Meet Nightshade, the new tool allowing artists to ‘poison’ AI models with corrupted training data

Salamendacious@lemmy.world to News@lemmy.world – 510 points –
Meet Nightshade, the new tool allowing artists to ‘poison’ AI models with corrupted training data
venturebeat.com
118

You are viewing a single comment

Being someone with a foot in both worlds gives me a slightly robust viewpoint on this topic, so I try to chime in whenever I see this argument pop up. For reference, I have an MA in Visual Effects and a BS in Applied Mathematics, and work closely with artists and technologists in my job. I say this to support my credibility.

  1. You are absolutely correct in who we should be mad at. Not the AI developers, many of whom are just trying to explore what is possible and make something cool, but the megacorps who are profiteering from the invention. All of the companies that are pushing AI as another SaaS and the ones who are trying to use it to replace artists instead of augment them. 1a. The other two specific groups we should be getting the torches and pitchforks for are the politicians who put so much legislation through that they circumvent our legal right to negotiate contracts we have to sign (EULAs in this case) and the companies and individuals who take advantage of our impotence to negotiate by placing abusive and abhorrent IP rights clauses in the contracts. To be 100% clear, when Deviant Art was scraped, nothing was stolen from the artists. They had all signed away the rights to their artwork when they uploaded it. The material was stolen from or provided by DA. They owned the rights, they owned the art, they were the ones who were ripped off.
  2. "Ill-gotten gains" is a little strong of a terminology. At worst, it was dubiously obtained. The training of an AI is not that dissimilar to an artist looking at art they like and trying to recreate it to learn from the other artist, then attempting to make original pieces with what they learned. The only difference is scale. If you ask a practiced artist to recreate Water Lilies, if they have studied it and practiced Monet's style, they would be able to recreate it with varying degrees of success. AI training is entirely destructive to the input material, nothing of the actual original survives, just an abstracted mathematical representation.
  3. You are so close to right on what the rights of artists should be. It should definitely be opt-in, not out. When posting anything online, the displaying company should only be provided a license to display the material, not ownership or non/exclusive transfer of any rights. Any and all uses of submitted materials should need to be expressly and explicitly requested from the content owner without exception. The fact that Disney can sue an elementary school for self-writing and self-producing a Frozen musical for the kids but I cannot tell Facebook that they cannot use the artwork I post to a group in their advertising is asinine. If they want to use my art, they should be using their wonderful chat system to send me a message and asking me to sign a consent form to license the art.

All in all, I advise to avoid blaming the AI engineers (most of whom are altruistic in their motives) and the users (most of whom just want to have fun and play) and focus on the politicians and profiteers. They are the real villains in the story, and also the ones who seem to manage to stay under the radar.

With the opt-out bit I was trying to get at consent, I should've worded that better.

I don't know what exact argument to use, but a machine using art to "learn" feels very different from a human doing the same.

This comment deserved to be separated from the other discussion. I am studying some LLM stuff as a side project for myself and the author of the book I am reading was discussing the history of AI training a bit in the chapter I was reading. I personally did not realize that LLM models dated back to the very early 200X years. The whole "training on works of art" dates all the way back to the earliest days using non-licensed books and manuscripts in addition to emails, text messages, blog posts, news articles, etc. Scraping whatever content is needed to train an AI from the internet without really worrying about permission is very much so nothing new. It is just something that came to the forefront of the cultural zeitgeist with the release of SD and the clamor of attention it got.

I think the reason it was never really worried about is precisely how destructive the whole process is. The "Vectorization" step that is common to most if not all AI training algorithms fundamentally disassembles whatever the input is and applies statistical methods to make it something a computer can understand. How many times was each word used, what are the odds of two colors being next to each other, how many times did person A tap their foot? Once this is done, the original work is gone. There are no discernable features of the source material save for perhaps words that are unique to that, but most of the time those are filtered out, so even those are gone. That vector is what the AI is actually trained on, not the original work. All the sources are are chaos to derive statistics from. Nothing more, nothing less.

Does an author get to request consent before you read their book? Or is consent implied because they published it?

Consent is granted by your purchase/borrowing of the book, that's how that works.

If you acquired the text through unintended means I doubt the author would (generally) consent to your reading of it.

So if I have legal access to view it, I have consent to lend that capacity to someone else?

It is a humanist perspective. We feel uneasy about it because it is something that we thought was ours and maybe a couple of other animals.

In abstraction (boiling the idea down to the most basic form it can be stated), something that is not a human learned from our art to do it as well as we can. What the something is is borderline immaterial.

(being really careful not to strawman with this) If we select a description of something else that is doing the learning and see if it leaves an uneasy feeling. Maybe a bacterial colony was genetically engineered to have a sort of memory that allowed them to remember images that the colony had been on in the past and when exposed to a disorganized pigment environment, they would redistribute the pigment into a pattern similar to the images they had experienced previously. So scientists culture billions of bacteria and print off tens of thousands of images then expose the colony en mass to them. Now the colony can recreate many many art forms.

Is that the same, better, or worse than a computer? On one hand, the computer method gives access to everyone. There are profiteers, but there are also FOSS solutions that do not harvest data or transmit your personal info home. With the bacteria example, the spread may be smaller and slower, but you better believe that every major publisher and marketing firm would be lining up to purchase the Bactereo-5000 printer that could replace their entire art department the same as many are doing with Stable Diffusion.

Just as they did when they replaced sketch artists with photographers, and traditional artists with digital artists, pen and paper for Photoshop. We print advertising now, not paint it. Stable Diffusion won't kill Photoshop, I use both. Just like Photoshop didn't kill traditional art, and just like photography didn't kill sketch artistry. But for the purposes of mass production the practicality of producing higher quality products faster will never not be sought after because time is finite.

The art doesn't go away, but the tools available to the artist change.

Of course. Very few positions have ever outright been eliminated by new technology. They have been morphed and, over time, require a fundamentally different skill set. What is ubiquitous with new productivity-enhancing equipment being added to the job market is that there are fewer and fewer of those jobs available. Perfect "for instance", executive assistants. For decades nearly every middle manager and up at anywhere doing large amounts of business needed an executive assistant to manage calendars, screen communication, filter incoming mail, and gatekeep access to the manager. With the advent of email, the mail filtering role became less and less prevalent, and now with AI/3rd party answering services, Calendly, and several other tools, most of the classic roles that executive assistants filled are automated away, meaning that either single assistants are being used for serve several managers in the remaining duties, or only high-level executives get them. Has the executive assistant job been eliminated, no. Has the number of available positions been truncated by a non-trivial number, absolutely.

The same has happened with the VFX industry. Rotoscoping (the process of cutting actors from the backgrounds for compositing) used to be the primary entry point to the industry for people wanting a compositing career. Big VFX houses needed on the order of 30 or 40 of them at any given time. A few years back Adobe and others started getting automated algorithms down for the process and now only a handful of artists are needed to check shots and clean up problem shots, and usually the task falls to the compositors themselves rather than an entry-level employee. Roto jobs still exist, but are much less in demand and an entire entry-level rung to the industry's ladder has been made inaccessible to incoming artists.

The AI addition to the toolset for graphic artists, environment artists, and others is not going to eliminate the job, instead, it will make it so companies can get more done with fewer staff.

That's a capitalism problem. In a socialised system we'd all be getting paid UBI and able to contribute our free time to learning these skill sets and contributing to the development of related products out of sheer interest alone without needing to append the yoke of exploitation required to rustle up a profit for someone else so we can have crumbs to eat instead of recieving fair value for our work. Or since we cant magic society into social advancement... we can make use of these FOSS tools that utilise these systems to give the power to create back to the normal person who can now use these tools (as I do) to enhance their already existing workflows to improve their capacity to earn value from their own merit and ability without taking anything from those who have contributed. It's a shift in dynamic and people are naturally resistant to change, I don't hold such adamant perceptions of ownership of knowledge even if one can have ownership of a product.

Capitalist structures will always under every single circumstance try to maximise efficiency, maximise output, and minimise cost. Be that labour cost or materials cost or production cost. This is why Capitalism is unsustainable, the one directional flow of wealth and value from all of the technological contributions of everyone in humanity into the hands of the few. And don't even try to tell me "Oh but people need to get paid their fair share for their contributions" yes, yes they damn well do, but that can't happen under a corporation because for a profit margin to exist the worker must be exploited to create something of more value than they are offered in return, so expecting fairness in an unfair system is barking up the wrong tree and has no bearing on the value given back to the artist by FOSS tools that fools would fight against and burn to the ground only to the benefit of the very corporate slave owners who prevent their artistic capacity from being viable for income generation. Guess who can afford to pay the artists when the pool of data gets poisoned? Not the people, not the producers, not the individual artist. Nope. But the Corporation can, and when they have to they will. Fuck the rest of us. These people in the article are capitalist cyber terrorists, but fear of "AI" blinds the ignorant, and the masses will suffer for it, and their art will gain no more value because it has not gained any more practical merit, except to those willing to pay enough to exploit them some more, just to gatekeep their own perceived position in their perceived hierarchy of value.

I wholeheartedly agree. I don't use self-checkout lanes, I don't deal with AI customer support, and I don't tolerate corporations that view labor as an expense to eliminate. I'm not afraid of AI or automation, in fact, I do both as two of my favorite hobbies. Unfortunately, that gives me a very real and salient perspective on the future of this world and it does not look good for the base majority of us. There is basically not an I industry that won't be directly affected by this wave of technology. Essentially all of the "poor people jobs" are going to evaporate in the next 10 to 15 years. Amazon will be eliminating the staff as a whole from their distribution centers on the next 5 years, and that is something like half a million people out of the job. The trucking industry is moving ever faster towards fully autonomous vehicles for long-haul trucking. That's another ~2.2 million jobs according to the DoL. Toss in the call centers, fast food industry, and sectors of retail and you are talking about an easy 5M people out of work because jobs vanish. That is >1% of the US population, and that isn't even scratching the surface.

A UBI is literally the only way forward at this point. And I mean a true UBI which all individuals can actually live off of without supplemental income.

I live in Australia where we thankfully have better democratic voting systems and as a result lean far further into social benefit and developed social services, but we're already struggling with underemployment where efficiency is outstripping the demand for bodies. The one benefit we have is one of the best unemployment support systems in the world, but we still have issues where the capitalists that are exploiting us for all their profit don't want to use that money to pay for those social services that keep the society that supports them healthy, and I dare say they'll want to pay even less when they have less employees doing the same work. I agree that UBI needs to be implemented, and some of the Nordic countries have already successfully trialled both UBI and further reduced working hours for same pay with the 4 day work week and the 32 hour full time week. The only real issue is that the one entity that needs to be aware that these things exist and are beneficial is the social consciousness, and it's stupid, we don't spend enough on education even here to make the social consciousness cognizant enough to act. People like to think they are individual and I fear American individuality has been weaponised against the populace for so long that the tide can't turn without blood. The strikes are starting, the people are unionising, we'll see how far the people can push before the corporations kick back and make them bleed, then we'll see if the American social consciousness is resilient enough to fight back and start claiming significant workers rights or whether they'll reel back covering their bloody mouth with their shackled hands. I fear they will fight for more than they have but not for what they deserve.

We are definitely trying. Unfortunately, we have had a concerted effort for about the last 80 years to systematically disassemble the populace's capacity for cognition and critical thought. Couple that with obvious disinformation and a group who have mastered attacking people's fear, emotion, and blind patriotism to manipulate them into acting against their best interests.