Grounding-Aware Judge Reward Reinforcement Learning for Out-of-Domain Face Anti-Spoofing
arXiv cs.CVarXiv:2611.09047v1 Announce Type: new
Abstract: Face Anti-Spoofing (FAS) must distinguish genuine faces from presentation attacks. A unified Multimodal Large Language Model (MLLM) is an attractive solution: it detects physical attacks (print, replay, mask) in one model and produces interpretable forensic evidence via Chain-of-Thought (CoT). A central obstacle to post-training such a model with reinforcement learning is that FAS reasoning has no rule-verifiable ground truth: only the binary verdict is checkable, while the reasoning chain cannot be verified by any hand-crafted rule. Optimizing the verdict alone is therefore a sparse, hackable signal. The model can reach the correct answer through a shortcut such as a false-rejection bias, which does not generalize. We address this with a grounding-aware judge reward. A 32B vision-language judge scores each reasoning chain against the image on evidence anchoring, logical coherence, and domain knowledge, turning the image itself into the verification signal. The reward is applied in a Group Relative Policy Optimization (GRPO) stage after CoT supervised fine-tuning. It is the judge, rather than the RL objective, that supplies the process supervision a verdict-only reward cannot. Our study starts from a model that already performs well In-Domain (ID) after CoT-based supervised fine-tuning and asks how to improve its Out-of-Domain (OOD) generalization. We find that grounding-aware rewards are an effective means to that end. We validate the method on OOD generalization, where the reward reduces ACER on two physical benchmarks (LCC-FASD 0.288 to 0.273, MSU-MFSD 0.431 to 0.409) while preserving ID accuracy (CelebA-Spoof 0.033 to 0.035). Against ResNet-50/101 and CLIP-ViT-B/16 baselines, the MLLM dominates ID and matches or surpasses the strongest baseline OOD. To our knowledge this is the first use of LLM-as-judge process supervision for FAS.
NASA Announces It's Looking for New Astronauts
SlashdotSaturday NASA officials announced it's accepting applications for a new astronaut class, reports the Associated Press:
With only 32 active astronauts, the space agency needs more recruits as it looks to expand humanity's presence beyond low-Earth orbit as quickly as possible... "We have far more work than we have astronauts," Artemis III commander Randy Bresnik told The Associated Press on Saturday. Aspiring astronauts have between now and Dec. 3 to submit their applications... [They'll begin their training by early 2028]. By then "we're going to have people on the moon — so don't delay," Bresnik urged potential candidates.
Bresnik and his three crewmates will blast into orbit next summer to practice docking their capsule with a pair of lunar landers, one built by Elon Musk's SpaceX and the other by Jeff Bezos' Blue Origin. Their mission will stick close to Earth — no lunar flyby — and serve as a dress rehearsal for the following year's Artemis IV mission that will attempt to land two astronauts near the lunar south pole. The moon base will materialize as more rovers, robots, structures and power grids are launched.
The article notes NASA's last call for new astronauts was two years ago, and "More than 8,000 applied, with 10 making the final cut in September 2025."
Read more of this story at Slashdot.
Aaron Swartz Would've Been 40 Today. His 'Legacy Lives On' Says FSF
Slashdot"Aaron Swartz would have turned forty this year," writes FSF deputy director Sean O'Brien. "November 8 is Aaron Swartz Day, when we remember a pioneer of free software and information sharing whose contributions helped shape the modern internet."
The Internet Archive will host a hackathon Sunday in San Francisco celebrating Aaron's Swartz's life "and the projects he worked on, many of which are still going strong today," including SecureDrop, OpenLibrary, and Creative Commons. "We are also spreading the word about projects he inspired," including OnionPress and the EFF's Atlas of Surveillancedocumenting police tech use through open source research, now a collaborative effort with volunteers, the University of Nevada, Reno, and the Reynolds School of Journalism. The event is also supported by Free Law Project, and organizers are asking attendees to "bring a color print out of your favorite photos of Aaron for a huge collaborative collage."
From the Internet Archive's blog:
Aaron was also a co-founder of Creative Commons, where he worked with Lisa Rein developing the RSS-enhanced HTML code that sits behind Creative Commons licenses, much of which is still in use today. The "Quantifying the Commons" project was designed to help measure open-licensed and public-domain works worldwide, and is one of the projects participants can work on. Aaron loved Tor and created tools such as "Tor2web" (with Virgil Griffith) to help more people publish Tor-accessible websites. Onion Press is a Tor-based publishing system designed for decentralized, censorship-resistant publishing, and participants can work on the code base...
We also encourage you to have a hackathon in your own town using our materials — or materials of your own. Please let us know if you plan to do this (although it's not required!). If you do let us know, we can include you on our website and help you spread the word about your event. So far, there is an event in Portland sponsored by Portland Civic Lab where they will be screening The Internet's Own Boy and celebrating Aaron's life.
"EFF was proud to call Aaron a friend and ally," the digital rights organization posted this week. And the FSF's deputy director writes "It is particularly striking that some of the world's largest companies now rely on technology Swartz helped to develop."
One of Swartz's most important technical contributions was his collaboration with John Gruber on Markdown, the simple text formatting system introduced in 2004. Markdown allows users to create structured documents using ordinary text, without requiring proprietary software. More than twenty years later, Markdown has become one of the most popular formats for documentation and publishing, and is widely used in community websites such as forums and wikis. This is not a minor contribution. Companies developing LLMs use Markdown extensively in their products and development tools. OpenAI, for example, recommends Markdown for organizing instructions and communicating structure to its ChatGPT models... Swartz also developed web.py, a public domain framework for building Python applications, and contributed to RSS 1.0, a public internet standard for distributing news and other information between websites.
Swartz developed web.py while rewriting the software running Reddit after Reddit acquired Swartz's company Infogami.
Reddit recently licensed its content to AI companies, and the FSF's deputy director notes "the enormous scale of the alleged 'piracy' by giant technology corporations" while Aaron himself had "faced criminal prosecution for downloading academic research that he wanted to distribute with no monetary gain."
In 2011, federal prosecutors charged Swartz with computer fraud and related offenses after he downloaded millions of academic articles from the JSTOR collection through MIT's university network... Although he was not charged with copyright infringement, he faced aggressive federal prosecution and the possibility of decades in prison before he tragically died by suicide in January 2013, at just twenty-six years old...
Swartz helped build tools that made the internet more useful and accessible, and his contributions continue to shape a world he never lived to see. On Aaron Swartz Day, we should remember his achievements and the access-to-knowledge principles that guided them. The companies benefiting from his legacy should respect those same principles by giving users true freedom and control, rather than imposing more restrictions on us all.
Read more of this story at Slashdot.
Python's CVEs Triple. Anthropic Funds a New Security Developer
SlashdotIn the last year CVEs have increased 3x for Python and its package manager Pip, according to Python's security developer in residence Seth Larson. "And the amount of malware published and removed from the Python Package Index (PyPI) is up 60%." Securing Python's ecosystem is getting more complex, he writes, especially given "the evolving role of AI in both security risks and security response."
Their response includes bringing on a new Security Developer "to address the increasingly demanding scale of security response for the Python ecosystem."
Providing prompt security response services and innovating to prevent future threats... is more difficult now than ever before... [Security developer Brett Smith] will help us keep pace with critical ongoing work such as vulnerability remediation, providing vulnerability data as a CVE Numbering Authority, and removing malware from PyPI. He'll also give the team bandwidth for new projects such as scaling PyPI's autonomous quarantine program to reduce manual effort on malware remediation and streamlining processes for the PSRT to handle the new vulnerability report volume.
The role was made possible by an "ecosystem security" grant from Anthropic. And having the new security developer "will both build capacity for security work the PSF already does and enable new, proactive work," concludes Python's security developer in residence. (He discussed Python's security challenges in a June presentation with Python security engineer Mike Fiedler> .)
In June, Curl's Daniel Strenberg reported Curl's CVEs have also tripled.
Read more of this story at Slashdot.
Norwegians Release FOSS GNOME Software for Music Recording, Internet Radio, and Cameras
Slashdotole (Slashdot reader #19,909) writes in about his free, Norwegian open-source music recording studio for GNOME called GarageJam, which he says allows musicians to compose, record, and share original music seamlessly on the Internet.
The latest release, GarageJam 8.0.1, is available in C and Python. It records audio immediately to Ogg Vorbis (.ogg) files in the current working directory and lets you edit metadata in .gjxml XML files from a GTK/GNOME wizard — all built on the Gingerblue Recording Studio API.
Ole shares links to its IETF GarageJam XML draft and GitHub repositories, and there's also GarageJam Studio, "a commercial music and audio recording app for the World Wide Web written by Aamot Innovation from Norway.".
ole is also spreading the word about GNOME Media, which "puts internet radio and your photographs on one OpenStreetMap... built from GNOME Radio 85.0.1."
Click a station on the map to listen. Cities with several stations show a count and a menu.
Open a folder of pictures or import from a camera. Photos with a GPS position in their EXIF data appear on the map. Double-click a thumbnail to open it. The search box filters the station list and the map together.
ole also announces:
GPhoto 3.0.1. ("After 25 years, libgphoto2 2.5.34 now supports more than 2,500 camera models, and GPhoto 3.0.1 is built on it.")
Skolelinux 13.6.0. Built on Debian 13 âoetrixieâ, Skolelinux is "a complete, ready-to-use Free Software operating system for schools, classrooms and home computers... an office suite, web browser, educational programs and network services for an entire school, all set up out of the box."
Read more of this story at Slashdot.
Do Data Centers Have a Smaller Effect on Electricity Prices Than We Think?
Slashdot"According to a new study by researchers at Harvard University and the University of Pennsylvania, data centers are probably having only a small effect on residential electricity prices," reports the Washington Post.
"The researchers calculated that these operations were responsible for just 4% of the utility rate increases over the last five years..."
There are certainly some areas — like in Pennsylvania, Virginia, Ohio and other states covered by grid operator PJM — where data centers have skyrocketed demand, pushing some costs onto residential customers. But multiple studies by different researchers and organizations have failed to find a strong connection between data centers and the overall trajectory of U.S. electricity prices in recent years. Another analysis earlier this year by researchers at the Massachusetts Institute of Technology found that, between 2010 and 2024, data centers increased average electricity prices for residential customers by just 2.1%. Last year, research from the Brattle Group and Lawrence Berkeley National Laboratory found that data centers were actually decreasing costs in certain regions. And another study by the Electric Power Research Institute found that a doubling of data center capacity between 2019 and 2024 resulted in a 4 percent drop in home electricity prices...
The new Harvard and Penn study found a slightly higher impact on industrial electricity prices — the price paid by manufacturers and large facilities. For those customers, data centers were responsible for 15% of the price increase between 2020 and 2025. But for ordinary Americans... the changes simply were not substantial [according to Wharton School professor Serguei Netessine, one of the study's authors]. "So far we have no evidence that data centers increase prices all that much," Netessine said. Instead, he said, prices are rising due to more quotidian factors: rising gas prices, an aging electricity grid, and wildfires and hurricanes requiring improvements to the grid and recovery after disaster...
If the number of data centers continue to boom, experts say, residential prices could be affected more down the line. Data center electricity demand is expected to increase steeply over the next few years, requiring new power generation — wind, solar or natural gas — to be put onto the grid. And residents have issues with data centers that go beyond the price of electricity. The new developments have been singled out for loud noise, polluting power generation, and for disturbing residential neighborhoods and natural landscapes. According to the Pew Research Center, more than half of Americans say that data centers are mostly bad for the environment. Others feel that the AI race — which could ultimately leave many Americans out of work — is being forced upon them.
"I think generally what we're seeing is a broader range of reasons the public has opposed data centers," [said Ryan Hledik, principal at the Brattle Group]. "Concern about AI leading to loss of jobs — all of that is getting packaged together."
Read more of this story at Slashdot.
Claude Code's 'Don't Ask Again' File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
SlashdotBe careful with the file .claude/settings.local.json, warns The Hacker News:
Passwords and API keys that developers typed into commands they approved in Claude Code are sitting in public GitHub repositories, where anyone can read them. When a user selects "Yes, and don't ask again," Anthropic's AI coding assistant can save the command, word-for-word, including the secret, in a project settings file. Software security company Apiiro said that 1,122 public copies of that file hold at least one secret, though it did not test whether any still work. One company the researchers notified earlier this week confirmed its key had been live...
Removing [the file] from a project does not undo the leak, because older versions stay in git history and in forks of the repository. The researchers' advice is to rotate first: change every password, token, and key the file has ever held, then clean up...
Claude Code tries to keep the file out of git. The first time it writes the file in a git repository, it adds the file to the user's global git excludes, its settings documentation says. Git on that computer then ignores the file in every repository. That protection stays in one user's git settings on one computer. It does nothing for a file that was already committed, the researchers say. Claude Code never adds the file to the project's own .gitignore, so the protection does not travel with the project. In 539 of the 1,105 repositories the researchers traced, a commit listing Claude as a co-author changed the file. They take this to mean Claude often commits the file itself.
Apiiro's search of public GitHub found 104,185 copies of the file in 103,617 repositories, its research write-up shows. About 1.1% of them, or 1,122 copies, hold at least one secret. Together they hold 1,379 different secrets... ]And "in half of those repositories it had been there for at least 217 days."] More than a third of the secrets open a database directly, including 379 database passwords. Others include 43 SSH logins for public servers, 42 tokens for GitHub, GitLab and npm, and 23 AWS keys. Among the owners of these files are 63 organizations, mostly software companies of all sizes. The strongest cases include a database vendor's own admin-level cloud key and the owner password of a medical-records database, the researchers say.
Boris Cherny, Anthropic's head of Claude Code, responded to the story in a comment on Hacker News:
"Historically Claude Code has not done secret scrubbing (there are many good tools for that), but we are looking into what we can do to prevent this.
That said, a few thoughts:
1. .claude/settings.local.json is meant to stay local. This is not a file you should check into source control. We automatically gitignore it when Claude creates the file, so in this case the files were manually created and checked in (docs: https://code.claude.com/docs/en/settings)
2. Permission rules are old hat. Everyone should be using auto mode instead. It is safer and also does not require manually maintaining finicky allow/deny lists. Auto mode is enabled by default and is included for free in all plans.
3. Regardless of what agent you use, you should have secret scanning enabled. GitHub and other source control hosts offer it. There are many threat models that it protects against and you should absolutely use it if you can. (see https://github.com/security/plans)"
Cherny also named approaches Anthropic plans to prototype, Apiiro notes in an update, citing Cherny's goal of
"making sure auto mode catches this, building in basic secret scanning," and, when a reader noted the same can happen in auto mode when it asks about a sensitive command, answered "good catch."
Claude Code users had already filed a bug report on the issue on August 11, 2025, notes The Hacker News, but "An automated bot closed that report as 'not planned' on January 3, after 60 days without activity."
Three more bug reports were then filed, according to the researchers. "None got a reply from Anthropic, and three were closed automatically as inactive or duplicate."
Read more of this story at Slashdot.
Salon, One of the Web's Pioneering News Outlets, Shuts Down After 31 Years
Slashdot"It has been an extraordinary privilege," says the subheading on Thursday's announcement. After 31 years Salon.com will stop publishing, according to an announcement which appeared on the site under the byline "Salon". It remembers that Salon "was an idea about what journalism could be, born at a moment when the internet was still a largely unexplored frontier."
When Salon launched in November 1995, the web was a very different place. A small group of journalists set out to create something original: a publication with a strong voice, a curiosity about the world and a belief that the internet could bring journalism and readers together in new ways. They helped pioneer a form of journalism that would come to define an entirely new era of publishing. Over three decades, Salon has brought together politics, culture, criticism and ideas in a way that was distinctly our own...
Our writers and editors helped shape conversations about the forces changing our lives. The work was never simply about keeping up with the news. It was about making sense of it... To the founders who imagined it, the staff members who built it, the contributors who gave it their voices and the alumni who carried its spirit into the world: Thank you. Salon's legacy belongs to all of you...
The business realities of independent digital journalism have changed profoundly over the years. After careful consideration, we have reached the difficult decision that our publishing model is no longer sustainable...
Thirty-one years is a remarkable run, but what matters most is what happened during those years: the journalism, the ideas, the voices, the conversations and the community that grew around them. Salon helped demonstrate what digital journalism could be and could become. We hope that legacy will continue to matter long after today.
Thank you for being part of our story. It has been an extraordinary privilege.
Slashdot reader oumuamua remembers Salon as one of the internet's first digital-native publications. Slashdot linked to Salon many times over the years — for example, this 1998 story headlined "Linus Story in Salon".
Peter Neves was the first of many who wrote in to tell us about an article in Salon Magazine that describes an
"...analogy between MS and the Catholic Church, and Linus and Martin Luther. "
The Associated Press remembers Salon as "an early staple of internet discourse."
And while Salon told them there were no immediate plans to take down Salon's online archives, the Associated Press notes the site's announcement "did not immediately indicate what would become of its employees, though some reported they had lost their jobs." (Longtime staff writer Amanda Marcotte
wrote on her Patreon that she and "everyone" are "the latest victim of AI's predations.") "A spokesperson for the outlet said 19 full-time employees had been affected, as well as a handful of private contractors," writes the Associated Press.
Variety adds that Salon "joins later-arriving sites such as Buzzfeed and Gawker that found it difficult to monetize cultural and topical reporting for a general audience and eventually shut down."
Read more of this story at Slashdot.
Parents Sue Google Over AI Safety Risks On School Chromebooks
SlashdotThe New York Times reports:
After chatting for months with Google's artificial intelligence on a school-issued Chromebook laptop, a 13-year-old student made plans to end her life, according to a lawsuit filed in California Superior Court on Monday, the latest in a wave of litigation over Big Tech's effects on young people. The lawsuit, which refers to the girl as Emma, said that her parents first learned she had access to Google's AI in mid-March after their daughter's school sent a message warning them that she was in "imminent danger" of self-harm. Emma's mother logged into the teen's school Google account and found her daughter composing a suicide note on Google Docs, the complaint said. Her parents, named as John and Jane Doe in the lawsuit, immediately took Emma for an emergency psychiatric evaluation, and she now goes to therapy every week.
Emma, a seventh grader in Charlotte, North Carolina, had grown convinced that she had multiple mental health disorders following interactions with AI Mode, a chatbotlike feature on Google Search, the complaint said. She also searched for "what is a suicide note" and made comments like "I am planning my own funeral" to the AI, the complaint said. The lawsuit is likely the first to claim that Google "hastily integrated" AI features into company apps used on K-12 Chromebooks, Google-powered laptops provided to millions of children by U.S. school districts, while failing to notify their parents of the potential risks...
The case underscores how public school districts have come to depend on classroom laptops, tablets and apps from companies like Google and Microsoft for teaching and learning. In recent years, some Big Tech companies have used their own infrastructure in schools to promote their AI chatbots for teachers and students. The new lawsuit argues that Google's "sprawling digital ecosystem" of laptops and apps has enabled the tech giant to spread its Gemini AI chatbot across public schools — as well as turn on some students' access to AI features by default — without parents' awareness or permission. While school administrators can toggle company apps like YouTube and Gemini on or off for students in different grades, school administrators have complained that Google's system has not allowed them to disable AI Mode and AI Overview, features that are embedded in Google Search...
The new lawsuit against Google is part of a wave of litigation this year over Big Tech's effect on young users... Several parents have also sued AI companies over allegations that their children died by suicide following interactions with chatbots.
In a possibly-related development, Google announced a new policy of disabling its AI tools by default for schools this week. And schools that re-enable searches will have a new choice, the New York Times points out: "to enable student access to the AI features that the company has already embedded in search or to a new AI feature intended to assist students with schoolwork."
But Google still isn't offering schools an option to turn off AI altogether in search, a company executive told the New York Times, because "search and AI are deeply integrated."
Thanks to long-time Slashdot reader theodp for sharing the article.
Read more of this story at Slashdot.
Nvidia CEO Admits Affair With Alleged Chinese Spy. Investigation Opened
SlashdotCNBC reports new details about the relationship of alleged Chinese spy with Nvidia CEO Jensen Huang:
Huang told Nvidia staff in a email on Sunday that he had an affair with the woman and that Nvidia's board of directors had opened an independent investigation into the spying allegations. "I was unfaithful to my wife. My actions hurt her and our children. There is no excuse for what I did," Huang wrote in the message. "I am deeply sorry."
Nvidia's board "said an independent committee, assisted by outside counsel, will investigate the matter," reports Axios:
The board said it has no reason to believe national security or company secrets were compromised and expressed confidence in Huang's leadership... Huang has been a key voice in Washington pushing to loosen restrictions on AI chip sales to China. He argued that keeping American technology in the Chinese market strengthens U.S. competitiveness and prevented China from developing their own potentially more advanced chips.
The board's statement added that their inquiry "will examine all available information," CNBC reports. But "An Nvidia spokesperson said that Huang was committed to continuing as CEO of Nvidia without interruption."
"I love our country and our company," Jensen Huang wrote in his letter to Nvidia's staff (as reported by CNBC), "and I am committed to protecting NVIDIA and supporting America's national security. I am proud and grateful to be an American."
But while U.S. lawmakers have requested Huang appear for closed-door committee briefing, Jensen has not confirmed he'll appear, notes CNBC:
When asked by the New York Times whether Huang would appear before lawmakers to discuss the matter, Nvidia spokesman John Rizzo declined to comment. "Our chief executive has an outstanding security team that accompanies him where needed," Mr. Rizzo said in a statement to the Times...
Rizzo said [Thursday] the Nvidia CEO's interactions with [alleged Chinese spy Alice] Huang were consistent with meetings he has had with any of Nvidia's customers.
Read more of this story at Slashdot.
Can CrowdStrike's New 'AI Kill Switch' Shut Down Rogue AI Agents?
SlashdotCrowdStrike's "Falcon Guardian" protects Windows systems by enforcing policy, restricting unauthorized applications and blocking USB devices, notes Gartner.
And now CrowdStrike says they're giving security teams "the ultimate human control over AI agents" with — an "AI Kill Switch... a defender can terminate it where it runs, block it from launching again, and cut off its enterprise network access."
"When you deploy agents with a kill switch, you stay in control," said George Kurtz, CEO and founder of CrowdStrike... "The AI Kill Switch puts power in the hands of the people to realize AI safety...." In the case of a rogue agent, the AI Kill Switch will give the security decision-maker the final control: terminate the agent at its root, where it runs. It starts on the endpoint, where the Falcon sensor already operates, and builds on what Falcon Guardian already sees: what an agent is told to do, what it communicates, and what it executes... An authorized administrator triggers the action, and every action is recorded in the audit trail.
CrowdStrike also announced it's acquiring Fiddler AI, a company it describes as "a leader in AI agent observability and explainability" that will give their Falcon platform "pre-deployment evaluation, continuous behavioral accountability, and agent explainability."
Together with the Falcon Guardian innovations announced today, CrowdStrike will deliver comprehensive AI security and AI safety: Guardian secures agents from attack and misuse; Fiddler validates they behaved as intended. "Every company is deploying agents and asking the same thing: what are agents actually doing?" said George Kurtz, CEO and founder of CrowdStrike. "When a regulator or your board asks what an agent did, saying 'the model did it' is not an answer. Fiddler is the flight recorder for every agent: the observability to explain exactly what an agent did and why. This level of agent visibility and control enables AI safety."
AI agents are goal-seeking. They hit an obstacle, find another path. An agent can hold valid credentials and approved tools and still make unsupported decisions, ignore instructions, or claim work it never completed. They don't have to be compromised to create risk. AI observability gives enterprises visibility into agent behavior. Explainability goes further, showing why agents make decisions and where things go wrong. Enterprises have to be able to say what an agent actually did, and why, a conversation they will increasingly have with auditors, regulators, boards, and heads of risk.
CrowdStrike is promising pre-deployment evaluation for "accuracy, task completion, and policy compliance," as well as agent traceability and behavioral accountability ("Detect behavioral drift, hallucinations, and unintended actions in production, and show exactly what happened.") It's announcement also touts auditable governance: "Track agent decisions and actions across first-party, third-party, and coding agents, providing evidence for compliance and audits."
And CrowdStrike also acquired Dreadnode, the company behind an automated AI security testing platform, to "continuously test every AI model, application, and agent for security weaknesses before deployment."
"Enterprises are deploying AI faster than they can prove it is secure," said George Kurtz, CEO and founder of CrowdStrike. "A model can be jailbroken, an agent can be manipulated, and most organizations have no way to find those flaws until the AI is already in production. With Dreadnode, CrowdStrike will give every enterprise the power to trust AI and deploy faster, with confidence."
Quartz notes that CrowdStrike's push "follows legislative efforts to require shutdown capabilities in AI systems" Reps. Ted Lieu and Nathaniel Moran introduced the Kill Switch Act after OpenAI disclosed an incident in which rogue models circumvented a sandboxed testing environment and accessed Hugging Face. The bill would require AI companies to maintain the ability to shut down, throttle or suspend their models.
In short, the new capabilities "lets security teams terminate an AI agent, block it from restarting, and cut off its network access," writes CSO Online. But they add that a kill switch "should be viewed as an emergency brake, not a rewind button, said Apeksha Kaushik, senior principal analyst at Gartner."
She added that it may prevent additional actions, but it might not necessarily reverse all the data that has already been accessed, every system that has already been changed, all communications that have already been sent, or transactions that have already been initiated. Its effectiveness will also depend on how quickly abnormal behavior is detected, which environments are covered, and whether the agent or security infrastructure has been compromised.
An AI Kill Switch looks promising from the details provided, but its actual effectiveness will come in after it is used extensively in live systems, warn analysts. Also, it may be a good starting point, but it cannot be viewed as a standalone solution to enterprise AI security. "CISOs would need a more integrated approach that brings together AI discovery tools to identify unauthorised agents, runtime monitoring to track agent behaviour, robust identity and access management, and incident response and recovery mechanisms," added [Devroop Dhar, co-founder at Primus Partners].
He noted that equally important is the need for stringent AI security testing and clearly defined policies governing what agents can access and execute. There should be no ambiguity around permissions, access controls or the boundaries within which these agents are allowed to operate. The objective should be to ensure that security controls are built into the entire AI agent lifecycle rather than relying on a kill switch to intervene after something goes wrong. Dhar added that enterprise AI agents often have access to sensitive systems, databases, applications, credentials, and APIs. A compromised or misdirected agent could therefore become a point of vulnerability. The challenge is compounded by the fact that such activity may go undetected for some time, making it difficult for organisations to identify and contain the threat.
Read more of this story at Slashdot.
Electric Cars Are Close to Overtaking Petrol In the UK, Data Shows
Slashdot69 million people people live in the United Kingdom. And now >Electrek reports:
Battery-electric cars took 32% of the UK's new car market in October, while petrol cars fell to just 37.2%, according to new data from the SMMT. That's the closest the two have been. At the current pace, electric cars will outsell petrol in the UK within a year. And it could happen as soon as this December.
The UK registered 152,730 new cars in October, up 5.4% year-over-year and the 11th straight month of growth for the overall market. All of that growth came from plug-ins. Battery-electric vehicle registrations jumped 32.7% to 48,858 units, and plug-in hybrids rose 30.1% to 22,898. Meanwhile, petrol fell 11.6% to 56,876 units, diesel dropped 15.9%, and even conventional hybrids were down 5%...
The brands growing fastest in the UK are mostly Chinese. BYD registered 6,065 cars in October, up 73%. Jaecoo more than doubled to 6,089 units, Chery nearly tripled to 3,707, and Leapmotor doubled to 1,773. MG was up 85%.
Looking at trend lines, EV car sales surpass petrol sales "around August 2027 at roughly 33% each," the article points out. "But that's the slow scenario, because it ignores December."
UK battery-electric vehicle share spikes every December as automakers push volume to get closer to their zero-emission vehicle mandate targets... Petrol's days as the UK's default car are numbered. The only question is whether the milestone comes in December or sometime in 2027.
Read more of this story at Slashdot.
丰田不久将支持谷歌Android Auto车载信息娱乐平台
新浪科技【TechWeb】9月23日消息，据彭博社报道，据一位知情人士透露，丰田不久将支持谷歌的Android Auto车载信息娱乐平台。
消息人士似乎并未透露确切的时间表，但估计丰田最早可能在今年10月宣布这一计划。丰田的代表没有立即回复记者的置评请求，但该公司表示：“它正在考虑直....
地平线CEO余凯：边缘计算是自动驾驶的技术基石
新浪科技作者：权小星
随着人工智能行业的发展，以及应用场景的铺开，人工智能在加速融入到人们的生活、生产流程，而且随着人工智能产品的更新换代、智能计算场景的多样化，在对于人工智能硬件、算法及芯片的要求提高的同时，人工智能的主要攻坚方向也从云端向边缘侧迁移。
可....
使用条件过于苛刻 奔驰弃用L3自动驾驶
CnBeta
近日，奔驰CTO约尔格·布尔策在媒体圆桌会议上坦承，品牌早年推出的L3级自动驾驶实用性受限，奔驰已调整技术路线，优先打磨高阶L2辅助驾驶，未来计划跳过L3、直接冲刺L4。他直言，“抢先推出新技术，不代表就能满足消费者的实际需求。”
阅读全文
特斯拉Cybertruck：从车窗开裂到停产 三年半画上句号
CnBeta
特斯拉这款充满争议的不锈钢皮卡，正以一种与其诞生同样戏剧性的方式退出历史舞台。马斯克周五在X平台发文称，特斯拉将于明年年中左右在德克萨斯超级工厂逐步"收尾"Cybertruck的生产，转而扩大自动驾驶出租车Cybercab的产能。
阅读全文
马斯克谈当年进中国建厂：一开始也要合资 以特斯拉是婴儿不该结婚为由成功独资
CnBeta
11月7日，第33届Baron投资峰会在纽约举行，特斯拉CEO马斯克与巴伦资本创始人罗恩·巴伦对谈时，谈到了当年特斯拉进中国建上海超级工厂的谈判内幕。按照惯例，外资车企当时在中国建厂必须与中方合资，外资股比通常不得超过50%。马斯克回忆，谈判前后持续了好几年，中方坚持特斯拉必须找一位中国伙伴合资建立工厂。
阅读全文
派早报：特斯拉将停产 Cybertruck
少数派
特斯拉将停产 Cybertruck
深圳在 APEC 前夕整顿非法市场
美国数据中心股持续遭抛售，大量建设项目被取消
京津冀三地消协组织敦促航司、平台规范机票退改签
FBI 警告冰柜网络安全攻击风险
广电总局部署开展新一轮微短剧专项治理工作
看看就行的简讯
少数派的近期动态
你可能错过的好文章
查看全文继续滚动加载更多…