BRILLIANT IDEA: let’s bring about the end of the internet by embedding locally-running LLMs into Web browsers!

I’m having {a, yet another} discussion about software regulation and how it’s an illiberal and misconceived approach to try regulating, export-controlling, or otherwise restricting access to expressive speech any kind of software, even if it is an ostensibly malicious tool, because the concept of dual use which applies to practically everything on the internet.

This led to a diversion on code and data being speech, and becoming increasingly human speech, which may lead in future to regulatory confusion…

…perhaps it should be difficult to constrain free-expression, even when that expression happens to be computer code which might be used for malicious intent. Code is clearly a form of speech even if it is not regarded as protected free expression in a variety of jurisdictions.

It’s going to get really interesting in the next decade or so, simply because LLMs and AIs interface with the world using natural language which is going to be undeniably “speech”, so we could end up with language which is ok to utter to a human being but would be regulated in some fashion if it is uttered to a computer.

I had a discussion similar to this on Bluesky earlier today: Imagine that somebody embeds a locally-running LLM/AI into a web browser, so that it can read web pages for you and summarise them for you, perhaps translates them for you, or provides some sort of assistive mechanism for visual impairment. Using that web browser you visit the Facebook group which includes “dating reviews” of various named individuals and how they performed as a “date”. Then you tell your web browser to:

"Click through the pages of this Facebook group for me; aggregate all of the names and the sentiment and opinions which relate to them, and correlate and reduce the names to remove duplicates. Produce a CSV of all names and map the associated sentiment for each name, normalised in the range 1 to 3."

Presto, you have star ratings of single men (or: women, nb, whatever) in New York; tell me that’s not going to terrify somebody?

Such terror means that somebody is going to try and regulate the functionality and basically attempt to enforce that “human beings have to do all of the hard work”, because it would be technically possible (though practically infeasible) to do this with pen and paper. That which would be legal for a human to be tasked with would be illegal for a computer to do.

If this does not sound relevant right now, consider that it is exactly the same problem as the popular “artificial intelligence will be used to create a tidal wave of misinformation that will overwhelm governments and newspapers” – (bogus) story of the moment, pushed by people who imagine that “scale changes everything, but a misinformation sweatshop staffed by minimum-wage workers does not require urgent legislation”.

Yet this is also why it is a bad idea to attempt to regulate the shape of code: because nobody in their right mind wants to prevent the development of assistive technologies.

Dual use is everywhere.

Comments

2 responses to “BRILLIANT IDEA: let’s bring about the end of the internet by embedding locally-running LLMs into Web browsers!”

  1. NaL

    You pose an interesting scenario. In general I agree with you. I think their definitions are vague; email is often a vector for being digitally intruded; ban email? Ironically I’d be glad to see email banned if it doesn’t get a major security update. ?

    My biggest “worry” at the moment is many people will end up using AI as a crutch, and I don’t mean people who actually need to use assistive tech. But more like what happened in the WALL-E movie, lots of people will become lazy and think less.

    I wish I knew more, so I scanned the Wikipedia page for LLMs and see it’s not something the average person will be training on their own, but perhaps people/orgs will buy various specifically trained models.

    In related news…

    I know you’re busy teaching the Laws of Physics to your child (as well you should! with humor!) so late at night, but perhaps you watched some of the U.S. Congressional hearing FBI Director Chris Wray & Experts Testify Before House Committee On The CCP About Cyberthreats

    I’ve not yet watched all 2 ½ hours.

    So far, one of the witnesses, Director of CISA has twice spoken about the need to “hold software makers liable” for making insecure software…as she sits next to the head of the FBI who is head of an organization which we know has pressured “software makers” to dumb-down security.

    Twisted irony.

    At first it seemed to me she really meant hardware makers, since most of the security problems so many of us are exposed to is vendors shipping products and not having any plan to update the software, or abandoning updates after xyz time. Or maybe they’re a camera company and they don’t want to spend money on writing software securing it. IoT stuff.

    But now I think it’s more cynical than that. I think it may be an attempt to scare people away from open source software in general. Scare people from wanting to contribute to it, and scare users away from using it, including government agencies and other govt. entities which could greatly benefit from it.

    Europe is ahead of the US in terms of seeing the benefits of open source use by govt. Last year’s FOSDEM had some presentations on it. I’ve also seen a video of someone from Microsoft testifying to some EU body and saying open source software is intrinsically less secure and her black box software is superior. I think Linus Torvald’s dad is in the same video. (Ok, tracked it down, it’s mostly as I recall it.)

    Then not too long ago EFF noted a proposal in the EU to legislate liability to, fundamentally, open source coders. EU’s Proposed Cyber Resilience Act Raises Concerns for Open Source and Cybersecurity

    Legislators are frantically trying to seize the computer market.

    1. NaL

      If you can’t beat them, just muddy the water. Microsoft “introduces” sudo. AND they open source it!
      https://learn.microsoft.com/en-us/windows/sudo/

      https://marc.info/?t=170742841100005&r=1&w=2

      Contrast that with what I wrote above. Here are the links which didn’t quite make it through.

      Microsoft testifying to some EU body, saying open source is intrinsically less secure

      FBI Director Chris Wray & Experts Testify Before House Committee On The CCP About Cyberthreats

      EU’s Proposed Cyber Resilience Act Raises Concerns for Open Source and Cybersecurity
      https://www.eff.org/deeplinks/2023/05/eus-proposed-cyber-resilience-act-raises-concerns-open-source-and-cybersecurity

Leave a Reply

Your email address will not be published. Required fields are marked *