570

A new tool lets artists add invisible changes to the pixels in their art before they upload it online so that if it’s scraped into an AI training set, it can cause the resulting model to break in chaotic and unpredictable ways.

The tool, called Nightshade, is intended as a way to fight back against AI companies that use artists’ work to train their models without the creator’s permission.
[...]
Zhao’s team also developed Glaze, a tool that allows artists to “mask” their own personal style to prevent it from being scraped by AI companies. It works in a similar way to Nightshade: by changing the pixels of images in subtle ways that are invisible to the human eye but manipulate machine-learning models to interpret the image as something different from what it actually shows.

you are viewing a single comment's thread
view the rest of the comments
[-] AnonTwo@kbin.social -1 points 1 year ago

Obviously this is using some bug and/or weakness in the existing training process, so couldn’t they just patch the mechanism being exploited?

I'd assume the issue is that if someone tried to patch it out, it could legally be shown they were disregarding people's copyright.

[-] FaceDeer@kbin.social 12 points 1 year ago

It isn't against copyright to train models on published art.

[-] AnonTwo@kbin.social 2 points 1 year ago

The general argument legally is that the AI has no exact memory of the copyrighted material.

But if that's the case, then these pixels shouldn't need be patched. Because it wouldn't remember the material that spawned them.

Is just the argument I assume would be used.

[-] Maven@lemmy.sdf.org 9 points 1 year ago

It's like training an artist who's never seen a banana or a fire hydrant, by passing them pictures of fire hydrants labelled "this is a banana". When you ask for a banana, you'll get a fire hydrant. Correcting that mistake doesn't mean "undoing pixels", it means teaching the AI what bananas and fire hydrants are.

[-] FaceDeer@kbin.social 4 points 1 year ago

Well, I guess we'll see how that argument plays in court. I don't see how it follows, myself.

[-] KeenFlame@feddit.nu 1 points 1 year ago

What is "patching pixels" and who would do it?

[-] AnonTwo@kbin.social 1 points 1 year ago

Is that not answered in the original article?

[-] Jagger2097@lemmy.world 0 points 1 year ago
[-] FaceDeer@kbin.social 8 points 1 year ago

In order to violate copyright you need to copy the copyrighted material. Training an AI model doesn't do that.

this post was submitted on 23 Oct 2023
570 points (86.4% liked)

Technology

60090 readers
3085 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 2 years ago
MODERATORS