570
This new data poisoning tool lets artists fight back against generative AI (www.technologyreview.com)
submitted 2 years ago by to c/technology@lemmy.world
136 comments fedilink hide all child comments
 

A new tool lets artists add invisible changes to the pixels in their art before they upload it online so that if it’s scraped into an AI training set, it can cause the resulting model to break in chaotic and unpredictable ways.

The tool, called Nightshade, is intended as a way to fight back against AI companies that use artists’ work to train their models without the creator’s permission.
[...]
Zhao’s team also developed Glaze, a tool that allows artists to “mask” their own personal style to prevent it from being scraped by AI companies. It works in a similar way to Nightshade: by changing the pixels of images in subtle ways that are invisible to the human eye but manipulate machine-learning models to interpret the image as something different from what it actually shows.

you are viewing a single comment's thread
view the rest of the comments
[–] 14 points 2 years ago* (1 child)

Of course not, it's the artists decision to put it on the internet for free.

Technically that's the root of the issue. This does not grant a license to everyone who looks at it, but if a license is required to train a model is unclear and currently discussed in court.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 2 years ago (2 children)

    The problem is the only way for artists to get people to see and eventually buy their art or commissions is to post some of their work publicly. Historically you would go out on the street and set up a stall, now social media is our digital street. Galleries don’t take everyone, having the ability to even get a meeting with one is difficult without the right connections. Most artists are never successful enough to completely live off their art, if they can make any money at all it is great for them. Then along comes an AI model that takes their work because it’s on the internet scrapes it into its training set and now any chance they had in an over saturated market is even smaller, because hey, I can just do this with AI. This idea that copyright and IP shouldn’t exist at all is kinda absurd. Would you just go through a street art walk, take high res photos of every picture they have on display, not take any business cards, and when they ask what you are doing, go “it’s ok, I’m training an AI data model so people can just make work that looks exactly like this. They shouldn’t have to ever buy from you. Capitalism is a joke. Bye!” The art walk was free, but it was also a sales pitch, because that’s how the art world works. You are hoping to get seen, that someone likes it enough to buy, and maybe buy more.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 8 points 2 years ago (1 child)

    This idea that copyright and IP shouldn’t exist at all is kinda absurd.

    For the majority of human existence, that was the default.

    Copyright exists as an explicit tradeoff between the rights of the public to be able to do as they please with stuff introduced into the public sphere, and a legal limitation infringing on the publics liberty for a limited time for the purpose of encouraging the creation of more works for the public benefit. It was not introduced as some sort of inherent right, but as a trade between the public and creators to incentivise them.

    Stripping it away from existing artists who has come to depend on it without some alternative would be grossly unfair, but there's nothing absurd about wanting to change the bargain over time. After all, that has been done many times, and the copyright we have now is vastly different and far more expansive and lengthy than early copyright protection.

    Personally, I'd be in favour of finding alternative means of supporting creators and stripping back copyright as a tradeoff. The vast majority of creators earn next to nothing from their works; only a very tiny minority makes a livable wage of art of any form at all, and of the rest the vast majority of profits take place in a very short period of initial exploitation of a work, so we could allow the vast majority to earn more from their art relatively cheaply, and affect the rest to a relatively limited degree, while benefiting from the reduced restrictions.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] -1 points 2 years ago (1 child)

    I agree that copyright lasts far too long, but the idea I can post a picture today, and in a hour it’s in an AI model without my consent bothers me. Historically there was a person to person exchange. But now we are so detached from it all I don’t think we can have that same affordance of no types of protections. I’m not saying one person can solve this. But I don’t see UBI or anything like that ever happening. As a person who has lived on disability most of their life, people don’t like to share their wealth with anyone for any reason. I’ve never been able to sell art for a living and am now going to school for data science. So I know about both ends of this. Just scraping without consent is unethical and many who do this have no idea about the art world or how artist create in general.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    I doesn't need to be full on UBI. In a lot of countries grants mechanisms and public purchasing mechanisms for art already make up a significant proportion of income for artists. Especially in smaller countries, this is very common (more so for literary works, movies and music where language provides a significant barrier to accessing a bigger audience, but for other art too). Imagine perhaps a tax/compulsory licensing mechanism that doesn't stop AI training but instead massively expands those funding sources for people whose data are included in training sets.

    This is not stoppable, not least because it's "too cheap" to buy content outright.

    I pointed out elsewhere that e.g. OpenAI could buy all of Getty Images for ~2% of their currently estimated market cap based on a rumoured recent cash infusion. Financing vast amounts of works for hire just creates a moat for smaller players while the big players will still be able to keep improving their models.

    As such it will do nothing to protect established artists, so we need expansion of ways to fund artists whether or not inclusion of copyrighted works in training sets becomes restricted.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 2 years ago (1 child)

    Those grants, and public purchases make up a significant portion of income for established main stream artists. If you work on commission only online, or never went to art school those won’t cover you.

    These large tech companies become so highly valued at the start because of venture capital and then in 5-10 years collapse under their own weight. How many of these have come up and are now close to drowning after pushing out all competitors? Sorry if I’m not excited about an infusion of cash into a large for profit company that is just gobbling up anything anyone posts online without consent to make a quick buck.

    I’m not against AI. I’m against the ethics of AI at the moment because it’s awful. And AI leans into biases it finds and there are not a lot of oversights on this.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    If you work on commission only online, or never went to art school those won’t cover you.

    There's no reason it has to stay like that. And most people in that position are not making a living from art as it is; expanding public funding to cover a large proportion of working artists at a better level than today would cost a pittance.

    These large tech companies become so highly valued at the start because of venture capital and then in 5-10 years collapse under their own weight. How many of these have come up and are now close to drowning after pushing out all competitors? Sorry if I’m not excited about an infusion of cash into a large for profit company that is just gobbling up anything anyone posts online without consent to make a quick buck.

    MS, Apple, Meta, Google etc. are massively profitable. OpenAI is not, but sitting on a huge hoard of Microsoft cash. It doesn't matter that many are close to drowning. The point is the amount of cash floating around that enable the big tech companies to outright buy more than enough content if they have to means that regulation to prevent them from gobbling up anything anyone posts online without consent will not stop them. So that isn't a solution. It will stop new entrants with little cash, but not the big ones. And even OpenAI can afford to buy up some of the largest content owners in the world.

    The point was not to make you excited about that, but to illustrate that fighting a battle to restrict what they can train on is fighting a battle that the big AI companies won't care if they lose - they might even be better off if they lose, because if they lose, while they'll need to pay more money to buy content, they won't have competition from open models or new startups for a while.

    So we need to find other solutions, because whether or not we regulate copyright to training data, these models will continue to improve. The cat is out of the bag, and the computational cost to improving these models keeps dropping. We're also just a few years away from people being able to train models competitive to present-day models on computers within reach of hobbyists, so even if we were to ban these models outright artists will soon compete with output from them anyway, no matter the legality.

    Focusing on the copyright issue is a distraction from focusing on ensuring there is funding for art. One presumes the survival of only one specific model that doesn't really work very well even today and which is set to fail irrespective of regulation, while the latter opens up the conversation to a much broader set of options and has at least a chance of providing working possibilities.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    I don’t see these grants or public funding ever covering a private company for one. And for two, I don’t see AI art ever actually getting to the point where it fully replaces artists. As of right now it is good. But it doesn’t understand space or lighting at all. Because of how AI works I’m not sure it ever will. Because it is trained to make a homogeneous rendering of what you are looking for, even if you use a base image, most people have an image that is lit heavily in the front, but because of this it never is able to render shadows correctly. Unless they hire people who are artist or art critics to finely train the data set, which I doubt they will, then the more you look the more uncanny valley the images get. They also have a hard bias in all of their images they generate. Which is difficult to overcome.

    AI is an amazing tool, but it is a poor replacement in total. The people who act like it is a total replacement are like the people who in 2015 told us self driving cars were just one year away, and have been saying it every year since. Maybe when quantum computing becomes the standard for every person AI will be able to. But there is just a fundamental misunderstanding of art, artistic process, how art get made people seem to have.

    Open AI might be sitting on Microsoft money, but how many other companies has Microsoft gobbled up over the years? Open AI if it starts to struggle will just fall under the Microsoft umbrella and become part of its massive conglomerate, integrated into it. Where are our AR goggles that we are supposed to all be wearing, Microsoft and Google both had those? So many projects grow and die with multiple millions thrown at them. All end up with crazy valuations based on future consumer usage. As we all can’t even afford rent.

    There is also this idea that people wouldn’t willing contribute if just asked. The problem is no one has even asked. Hugging Face is an open source distro people willingly contribute to. And so many people upload images to Creative Commons which could be used. I’ve done it with many of my photos which I have no problem being used in a data set, for commercial use even. But my commercial images, no please. The idea that you can’t train smaller models on the vast array of Creative Commons images and public domain, you absolutely can. You can also ask people to contribute to your data set and give credit to them. A lot of people are angry at lack of credit.

    There is no reason for any of this to be private enterprise if they are going to blatantly steal copyright images when sources like Creative Commons exists, not give any credit to the people they steal from, and sometime even steal from places they shouldn’t even have access to.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    I don’t see these grants or public funding ever covering a private company for one.

    Companies are by far the largest recipients of public funding for art in many countries and sectors. Especially for e.g. movie production in smaller languages, but also in other sectors.

    And for two, I don’t see AI art ever actually getting to the point where it fully replaces artists.

    I do agree it won't fully replace artists, but not because it won't get to the point where it can be better than everyone, but because a huge part of art is provenance. A "better Mona Lisa" isn't worth anything, while the original is priceless, not because a "better" one isn't possible, but because it's not painted by Da Vinci.

    But that will only help an even narrower sliver than the artists who are making good money today.

    It will take time, but AI will eat far more fields than art, and we haven't even started to see the fallout yet.

    Because it is trained to make a homogeneous rendering of what you are looking for

    Diffusion models are not trained "for" anything other than matching vectors to denoising to within your own tolerance levels of matching to what you are looking for. Accordingly, you'll see a whole swathe of models tuned on more specific types of imagery, and tooling to more precisely control what they generate. The "basic" web interfaces are just scratching the surface of what you can do with e.g. Controlnet and the like. It will take time before they get good enough, sure. They are also only 2 years old, and people have only been working on tooling around then for much less than that.

    Open AI might be sitting on Microsoft money, but how many other companies has Microsoft gobbled up over the years? Open AI if it starts to struggle will just fall under the Microsoft umbrella and become part of its massive conglomerate, integrated into it. Where are our AR goggles that we are supposed to all be wearing, Microsoft and Google both had those? So many projects grow and die with multiple millions thrown at them. All end up with crazy valuations based on future consumer usage. As we all can’t even afford rent.

    OpenAI is just one of many in this space already. They are in the lead for LLMs, that is text-based models. But even that lead is rapidly eroding. They don't have any obvious lead for diffusion models for images. Having used several, it was first with the recent release of DallE 3 that it got "good enough" to be competitive.

    At the same time there are now open models getting close enough to be useful, so even if every AI startup in the world collapsed this won't go away.

    There is also this idea that people wouldn’t willing contribute if just asked.

    That's fine, but that doesn't fix the financial challenge.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago (1 child)

    So what you are saying is open ai should get the public grants for artists to give to artists?

    I understand it isn’t trained for anything, I have done training with them. The training leads to homogeneous outcomes. It had been studied as well. You can look it up.

    Dall-e 3 still isn’t good enough to be competitive. It is too uncanny valley. I’m not saying people have to be the masters. I don’t know where you get that from, every one who touts this tech always goes to that. It is a tool that can be useful, but it is not a replacement.

    Asking and crediting would go a long way to help fix the financial challenge. Because it is a start to adding a financial component. If you have to credit someone there becomes an obligation to that person.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    So what you are saying is open ai should get the public grants for artists to give to artists?

    No. What in the world gave you that idea? I'm saying artists or companies employing artists should get grants, just like is the case for a large number of grants now. I'm saying I'd like to see more of that to compensate for the effects being liberal about copyright would have.

    I understand it isn’t trained for anything, I have done training with them. The training leads to homogeneous outcomes. It had been studied as well. You can look it up.

    There is no "the training". There are a huge range of models trained with different intent producing a wide variety in output to the point that some produces output that others will just plain refuse.

    Dall-e 3 still isn’t good enough to be competitive.

    Dall-E 3 isn't anywhere near leading edge of diffusion models. It's OpenAI playing catch up. Now, neither Midjourney or Firefly, nor any of the plethora of Stable Diffusion derived models are good enough to be competitive with everyone without significant effort either, today, but that is also entirely irrelevant. Diffusion models are two years old, and the pace of the progress have been staggering, to the point where we e.g. already have had plenty of book-covers and the like using them. Part of the reason for that is that you can continue training of a decent diffusion model even on a a somewhat beefy home machine and get a model that fits your needs better to an extent you can't yet do with LLMs.

    Asking and crediting would go a long way to help fix the financial challenge. Because it is a start to adding a financial component. If you have to credit someone there becomes an obligation to that person.

    If there is a chance crediting someone will lead to a financial obligation, people will very quickly do the math on how cheaply they can buy works for hire instead. And the vast bulk of this is a one-off cost. You don't need to continue adding images to teach the models already known thing, so the potential payout on the basis of creating some sort of obligation. Any plan for fixing the financial challenge that hinges on copyright is a lost cause from the start because unless it's a pittance it creates an inherent incentive for AI companies to buy themselves out of that obligation instead. It won't be expensive.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago (1 child)

    I feel like you are one of the people who feel that AI is just going to be the future with no real problems to anyone who matters. We can’t stop it, we can’t regulate it in any way whatever; and people should just move out of the way, give up and if they can’t find a place in the new world, die already. Artists don’t matter, writers don’t matter and anyone impacted by this new system doesn’t matter. The algorithm is all that matters.

    Because I don’t use the exact correct wording, I use a short hand that is easier for my brain to remember, and you are pedantic, I can’t know anything about LLMs, machine learning or anything about this. Because I don’t say it has a training set of a large model of images that are tagged in specific ways that they can take out antagonistic images or images that create artifacts and refine the model in appropriate ways. You therefore throw out the idea that bias exists due to tagging systems.

    Honestly I don’t care if you don’t think I know anything about this. You are a stranger on the internet and this conversation has gone on too long.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 2 years ago

    I feel like you are one of the people who feel that AI is just going to be the future with no real problems to anyone who matters. We can’t stop it, we can’t regulate it in any way whatever; and people should just move out of the way, give up and if they can’t find a place in the new world, die already. Artists don’t matter, writers don’t matter and anyone impacted by this new system doesn’t matter. The algorithm is all that matters.

    If I thought that, I wouldn't have emphasised the need to sort out the funding issue, and argued that just regulation will be insufficient to solve it.

    I think it will cause a massive degree of upheaval. I don't think regulation has any hope in hell of preventing upheaval significant enough that unless a solution is found to ensure better distribution of wealth it will cause violence and uprisings and governments to fall. Not necessarily in and of itself, but in accelerating a process of reducing the monetary value of labour.

    I can’t know anything about LLMs, machine learning or anything about this.

    I've not suggested anything of the sort.

    How you can interpret anything I've written as suggesting I don't think there will be problems is beyond me.

    You therefore throw out the idea that bias exists due to tagging systems.

    I've done no such thing.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 5 points 2 years ago (1 child)

    This idea that copyright and IP shouldn’t exist at all is kinda absurd

    I don't hold this opinion at all.

    I'm just saying that there are uses for which you don't need a license. Say, visiting an art exhibition and then going home and trying to draw similar pictures. Wether AI training falls into this category or instead requires a license is currently unclear.

    Btw, two spaces before the line break
    Creates the spacing you want.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 2 years ago

    As an artist who studies data science, I would say doing art and generating art are an entirely different process. AI has no reference outside of the information we give it. It had no real understanding of lighting, spacial awareness. We can tell it every tank is a cat, every flashlight is a pig and it will never question it. If we tell a toddler that every tank is a cat, they may call a tank a cat, but they will never think a that “cat” is a house pet. They will never think that “pig” will oink or be turned into steaks. An AI however would if your language conventions were the same in the prompt.

    If you go to the art walk and go home and try to recreate a style, you were inspired. If an AI model is trained on many styles and you tell it “portrait, woman, Van Gogh style, painterly, blue tones” then do you understand what you asked for? Was the ai inspired by Van Gogh? Did the ai study his techniques? No. It broke down his art pixel by pixel, rearranged it in a filter styled overlay over a woman, most likely a young woman-because of algorithmic bias which has been studied- in shades of blue. Humans take the time to study the why, the how. Ai does not. Humans are not just meat robots.

    I should say I’m not against AI art. I’m against gathering against consent. If it was opt in, or if there was some type of pay for program that would be fine. Even if it was pennies each month. But the fact that they scrape without consent. Or are now going back and adding it into TOS where it never was before feels scummy. AI art has a place, and is a helpful tool. But it’s not a replacement for artists, it has many flaws still, that might never be worked out.

    Thank you for helping me with line break.

  • permalink
  • fedilink
  • source
  • parent