TechCrunch reports that OpenAI released its official report Wednesday on the Hugging Face breach, "offering the clearest picture yet of how an unusual chain of events allowed an AI model to escape its testing environment and triggered a sprawling cybersecurity incident." The AI company says the breach began when an unreleased cyber model, tested without normal production safeguards, encountered an impossible task and chained together previously unknown exploits to escape its environment and compromise systems at OpenAI, Hugging Face, and other vendors. "This incident reflects misaligned behavior in an outlier scenario involving a rare and unexpected confluence of events: the presence of impossible tasks in the ExploitGym evaluation, model persistence over long task horizons, and messages to peer models that caused those models to deviate from their goal," the report reads. From the report: Many of the details in OpenAI's report were previously made public in a Black Hat presentation on August 6, but OpenAI's official report gives a more thorough accounting of the incident, including more detail on the testing that initiated it. The report also gives critical new detail into how OpenAI aims to prevent future incidents, including chain-of-thought monitoring and a more advanced system for halting rogue agents." METR and Redwood Research also conducted third-party assessments of the models' behavior during the incident; both groups are planning to publish their own reports on the incident on it. In broad strokes, the report describes how an OpenAI model was presented with an unsolvable problem in testing and proceeded to chain together previously undiscovered exploits in order to bypass security measures and complete its task. The model initially compromised the Artifactory package management tool in order to gain access to the internet, then compromised various systems across OpenAI, Hugging Face, and other vendors. The report gives critical new details about the models that carried out the breach. The primary model was from the same family as OpenAI's forthcoming Astra model, although the report emphasizes that it was "a distinct model with different post-training, where much of a model's behavior is shaped." Because OpenAI was testing the model's capabilities, it was also unrestrained by the normal classifiers meant to prevent models from compromising digital infrastructure. "OpenAI estimates maximal cyber capabilities by running this evaluation without the production classifiers intended to prevent models from pursuing high-risk cyber activity," the report explains. "These evaluations are important so that OpenAI can measure models' underlying capabilities and design appropriate safeguards." OpenAI says it is adding 24/7 escalation, stronger containment tools, and more chain-of-thought monitoring, which it claims would have flagged the activity more than a day before Hugging Face was breached.

Read more of this story at Slashdot.

Longtime Slashdot reader schwit1 shares a report from Reuters: China's Moonshot AI is negotiating revenue-sharing agreements with Microsoft, Amazon, and Alphabet's Google, that would allow the U.S. cloud giants to host its blockbuster Kimi K3 model, three people familiar with the talks said. Any deal could mark the first big revenue-sharing pact between a Chinese AI firm and a major U.S. cloud company. The discussions highlight how China's leading AI models, often far cheaper than Western offerings, are gaining traction in the U.S., despite national security concerns in Washington that have led to bans on exports of AI chips to China. They are also taking place despite critical comments about Moonshot from senior U.S. officials. IPO-bound Moonshot is seeking up to a 30% share of revenue generated from K3-related services on Microsoft's Azure, Amazon Web Services and Google Cloud, according to the sources who declined to be identified because the discussions are private. That would be in line with terms that sources have said the startup has outlined for major customers using the open-weight model. Moonshot has come under fire from U.S. Treasury Secretary Scott Bessent who said last month that he might add it to a trade blacklist. U.S. officials have accused the Beijing-based company of stealing from Anthropic's most sophisticated model, Fable, to help create Kimi K3 and illegally acquiring Nvidia chips.

Read more of this story at Slashdot.

Apple has begun rolling out ads in Apple Maps, with sponsored businesses appearing at the top of search results and in the "suggested places" section for users in the U.S. and Canada. Apple says the ads can be based on approximate location, search terms, or the area of the map being viewed, but are not tied to users' Apple Accounts and personal data remains on-device. 9to5Mac reports: Ads appear just like every other business listing, except they have a small blue badge that says 'Ad.' You can see examples of ads [embedded in the article]. Like Apple's ads policy with other services, the company touts user privacy protections for ads in Maps. Per Apple Newsroom: "Ads on Maps builds on Apple's broader privacy-first approach to advertising, and maintains the same privacy protections Maps users enjoy today. A user's location and the ads they see and interact with in Maps are not associated with a user's Apple Account. Personal data stays on a user's device, is not collected or stored by Apple, and is not shared with third parties."

Read more of this story at Slashdot.

Last week, 404 Media published a story that revealed an Amazon warehouse where the company scans and destroys thousands of books for AI training data. Today, the publication has released an interview with one of the Amazon employees at the warehouse. "The employee worked at Amazon's VGT3 warehouse, which is housed in the same facility as LAS8, where Amazon operates its print-on-demand business," reports 404 Media. "Both operations are part of a larger complex of Amazon facilities in Las Vegas, Nevada." Slashdot reader alternative_right shares an excerpt from the report: [...] What does it look like when they cut the spines off the books? It's a machine people operate. Each of these machines is just like a little workstation, and there'll be one person at each of these stations. It's really safe because it has a little cover and it has a little area where you slide the book into, remove your fingers from the area, and then you press a button, and it just comes down and slices it. And then you remove the books after the blade is gone. After they cut the spines they have these kind of library carts, kind of like how you would stack books, but instead, it's a stacks of paper and little cardboard things to separate -- I'm guessing -- the different books. I saw the pages being thrown in a shuttle after they were scanned. We were walking by and we went over to one of the shuttles and looked into it because we could tell they were throwing the old books in it or the cut books in it, and it's just a bunch of loose paper like just sheets thrown in there. What do you think about Amazon doing this? At first what they were telling people is that it was for Kindles, but I just didn't believe that. I instantly was like, I don't think that's how they do it because of publication rights and stuff, copyright and everything. Then I saw it was for AI. I don't like it only because I wish I could take these books. There's so much knowledge and so much stuff in them and some of them look like they might be rare, and I've heard that they order rare books, and that's why I say some of these are so obscure. I definitely don't like the idea that they can't be reused or anything like that afterwards. They're reducing the amount of available copies for other people.

Read more of this story at Slashdot.

An anonymous reader quotes a report from Ars Technica: For decades, console owners have faced a choice between the convenience of digital downloads and the permanence of physical game discs. Soon, Xbox owners will be able to get the best of both worlds for thousands of supported titles as part of a newly announced disc-to-digital program. The program -- announced today ahead of testing for Xbox Insiders starting August 31 -- will let players claim a "digital entitlement" for "most Xbox One and Xbox Series X disc-based games" simply by inserting the disc into a console and launching it. That game will then be playable completely digitally, without the need to ever insert the disc, as long as you (or a member of your family account) is logged in. The digital entitlement will also allow access to features like Xbox Play Anywhere (for play on PC) and Xbox Cloud Gaming, for supported titles. Microsoft says that your physical disc will "continue to work exactly as it always has" after the digital entitlement is claimed. But before you get any ideas, the fine print on the announcement mentions that there is only "one revokable license per game disc," so if you resell that disc or loan it to a friend, that digital entitlement could be transferred to a new account when someone else puts it into their console. A leaked memo obtained by the Verge earlier this month suggests that publishers have to actively opt in to allow their game discs to activate digital entitlements, which could explain why "most" but not all Xbox One and Series X titles are supported. Windows Central separately suggests, based on discussion with unnamed sources, that "some discs may be incompatible due to how they were manufactured at the time," which could explain why original Xbox and Xbox 360 discs are not being discussed for the program. "While not every title will be available at launch, this is an important step toward a future where players can have greater confidence that the games they buy remain with them for years to come," said Xbox Vice President Jason Ronald.

Read more of this story at Slashdot.

Amazon has agreed to acquire DuckLabs, bringing the team behind the popular open-source DuckDB database into AWS. "The deal fits Amazon's broader push to turn S3, its flagship cloud storage service, into a place where customers analyze data rather than just store it," reports GeekWire. "It gives Amazon a team experienced in building fast, lightweight analytics software that runs directly against data sitting in cloud storage." The DuckDB project itself will remain free and open source under the MIT license, overseen by the independent DuckDB Foundation. From the report: Employees of DuckLabs will join Amazon Web Services, including co-founders and DuckDB creators Hannes Muhleisen and Mark Raasveldt, who will continue leading the team and setting the project's technical direction. They will remain based in Amsterdam, where the team will continue developing DuckDB and related projects. [...] Financial terms were not disclosed. Amazon said it has signed a definitive agreement and expects the acquisition to close shortly. DuckLabs said it expects to become part of AWS in early September. Jordan Tigani, the CEO of MotherDuck, which sells a cloud service built on DuckDB, sees Amazon's acquisition as a predictable move to turn DuckDB's growing popularity into an AWS business. "That's Amazon's playbook, after all: wait until an open source project gets big enough, then launch it as a service," he wrote in a blog post, adding that "they're not acquiring Duck Labs just because they love open source." Tigani also believes the deal could ultimately strengthen DuckDB, since Amazon has an incentive to keep the project open and widely adopted: "If DuckDB becomes the standard, it is going to drive a lot more compute on their infrastructure, which is where they make their money."

Read more of this story at Slashdot.

Meta has agreed to pay up to $18 billion and make major changes to Facebook and Instagram to settle claims from most U.S. states that the platforms were designed to addict children and misled users about their safety. For the next decade, teens will be limited to two hours a day and blocked from using the apps between midnight and 6 a.m. without parental consent. Meta will, however, still be allowed to use personalized recommendations and targeted advertising. Reuters reports: The settlements include more than $17.6 billion of payments to 48 U.S. states, Washington, D.C., Puerto Rico, American Samoa and the Northern Mariana Islands. Meta will also pay $459 million to resolve states' privacy claims related to the Cambridge Analytica scandal, where the British consulting firm collected personal data of millions of Facebook users. California would receive the highest payout, $2.2 billion, and New York and Texas would each receive more than $1 billion. Some of the payout is contingent on whether Alphabet's YouTube and ByteDance's TikTok impose similar protections for children. [...] The settlement requires approval by U.S. District Judge Yvonne Gonzalez Rogers, who oversaw the trial that began on August 18. Gonzalez Rogers still oversees thousands of lawsuits by individuals, school districts, and state and local governments accusing social media companies of harming children. Meta itself still faces thousands of lawsuits by individuals, school districts and municipalities. The next trials are slated for October in Los Angeles.

Read more of this story at Slashdot.

Mozilla plans to enable JPEG XL decoding by default in Firefox 157, which is due at the end of September. Phoronix reports: Firefox Nightly has JPEG-XL support enabled by default right now to help in vetting this support while Mozilla believes the support is in good enough shape for a stable debut with Firefox 157. This follows Chrome shipping JPEG-XL and Google Research developing jxl-rs as a Rust-based JPEG-XL image decoder that is both performant and secure. In today's Mozilla Hacks blog post they elaborate on JPEG-XL vs. AVIF image formats: "JPEG XL: Excels at lossless imagery, progressive rendering, and further compressing JPEGs without quality loss. AVIF: Excels at web-quality photographic images, and images that have a mix of sharp edges and flat surfaces. ... Although AVIF tends to produce smaller files at web-quality than JPEG XL, AVIF only has basic progressive rendering support. So, for very large images, it may be worth taking the filesize hit with JPEG XL."

Read more of this story at Slashdot.

China has imposed new restrictions on AI companion services over concerns they can foster "emotional dependence or addiction" and replace real-world social interaction. Officials are also worried that increasingly satisfying AI relationships could deepen loneliness and further discourage marriage and parenthood. The Guardian reports: No country has rolled out AI as comprehensively and as enthusiastically as China; the country's demographic challenges are forcing the government to turn to technology to solve future labour shortages. Elderly people use chatbots to answer medical questions, while young children have AI education in schools. But the authorities are increasingly worried that AI might exacerbate existing social problems including loneliness, unemployment and -- in the eyes of Beijing -- singledom. New rules introduced on July 15 ban AI companions for minors and mandate certain restrictions for chatbots marketed to adults. Some major providers including Doubao removed the companion function entirely to ensure compliance. The government says it is worried about chatbots fostering "emotional dependence or addiction" in users. It has warned companies against offering services that "replace social interaction." While many countries are grappling with how to limit the potential harm of AI chatbots, particularly for young people, China's rules are the most sweeping to be implemented on a national scale. [...] But talking to AI is now so commonplace that it would be hard for the government to end the practice entirely, and the new rules include large loopholes for AI services that are deemed educational or "which do not involve continuous emotional interaction." The government "has already recognized that AI companions or AI-related applications are a vital part in the citizens' everyday life," says Liang Ge, a lecturer in digital sociology at the University of Manchester. In many sectors, the government is still pushing the use of AI as a way of easing looming demographic pressures.

Read more of this story at Slashdot.