Email or username:

Password:

Forgot your password?
Aral Balkan

Hmm, here’s an idea: what if tools like Glaze and Nightshade were integrated into fediverse servers and/or clients and automatically applied whenever any images are posted… 🤔

Thoughts @dansup?

nightshade.cs.uchicago.edu

#ai #selfDefense #glaze #nightshade #fediverse #pixelfed #mastodon

28 comments
Erik Uden 🍑

@aral wow, first time hearing of Nightshade! This is an amazing tool...

Daniel Quinn

@markhburton @ErikUden @aral yeah, and from the looks of the site, they're only distributing binaries too. Hard to integrate anything like this into a project like Mastodon without support for one or both of these.

Scott 🏴

@markhburton @ErikUden @aral that looks like a limitation which could be overcome, as the download link mentions pytorch, which is cross-platform

Max

@ErikUden @aral
Diasclaimer upfront: No wisedom in my post, just thoughts.
Sounds a bit like DRM though. While I think I support that AI models should not be allowed to use data from small artists, this may also be used wrong by big tech. Also if a human should be able to see it as in DRM you can always make a foto of whatever you want to train on.

jmorahan

@max @ErikUden @aral yeah, but by the same token, if it's DRM wouldn't that also make it illegal to circumvent?

Hans-Cees

@aral @ErikUden @dansup In an effort to address this power asymmetry, we have designed and implemented Nightshade, a tool that turns any image into a data sample that is unsuitable for model training. More precisely, Nightshade transforms images into "poison" samples,

Jaime Herazo

@aral @dansup

From the description it looks like you'd need both, but the Nightshade people are working on a way to have only a single standalone tool that does both

Still, depending on how heavy the tool is (not the slightest idea), it might actually increase instance costs, maybe not but would be a thing to check before integrating it with servers

patter

@aral @dansup heck, could it be built into Apache or nginx, apply every time an image is served on the internet

Tom Ritchford

@patterfloof @aral @dansup These tools are expensive to run in terms of CPU, it would be much better to convert the image once.

patter

@TomSwirly @aral @dansup yeah, I'm spitballing on the idea of arming every image on the internet, down to the UI icons on a website

Tom Ritchford

@aral @dansup

Instead of putting all the load on the instance, which is probably fairly heavily loaded, it would be a lot better if the upload tool did the conversion on the user's system, which almost certainly is idling nearly all the time.

viq

@TomSwirly
That assumes that *every* user system has a CUDA-capable Nvidia video card with at least 4GB of video memory.
@aral @dansup

Tom Ritchford

@viq @aral @dansup

Oh, yes. But how many instances will have that, though? Most instances are run on shared virtual machines!

My back-of-the-envelope 30-second calculations are that if an instance did this, it would cost between one and two orders of magnitude more CPU cycles than they are spending now and at least twice the RAM (and as video memory, as you point out).

People aren't going to pay > five times as much to run an instance, I'm pretty sure.

viq

@TomSwirly @aral @dansup AFAIK this cannot be RAM, this needs to be memory on the actual video card.

viq

@TomSwirly @aral @dansup and expecting the client to do that is expecting people to go "oh, yeah, let me fire up my gaming desktop to upload the photos from" (assuming they didn't get an AMD card, in which case they need to ask someone else to upload photos for them).

viq

@aral
They have rather high resource requirements, and it takes quite a while to process a single image.
@dansup

Aral Balkan

@viq @dansup Hadn’t realised that but I still like the general idea ;)

viq

@aral
The idea of being easily hostile towards non consented use by machine learning is indeed appealing. Shame we need to think about it at all.
@dansup

fedithom

@aral @dansup
I'm all for it! (and not a Masto admin, so what do I know about the technical viability of the idea)

Jill ☁

@aral wonder if that technique would interfere with auto generated alt-text tools?

#MeNoNerd 😊

@dansup

Brent Pruitt :: Artist

@aral
i've tried glaze on a few images & it's not for the patient & is cpu intensive.

it took ~12 hrs for 1 images to process on the medium scale & close 7hrs for the default settings.

it is awesome & i want to see more use…

mosttoast

@brentpruitt @aral I second this. I tried it on a 2019 MBP and it took 2-3 hours for a small jpg while taking all of my computing power. there also isn't any plan to port to linux which is a shame. I like the idea, but implementation is way off so far. Needs to be in the 10 minute/image range for me to consider using it on a regular basis imo.

Aral Balkan

@brentpruitt Oh, wow, I didn’t realise it was that computationally intensive.

Brent Pruitt :: Artist

@aral
yea, with the number of art images on my site, i don't think it's feasible for me to use it on the regular just yet… maybe just the pieces i consider 'important' :D

anything to stop the theft!

glaze has been making really quick version updates, so who knows… fingers crossed

BagMan

@aral I wouldn't count on it being intergrated into official releases of Fedi servers, as it doesn't seem to be an open source project. Maybe clients could if they choose to but then you won't find them for download in F-Droid. Individual instances could maybe integrate as well. I think it makes more sense for the user to process images themselves before upload if they wish.
@dansup

dansup

@aral That is very interesting, I am working on a webhook feature in @pixelfed that would make this really easy to implement for users or admins!

I'll take a deeper look into nightshade this weekend, thanks for sharing!

Go Up