and video <a href="https://arstechnica.com/information-technology/2022/12/thanks-to-ai-its-probably-time-to-take-your-photos-off-the-internet/">synthesized entirely from scratch,</a> created from neural networks that have been trained on images of the victim.</p> <p>The problem isn't unique to the UK. In March, deepfake nudes of female middle school classmates in Florida <a href="https://arstechnica.com/tech-policy/2024/03/florida-middle-schoolers-charged-with-making-deepfake-nudes-of-classmates/">led to charges</a> against two boys ages 13 and 14. The rise of open source image synthesis models like <a href="https://arstechnica.com/information-technology/2022/09/with-stable-diffusion-you-may-never-believe-what-you-see-online-again/">Stable Diffusion</a> since 2022 has increased the urgency <a href="https://arstechnica.com/tech-policy/2024/01/sharing-deepfake-could-lead-to-lengthy-prison-time-under-proposed-law/">among regulators in the US</a> to attempt to contain (or at least punish) the act of creating non-consensual deepfakes. The UK government is on a similar mission.</p></div><p><a href="https://arstechnica.com/?p=2017401#p3">Read 4 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017401&comments=1">Comments</a></p> Why the US government’s overreliance on Microsoft is a big problem https://arstechnica.com/?p=2017405 Ars Technica » Technology Lab urn:uuid:6a6b0922-41be-9865-1ab9-1c2907bf1c9e Tue, 16 Apr 2024 15:55:34 +0200 Microsoft continues to get a free pass after series of cybersecurity failures. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/windows-neon-800x533.jpg" alt="Windows logo"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/windows-neon.jpg" class="enlarge-link" data-height="1493" data-width="2240">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/news-photo/the-microsoft-logo-the-american-multinational-technology-news-photo/1247904171">Joan Cros via Getty</a>)</p> </figure> <div><a name="page-1"></a></div> <p>When Microsoft revealed in January that foreign government hackers had <a href="https://www.wired.com/story/microsoft-hpe-midnight-blizzard-email-breaches/">once again breached its systems</a>, the news prompted another round of recriminations about the security posture of the world’s largest tech company.</p> <p>Despite the angst among policymakers, security experts, and competitors, Microsoft faced no consequences for its latest embarrassing failure. The United States government kept buying and using Microsoft products, and senior officials refused to publicly rebuke the tech giant. It was another reminder of how insulated Microsoft has become from virtually any government accountability, even as the Biden administration vows to make powerful tech firms take more responsibility for America’s cyber defense.</p> <p></p></div><p><a href="https://arstechnica.com/?p=2017405#p3">Read 55 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017405&comments=1">Comments</a></p> Alleged cryptojacking scheme consumed $3.5M of stolen computing to make just $1M https://arstechnica.com/?p=2017285 Ars Technica » Technology Lab urn:uuid:18d1d3bf-6ac1-e923-26da-529f04e58333 Mon, 15 Apr 2024 21:46:03 +0200 Indictment says man tricked cloud providers into giving him services he never paid for. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/electricity-consumption-800x478.jpg" alt="Alleged cryptojacking scheme consumed $3.5M of stolen computing to make just $1M"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/electricity-consumption.jpg" class="enlarge-link" data-height="657" data-width="1100">Enlarge</a> (credit: Getty Images)</p> </figure> <div><a name="page-1"></a></div> <p>Federal prosecutors indicted a Nebraska man on charges he perpetrated a cryptojacking scheme that defrauded two cloud providers—one based in Seattle and the other in Redmond, Washington—out of $3.5 million.</p> <p>The <a href="https://www.justice.gov/media/1348006/dl">indictment</a>, filed in US District Court for the Eastern District of New York and unsealed on Monday, charges Charles O. Parks III—45 of Omaha, Nebraska—with wire fraud, money laundering, and engaging in unlawful monetary transactions in connection with the scheme. Parks has yet to enter a plea and is scheduled to make an initial appearance in federal court in Omaha on Tuesday. Parks was arrested last Friday.</p> <p>Prosecutors <a href="https://www.justice.gov/usao-edny/pr/nebraska-man-indicted-multi-million-dollar-cryptojacking-scheme">allege</a> that Parks defrauded “two well-known providers of cloud computing services” of more than $3.5 million in computing resources to mine cryptocurrency. The indictment says the activity was in furtherance of a cryptojacking scheme, a term for crimes that generate digital coin through the acquisition of computing resources and electricity of others through fraud, hacking, or other illegal means.</p></div><p><a href="https://arstechnica.com/?p=2017285#p3">Read 9 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017285&comments=1">Comments</a></p> Framework’s software and firmware have been a mess, but it’s working on them https://arstechnica.com/?p=2012352 Ars Technica » Technology Lab urn:uuid:a52bb856-5d0f-569c-e5a6-2f325ce11c11 Mon, 15 Apr 2024 13:00:44 +0200 New features, security updates, and Linux support are all on a long to-do list. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/IMG_1034-800x533.jpeg" alt="The Framework Laptop 13."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/IMG_1034.jpeg" class="enlarge-link" data-height="1707" data-width="2560">Enlarge</a> <span class="sep">/</span> The Framework Laptop 13. (credit: Andrew Cunningham)</p> </figure> <div><a name="page-1"></a></div> <p>Since Framework showed off its first prototypes <a href="https://arstechnica.com/gadgets/2021/02/framework-startup-designed-a-thin-modular-repairable-13-inch-laptop/">in February 2021</a>, we've generally been fans of the company's modular, repairable, upgradeable laptops.</p> <p>Not that the company's hardware releases to date have been perfect—each Framework Laptop 13 model has had quirks and flaws that range from <a href="https://knowledgebase.frame.work/expansion-card-functionality-on-framework-laptop-13-amd-ryzen-7040-series-SkrVx7gAh">minor</a> to <a href="https://arstechnica.com/gadgets/2022/07/review-frameworks-next-gen-laptop-follows-through-on-its-upgradeable-promises/4/">quite significant</a>, and the <a href="https://arstechnica.com/gadgets/2024/01/review-frameworks-laptop-16-is-unique-laudable-fascinating-and-flawed/">Laptop 16's</a> upsides struggle to balance its downsides. But the hardware mostly does a good job of functioning as a regular laptop while being much more tinkerer-friendly than your typical MacBook, XPS, or ThinkPad.</p> <p>But even as it builds new upgrades for its systems, expands sales of <a href="https://arstechnica.com/gadgets/2023/11/framework-laptop-prices-go-as-low-as-639-thanks-to-refurbs-and-factory-seconds/">refurbished and B-stock hardware as budget options</a>, and <a href="https://arstechnica.com/gadgets/2023/08/turning-my-framework-laptop-into-a-tiny-desktop-was-fun-now-it-needs-a-job/">promotes the re-use of its products via external enclosures</a>, Framework has struggled with the other side of computing longevity and sustainability: providing up-to-date software.</p></div><p><a href="https://arstechnica.com/?p=2012352#p3">Read 30 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2012352&comments=1">Comments</a></p> Change Healthcare faces another ransomware threat—and it looks credible https://arstechnica.com/?p=2017095 Ars Technica » Technology Lab urn:uuid:c38fa60e-b5ad-26a8-2d9f-5eae6589bc86 Sat, 13 Apr 2024 20:25:32 +0200 Hackers already received a $22 million payment. Now a second group demands money. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/GettyImages-1283342786-800x533.jpg" alt="Medical Data Breach text write on keyboard isolated on laptop background"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/GettyImages-1283342786-scaled.jpg" class="enlarge-link" data-height="1707" data-width="2560">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/photo/medical-data-breach-text-write-on-keyboard-isolated-royalty-free-image/1283342786">iStock / Getty Images Plus</a>)</p> </figure> <div><a name="page-1"></a></div> <p>For months, Change Healthcare has faced an immensely messy <a href="https://www.wired.com/tag/ransomware/">ransomware</a> debacle that has left hundreds of pharmacies and medical practices across the United States unable to process claims. Now, thanks to an apparent dispute within the ransomware criminal ecosystem, it may have just become far messier still.</p> <p>In March, the ransomware group AlphV, which had claimed credit for encrypting Change Healthcare’s network and threatened to leak reams of the company’s sensitive health care data, <a href="https://www.wired.com/story/alphv-change-healthcare-ransomware-payment/">received a $22 million payment</a>—evidence, publicly captured on bitcoin’s blockchain, that Change Healthcare had very likely caved to its tormentors’ ransom demand, though the company has yet to confirm that it paid. But in a new definition of a worst-case ransomware, a <em>different</em> ransomware group claims to be holding Change Healthcare’s stolen data and is demanding a payment of their own.</p> <p></p></div><p><a href="https://arstechnica.com/?p=2017095#p3">Read 6 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017095&comments=1">Comments</a></p> “Highly capable” hackers root corporate networks by exploiting firewall 0-day https://arstechnica.com/?p=2017043 Ars Technica » Technology Lab urn:uuid:cdfc61b5-e4de-2420-7a68-b461111fa8f8 Fri, 12 Apr 2024 22:48:47 +0200 No patch yet for unauthenticated code-execution bug in Palo Alto Networks firewall. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2020/11/zeroday-800x534.jpg" alt="The word ZERO-DAY is hidden amidst a screen filled with ones and zeroes."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2020/11/zeroday.jpg" class="enlarge-link" data-height="667" data-width="1000">Enlarge</a> (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/">Getty Images</a>)</p> </figure> <div><a name="page-1"></a></div> <p>Highly capable hackers are rooting multiple corporate networks by exploiting a maximum-severity zero-day vulnerability in a firewall product from Palo Alto Networks, researchers said Friday.</p> <p>The vulnerability, which has been under active exploitation for at least two weeks now, allows the hackers with no authentication to execute malicious code with root privileges, the highest possible level of system access, researchers said. The extent of the compromise, along with the ease of exploitation, has earned the CVE-2024-3400 vulnerability the maximum severity rating of 10.0. The ongoing attacks are the latest in a rash of attacks aimed at firewalls, VPNs, and file-transfer appliances, which are popular targets because of their wealth of vulnerabilities and direct pipeline into the most sensitive parts of a network.</p> <h2>“Highly capable” UTA0218 likely to be joined by others</h2> <p>The zero-day is present in PAN-OS 10.2, PAN-OS 11.0, and/or PAN-OS 11.1 firewalls when they are configured to use both the GlobalProtect gateway and device telemetry. Palo Alto Networks has yet to patch the vulnerability but is urging affected customers to follow the workaround and mitigation guidance provided <a href="https://security.paloaltonetworks.com/CVE-2024-3400">here</a>. The advice includes enabling Threat ID 95187 for those with subscriptions to the company’s Threat Prevention service and ensuring vulnerability protection has been applied to their GlobalProtect interface. When that’s not possible, customers should temporarily disable telemetry until a patch is available.</p></div><p><a href="https://arstechnica.com/?p=2017043#p3">Read 11 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2017043&comments=1">Comments</a></p> Words are flowing out like endless rain: Recapping a busy week of LLM news https://arstechnica.com/?p=2016005 Ars Technica » Technology Lab urn:uuid:f228e885-800d-24ba-5db5-424f06407a2b Fri, 12 Apr 2024 22:31:08 +0200 Gemini 1.5 Pro launch, new version of GPT-4 Turbo, new Mistral model, and more. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/flying_letters-800x450.jpg" alt="An image of a boy amazed by flying letters."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/flying_letters.jpg" class="enlarge-link" data-height="675" data-width="1200">Enlarge</a> <span class="sep">/</span> An image of a boy amazed by flying letters. (credit: <a rel="nofollow" class="caption-link" href="https://www.gettyimages.com/detail/photo/living-books-royalty-free-image/108221767">Getty Images</a>)</p> </figure> <div><a name="page-1"></a></div> <p>Some weeks in AI news are eerily quiet, but during others, getting a grip on the week's events feels like trying to hold back the tide. This week has seen three notable large language model (LLM) releases: Google Gemini Pro 1.5 hit <a href="https://developers.googleblog.com/2024/04/gemini-15-pro-in-public-preview-with-new-features.html">general availability</a> with a free tier, OpenAI shipped a <a href="https://x.com/OpenAI/status/1777772582680301665">new version</a> of GPT-4 Turbo, and Mistral released a new openly licensed LLM, <a href="https://x.com/sophiamyang/status/1777945947764297845">Mixtral 8x22B</a>. All three of those launches happened within 24 hours starting on Tuesday.</p> <p>With the help of software engineer and independent AI researcher Simon Willison (who also <a href="https://simonwillison.net/2024/Apr/10/weeknotes-llm-releases/">wrote about</a> this week's hectic LLM launches on his own blog), we'll briefly cover each of the three major events in roughly chronological order, then dig into some additional AI happenings this week.</p> <h2>Gemini Pro 1.5 general release</h2> <div class="image shortcode-img center large"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/Gemini-banner.png"><img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/Gemini-banner-640x190.png" srcset="https://cdn.arstechnica.net/wp-content/uploads/2024/04/Gemini-banner-1280x381.png 2x"></a><p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/Gemini-banner.png" class="caption-link" rel="nofollow"></a> (credit: <a rel="nofollow" class="caption-link" href="https://developers.googleblog.com/2024/04/gemini-15-pro-in-public-preview-with-new-features.html">Google</a>)</p></div> <p>On Tuesday morning Pacific time, Google <a href="https://developers.googleblog.com/2024/04/gemini-15-pro-in-public-preview-with-new-features.html">announced</a> that its Gemini 1.5 Pro model (which we first <a href="https://arstechnica.com/information-technology/2024/02/google-upstages-itself-with-gemini-1-5-ai-launch-one-week-after-ultra-1-0/">covered</a> in February) is now available in 180+ countries, excluding Europe, via the Gemini API in a public preview. This is Google's most powerful public LLM so far, and it's available in a free tier that permits up to 50 requests a day.</p></div><p><a href="https://arstechnica.com/?p=2016005#p3">Read 14 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2016005&comments=1">Comments</a></p> Intel’s “Gaudi 3” AI accelerator chip may give Nvidia’s H100 a run for its money https://arstechnica.com/?p=2016421 Ars Technica » Technology Lab urn:uuid:94992cb6-b724-ce4b-360e-1fdc94f32171 Thu, 11 Apr 2024 22:56:59 +0200 Intel claims 50% more speed when running AI language models vs. the market leader. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/newsroom-intel-gaudi-3-2.jpg.rendition.intel_.web_.1648.927-800x450.jpg" alt="An Intel handout photo of the Gaudi 3 AI accelerator."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/newsroom-intel-gaudi-3-2.jpg.rendition.intel_.web_.1648.927.jpg" class="enlarge-link" data-height="927" data-width="1648">Enlarge</a> <span class="sep">/</span> An Intel handout photo of the Gaudi 3 AI accelerator. (credit: <a rel="nofollow" class="caption-link" href="https://www.intel.com/content/www/us/en/newsroom/news/vision-2024-gaudi-3-ai-accelerator.html">Intel</a>)</p> </figure> <div><a name="page-1"></a></div> <p>On Tuesday, Intel <a href="https://www.intel.com/content/www/us/en/newsroom/news/vision-2024-gaudi-3-ai-accelerator.html#gs.794k93">revealed</a> a new AI accelerator chip called Gaudi 3 at its Vision 2024 event in Phoenix. With strong claimed performance while running large language models (like those that power <a href="https://arstechnica.com/information-technology/2023/11/chatgpt-was-the-spark-that-lit-the-fire-under-generative-ai-one-year-ago-today/">ChatGPT</a>), the company has positioned Gaudi 3 as an alternative to Nvidia's <a href="https://arstechnica.com/information-technology/2022/09/hopper-time-nvidias-most-powerful-ai-chip-yet-ships-in-october/">H100</a>, a popular data center GPU that has been <a href="https://www.wired.com/story/nvidia-chip-shortages-leave-ai-startups-scrambling-for-computing-power/">subject to shortages</a>, though apparently that is <a href="https://www.tomshardware.com/pc-components/gpus/nvidias-h100-ai-gpu-shortages-ease-as-lead-times-drop-from-up-to-four-months-to-8-12-weeks">easing somewhat</a>.</p> <p>Compared to Nvidia's H100 chip, Intel projects a 50 percent faster training time on Gaudi 3 for both OpenAI's GPT-3 175B LLM and the 7-billion parameter version of Meta's <a href="https://arstechnica.com/information-technology/2023/07/meta-launches-llama-2-an-open-source-ai-model-that-allows-commercial-applications/">Llama 2</a>. In terms of inference (running the trained model to get outputs), Intel claims that its new AI chip delivers 50 percent faster performance than H100 for Llama 2 and <a href="https://huggingface.co/tiiuae/falcon-180B">Falcon 180B</a>, which are both relatively popular open-weights models.</p> <p>Intel is targeting the H100 because of its <a href="https://www.extremetech.com/computing/analysts-estimate-nvidia-owns-98-of-the-data-center-gpu-market">high market share</a>, but the chip isn't Nvidia's most powerful AI accelerator chip in the pipeline. Announcements of the <a href="https://arstechnica.com/information-technology/2023/11/nvidia-introduces-its-most-powerful-gpu-yet-designed-for-accelerating-ai/">H200</a> and the Blackwell <a href="https://arstechnica.com/information-technology/2024/03/nvidia-unveils-blackwell-b200-the-worlds-most-powerful-chip-designed-for-ai/">B200</a> have since surpassed the H100 on paper, but neither of those chips is out yet (the H200 is <a href="https://www.servethehome.com/micron-hbm3e-in-production-set-for-nvidia-h200-use-in-q2-2024/">expected</a> in the second quarter of 2024—basically any day now).</p></div><p><a href="https://arstechnica.com/?p=2016421#p3">Read 10 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2016421&comments=1">Comments</a></p> Hackable Intel and Lenovo hardware that went undetected for 5 years won’t ever be fixed https://arstechnica.com/?p=2016577 Ars Technica » Technology Lab urn:uuid:0423a95f-5ea7-e431-3bd8-d4c0383da541 Thu, 11 Apr 2024 20:53:03 +0200 Multiple links in the supply chain failed for years to identify an unfixed vulnerability. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/intel-server.jpeg" alt="Hackable Intel and Lenovo hardware that went undetected for 5 years won’t ever be fixed"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/intel-server.jpeg" class="enlarge-link" data-height="324" data-width="576">Enlarge</a> (credit: Intel)</p> </figure> <div><a name="page-1"></a></div> <p>Hardware sold for years by the likes of Intel and Lenovo contains a remotely exploitable vulnerability that will never be fixed. The cause: a supply chain snafu involving an open source software package and hardware from multiple manufacturers that directly or indirectly incorporated it into their products.</p> <p>Researchers from security firm Binarly have confirmed that the lapse has resulted in Intel, Lenovo, and Supermicro shipping server hardware that contains a vulnerability that can be exploited to reveal security-critical information. The researchers, however, went on to warn that any hardware that incorporates certain generations of baseboard management controllers made by Duluth, Georgia-based AMI or Taiwan-based AETN are also affected.</p> <h2>Chain of fools</h2> <p>BMCs are tiny computers soldered into the motherboard of servers that allow cloud centers, and sometimes their customers, to streamline the remote management of vast fleets of servers. They enable administrators to remotely reinstall OSes, install and uninstall apps, and control just about every other aspect of the system—even when it's turned off. BMCs provide what’s known in the industry as “lights-out” system management. AMI and AETN are two of several makers of BMCs.</p></div><p><a href="https://arstechnica.com/?p=2016577#p3">Read 11 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2016577&comments=1">Comments</a></p> AT&T: Data breach affects 73 million or 51 million customers. No, we won’t explain. https://arstechnica.com/?p=2016342 Ars Technica » Technology Lab urn:uuid:b78b681a-2934-4cd3-08a0-04f09704efb5 Thu, 11 Apr 2024 00:28:02 +0200 When the data was published in 2021, the company said it didn't belong to its customers. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2021/04/data-leak-800x534.jpeg" alt="AT&amp;T: Data breach affects 73 million or 51 million customers. No, we won’t explain."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2021/04/data-leak.jpeg" class="enlarge-link" data-height="667" data-width="1000">Enlarge</a> (credit: Getty Images)</p> </figure> <div><a name="page-1"></a></div> <p>AT&amp;T is notifying millions of current or former customers that their account data has been compromised and published last month on the dark web. Just how many millions, the company isn't saying.</p> <p>In a <a href="https://apps.web.maine.gov/online/aeviewer/ME/40/3778e1fc-2ed5-461d-9cc5-df15c07f687c.shtml">mandatory filing</a> with the Maine Attorney General’s office, the telecommunications company said 51.2 million account holders were affected. On its corporate website, AT&amp;T put the number at <a href="https://www.att.com/support/article/my-account/000101995">73 million</a>. In either event, compromised data included one or more of the following: full names, email addresses, mailing addresses, phone numbers, social security numbers, dates of birth, AT&amp;T account numbers, and AT&amp;T passcodes. Personal financial information and call history didn’t appear to be included, AT&amp;T said, and data appeared to be from June 2019 or earlier.</p> <p>The disclosure on the AT&amp;T site said the 73 million affected customers comprised 7.6 million current customers and 65.4 million former customers. The notification said AT&amp;T has reset the account PINs of all current customers and is notifying current and former customers by mail. AT&amp;T representatives haven’t explained why the letter filed with the Maine AG lists 51.2 million affected and the disclosure on its site lists 73 million.</p></div><p><a href="https://arstechnica.com/?p=2016342#p3">Read 3 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2016342&comments=1">Comments</a></p> New AI music generator Udio synthesizes realistic music on demand https://arstechnica.com/?p=2016112 Ars Technica » Technology Lab urn:uuid:445677fe-c8ec-3890-356d-bd71eba82657 Wed, 10 Apr 2024 23:47:44 +0200 But it still needs trial and error to generate high-quality results. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/udio_header-800x450.jpg" alt="A screenshot of AI-generated songs listed on Udio on April 10, 2024."> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/udio_header.jpg" class="enlarge-link" data-height="675" data-width="1200">Enlarge</a> <span class="sep">/</span> A screenshot of AI-generated songs listed on Udio on April 10, 2024. (credit: Benj Edwards)</p> </figure> <div><a name="page-1"></a></div> <p>Between 2002 and 2005, I ran <a href="https://www.vintagecomputing.com/index.php/archives/899/request-a-songcom-turns-10">a music website</a> where visitors could submit song titles that I would write and record a silly song around. In the <a href="https://x.com/benjedwards/status/1748413910636441978">liner notes</a> for my first CD release in 2003, I wrote about a day when computers would potentially put me out of business, churning out music automatically at a pace I could not match. While I don't actively post music on that site anymore, that day is almost here.</p> <p>On Wednesday, a group of ex-DeepMind employees launched <a href="https://www.udio.com/">Udio</a>, a new AI music synthesis service that can create novel high-fidelity musical audio from written prompts, including user-provided lyrics. It's similar to <a href="https://arstechnica.com/information-technology/2024/04/mit-license-text-becomes-viral-sad-girl-piano-ballad-generated-by-ai/">Suno</a>, which we covered on Monday. With some key human input, Udio can create facsimiles of human-produced music in genres like <a href="https://www.udio.com/songs/jGjYfsRosZjYTkSBdFgEyF">country</a>, <a href="https://www.udio.com/songs/282ZPSyaunNC8GjegZ1LD1">barbershop quartet</a>, <a href="https://www.udio.com/songs/6ok7R3CsSf4Us7fM9Jvuty">German pop</a>, <a href="https://www.udio.com/songs/xtju1X31YfVbKWTCGd4yw7">classical</a>, <a href="https://www.udio.com/songs/s57gWkoWhkEJvMsCN8ydEw">hard rock</a>, <a href="https://www.udio.com/songs/jYExega6Titmeocp8nrbk2">hip hop</a>, <a href="https://www.udio.com/songs/eY7xtug1dV6hbfCDhyHJua">show tunes</a>, and more. It's currently free to use during a beta period.</p> <figure class="video ars-wp-video"> <div class="wrapper ars-wp-video-wrapper" style="padding-bottom: 100%;"> <video class="wp-video-shortcode" id="video-2016112-1" width="552" height="552" preload="metadata" controls="controls"><source type="video/mp4" src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/Wow.....-I-Didnt-Know-That-Full-Track-Americana-Country.mp4?_=1"></source></video> </div> </figure> <p>Udio is also <a href="https://www.reddit.com/r/Music/comments/1c0mjkg/udio_ai_music_generation_is_scary/">freaking out</a> some musicians on Reddit. As we mentioned in our Suno piece, Udio is exactly the kind of AI-powered music generation service that over 200 musical artists were afraid of when they <a href="https://arstechnica.com/information-technology/2024/04/billie-eilish-pearl-jam-200-artists-say-ai-poses-existential-threat-to-their-livelihoods/">signed an open protest letter</a> last week.</p></div><p><a href="https://arstechnica.com/?p=2016112#p3">Read 7 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2016112&comments=1">Comments</a></p> Thousands of LG TVs are vulnerable to takeover—here’s how to ensure yours isn’t one https://arstechnica.com/?p=2015865 Ars Technica » Technology Lab urn:uuid:233225a8-ef06-6c8e-df2d-37077aca129e Tue, 09 Apr 2024 21:12:47 +0200 LG patches four vulnerabilities that allow malicious hackers to commandeer TVs. <div id="rss-wrap"> <figure class="intro-image intro-left"> <img src="https://cdn.arstechnica.net/wp-content/uploads/2024/04/smart-tv-800x534.jpg" alt="Thousands of LG TVs are vulnerable to takeover—here’s how to ensure yours isn’t one"> <p class="caption" style="font-size:0.8em"><a href="https://cdn.arstechnica.net/wp-content/uploads/2024/04/smart-tv.jpg" class="enlarge-link" data-height="667" data-width="1000">Enlarge</a> (credit: Getty Images)</p> </figure> <div><a name="page-1"></a></div> <p>As many as 91,000 LG TVs face the risk of being commandeered unless they receive a just-released security update patching four critical vulnerabilities discovered late last year.</p> <p>The vulnerabilities are found in four LG TV models that collectively comprise slightly more than 88,000 units around the world, <a href="https://www.shodan.io/search?query=product%3A%22LG+webOs+TV%22">according to</a> results returned by the Shodan search engine for Internet-connected devices. The vast majority of those units are located in South Korea, followed by Hong Kong, the US, Sweden, and Finland. The models are:</p> <ul> <li aria-level="1">LG43UM7000PLA running webOS 4.9.7 - 5.30.40</li> <li aria-level="1">OLED55CXPUA running webOS 5.5.0 - 04.50.51</li> <li aria-level="1">OLED48C1PUB running webOS 6.3.3-442 (kisscurl-kinglake) - 03.36.50</li> <li aria-level="1">OLED55A23LA running webOS 7.3.1-43 (mullet-mebin) - 03.33.85</li> </ul> <p>Starting Wednesday, updates are available through these devices’ settings menu.</p></div><p><a href="https://arstechnica.com/?p=2015865#p3">Read 8 remaining paragraphs</a> | <a href="https://arstechnica.com/?p=2015865&comments=1">Comments</a></p> What Are These Companies Hiding? - Rabbit R1 / Humane AI Pin https://www.youtube.com/watch?v=OPoWMXqq62Q Dave Lee urn:uuid:57adf290-6313-46fc-6bd0-66bf7bc0108a Mon, 08 Apr 2024 06:17:29 +0200 These Apple AirPods Seem… Impossible? https://www.youtube.com/watch?v=ety0tL9RIRM Dave Lee urn:uuid:44c550b2-1c1b-8ef9-74d5-8e6a5b158b1d Fri, 05 Apr 2024 20:02:06 +0200 If You’re Tired of MacBooks Winning… https://www.youtube.com/watch?v=uWH2rHYNj3c Dave Lee urn:uuid:a5a25563-34cf-d9c2-3a84-2cc79381f710 Tue, 26 Mar 2024 19:07:40 +0100 The M3 MacBook Air "Problems" https://www.youtube.com/watch?v=UFV6wukB_Rg Dave Lee urn:uuid:91e041b2-4acb-09a8-9b7c-2e70dd35c4ab Thu, 07 Mar 2024 15:03:24 +0100 Apple Vision Pro Thoughts... https://www.youtube.com/watch?v=z1utOLXNCm8 Dave Lee urn:uuid:dca9ec2f-bb78-3fae-37a3-b2173491b544 Fri, 02 Feb 2024 03:54:21 +0100 The NEW Lenovo LEGION Laptops! https://www.youtube.com/watch?v=MfhRUoF33aQ Dave Lee urn:uuid:8781a63d-3d72-b4b8-24ce-4fb1c1266aa7 Tue, 30 Jan 2024 20:28:19 +0100 Intel's Secret Gaming Device - MSI Claw https://www.youtube.com/watch?v=TxoxXbc0Ros Dave Lee urn:uuid:1a92b9e8-853a-56b5-0466-955732081659 Wed, 10 Jan 2024 16:23:26 +0100 The NEW Asus ROG Zephyrus G16 and G14 https://www.youtube.com/watch?v=Qr0Xvw9cjCU Dave Lee urn:uuid:e49d8d86-dbd0-ee3e-b0fc-ae1f342060ab Wed, 10 Jan 2024 09:01:40 +0100 This Double Screen Laptop is SO AWESOME https://www.youtube.com/watch?v=K6Cr73w8CJE Dave Lee urn:uuid:c44f8a34-2310-62a2-185a-78ec6ac31488 Wed, 10 Jan 2024 07:12:59 +0100 How Is This Powerful Laptop So Quiet?! https://www.youtube.com/watch?v=Kk65BbRnzUc Dave Lee urn:uuid:0d3928ac-20c8-406e-3a86-8a9d51a8f173 Wed, 10 Jan 2024 07:02:02 +0100 DELL XPS 14 + XPS 16 - SUPER CLEAN!! https://www.youtube.com/watch?v=KIaBGBuyOaU Dave Lee urn:uuid:41b3b7b6-1a76-4599-2736-095ea5978533 Fri, 05 Jan 2024 06:43:39 +0100 The Biggest Moment For Laptops Since Apple’s M1 https://www.youtube.com/watch?v=WH-qtuVRS2c Dave Lee urn:uuid:9bd80bdf-69b9-e3f7-a243-330d8fb90a8b Thu, 14 Dec 2023 16:24:41 +0100 My Favorite of Tech - 2023 (ALL WHITE) https://www.youtube.com/watch?v=NVvaJ9aRlSs Dave Lee urn:uuid:4973e39d-7756-aa6a-0fdc-71db2a60d61d Sat, 02 Dec 2023 18:34:09 +0100 Nvidia Laptops Have Changed SO MUCH. https://www.youtube.com/watch?v=Bf3yJs5Ttrs Dave Lee urn:uuid:9b178a40-7056-6bb1-db57-7a75be900ca7 Sat, 18 Nov 2023 21:25:18 +0100 Steam Deck OLED Review - OMG https://www.youtube.com/watch?v=7FKJODmcdiM Dave Lee urn:uuid:6431dfb7-4ea7-8c1e-1205-b17778455a2f Thu, 09 Nov 2023 20:07:30 +0100 2022 GMC Hummer EV Pickup Review: One-Trick Pony - CNET https://www.cnet.com/roadshow/reviews/2022-gmc-hummer-ev-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:8609c4f6-e935-d83b-9fae-4023c94db937 Mon, 02 Jan 2023 11:00:01 +0100 After the allure of the Hummer's physics-defying acceleration wears off, there isn't a whole lot left to love. Amazon Fire TV Stick Lite Review: Capable Streamer, Cheap Price - CNET https://www.cnet.com/reviews/amazon-fire-tv-stick-lite-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:4fb1c051-0c47-dd2f-33a3-8036aaa8132e Mon, 19 Dec 2022 19:01:00 +0100 The first ultrabudget streamer with a voice remote talks circles around Roku. 2023 Land Rover Range Rover Review: Running Out of Room for Improvement - CNET https://www.cnet.com/roadshow/reviews/2023-land-rover-range-rover-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:7267ef0d-5125-d821-314b-df9fc428e094 Wed, 14 Dec 2022 11:00:01 +0100 The latest generation of the ubiquitous luxury SUV is damn near perfect. Roku Streambar Review: Instant Sound and 4K Streaming Upgrade - CNET https://www.cnet.com/reviews/roku-streambar-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:a8c0987f-6bc3-4039-4746-73e55f489534 Sun, 04 Dec 2022 12:00:00 +0100 Editor's Choice: This tiny bar adds great 4K HDR streaming, and solid sound, to any TV. Anker Nebula Mars II Pro Review: Petite Portable Projector Performs Proficiently - CNET https://www.cnet.com/reviews/anker-nebula-mars-ii-pro-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:53e61b23-ccaa-4c55-174a-ad9e8a383585 Thu, 01 Dec 2022 16:31:00 +0100 Editor's Choice: This tiny, battery-powered entertainment machine does a lot of things right. BenQ HT2050A Review: Great (Big) Picture for the Money - CNET https://www.cnet.com/reviews/benq-cinehome-ht2050a-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:3c6009af-7dfa-b1be-427c-a88167de8530 Thu, 01 Dec 2022 01:00:00 +0100 Editor's Choice: Excellent contrast, accurate color and solid features make it our favorite sub-$1,000 projector for 2020. Epson Home Cinema 5050UB: Big, Bold and Beautiful - CNET https://www.cnet.com/reviews/epson-home-cinema-5050ub-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:80b7eb01-a8e3-a7ca-a2f5-73217e0c984a Wed, 30 Nov 2022 19:21:00 +0100 Editor's Choice: A higher-end projector worthy of the "home cinema" moniker. 2023 BMW iX M60 Review: Electric Excess, Not Necessarily the Best - CNET https://www.cnet.com/roadshow/reviews/2023-bmw-ix-m60-sports-activity-vehicle-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:2f55dd67-8ac1-434f-7f62-905513cd29b8 Thu, 24 Nov 2022 12:00:01 +0100 The more powerful spec of BMW's iX electric SUV is certainly quicker than the base model, but that extra oomph comes at too high a cost. LG C2 OLED TV Review: Best High-End TV for the Money - CNET https://www.cnet.com/reviews/lg-oled-c2-series-2022-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:c19f6924-689b-44b7-58d8-a5708b9ca874 Tue, 15 Nov 2022 16:53:00 +0100 The C2 sets the pace for 2022 with superb picture quality, numerous sizes and a track record of success. Blink Mini Review: A Low-Cost Camera With Pan-Tilt Mount Now Available - CNET https://www.cnet.com/reviews/blink-mini-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:a8a9bc35-c95b-27e5-661a-b600afbe832b Fri, 21 Oct 2022 22:13:00 +0200 Available in black or white, Amazon's Blink Mini sports many features for a reasonable price. 2023 BMW i4 M50 Review: Treat Yo' Self - CNET https://www.cnet.com/roadshow/reviews/2023-bmw-i4-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:732c21ea-1aad-2865-342f-d1abb45a2fad Fri, 14 Oct 2022 21:33:00 +0200 You don't need to pay more for dual-motor i4 M50 to have a good time, but it's hard to argue with more power and fun. 2022 Toyota Tundra TRD Pro Review: Fierce Looks, Gentle Demeanor - CNET https://www.cnet.com/roadshow/reviews/2022-toyota-tundra-4wd-trd-pro-hybrid-crewmax-5-5-bed-3-5l-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:e433638b-e33c-172d-fa95-090def36ff5c Tue, 11 Oct 2022 11:00:01 +0200 Toyota's off-road-ready pickup is mighty fine in daily driving, too. 2023 Cadillac XT6 Review: Super Cruising Into the Spotlight - CNET https://www.cnet.com/roadshow/reviews/2023-cadillac-xt6-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:641bb005-9cf3-723b-50ba-82c16c7227c0 Thu, 22 Sep 2022 11:00:00 +0200 The addition of Caddy's hands-free highway driving assistant makes the XT6 one of the most interesting luxury SUVs on the road -- but there's a catch. 2022 Chevy Silverado Trail Boss Review: Diesel Brawn Meets Google Brains - CNET https://www.cnet.com/roadshow/reviews/2022-chevrolet-silverado-1500-4wd-crew-cab-157-lt-trail-boss-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:ea469406-dd59-aa25-e28f-8c6ffc00af03 Thu, 15 Sep 2022 11:00:01 +0200 This rough-and-ready pickup is home to Chevy's new Android-based, Google Assistant-powered dashboard tech. 2022 Ford Bronco Raptor Review: The Unstoppable Force - CNET https://www.cnet.com/roadshow/reviews/2022-ford-bronco-raptor-4-door-advanced-4x4-review/#ftag=CADe9e329a CNET Reviews - Most Recent Reviews urn:uuid:69333422-c886-8923-c63a-d63bb7bdd5fd Tue, 06 Sep 2022 11:00:00 +0200 Ford's most powerful, most capable Bronco is an absolute blast to drive anywhere.