TSMC says some of its data was swept up in a hack on a hardware supplier

The pernicious LockBit ransomware syndicate claims responsibility and demands $70 million.

Stock photo of ransom note with letters cut out of newspapers and magazines.

Enlarge (credit: Getty Images)

Chipmaker TSMC said on Friday that one of its hardware suppliers experienced a “security incident” that allowed the attackers to obtain configurations and settings for some of the servers the company uses in its corporate network. The disclosure came a day after the LockBit ransomware crime syndicate listed TSMC on its extortion site and threatened to publish the data unless it received a payment of $70 million.

The hardware supplier, Kinmax Technology, confirmed that one of its test environments had been attacked by an external group, which was then able to retrieve configuration files and other parameter information. The company said it learned of the breach on Thursday and immediately shut down the compromised systems and notified the affected customer.

“Since the above information has nothing to do with the actual application of the customer, it is only the basic setting at the time of shipment,” Kinmax officials wrote. “At present, no damage has been caused to the customer, and the customer has not been hacked by it.”

Read 9 remaining paragraphs | Comments

The huge power and potential danger of AI-generated code

Programming can be faster with algorithms, but AI can make bugs more common.

The huge power and potential danger of AI-generated code

Enlarge (credit: Mark Garlick/Science Photo Library/Getty)

In June 2021, GitHub announced Copilot, a kind of auto-complete for computer code powered by OpenAI’s text-generation technology. It provided an early glimpse of the impressive potential of generative artificial intelligence to automate valuable work. Two years on, Copilot is one of the most mature examples of how the technology can take on tasks that previously had to be done by hand.

This week GitHub released a report, based on data from almost a million programmers paying to use Copilot, that shows how transformational generative AI coding has become. On average, they accepted the AI assistant’s suggestions about 30 percent of the time, suggesting that the system is remarkably good at predicting useful code.

(credit: GitHub)

The striking chart above shows how users tend to accept more of Copilot’s suggestions as they spend more months using the tool. The report also concludes that AI-enhanced coders see their productivity increase over time, based on the fact that a previous Copilot study reported a link between the number of suggestions accepted and a programmer’s productivity. GitHub’s new report says that the greatest productivity gains were seen among less experienced developers.

Read 10 remaining paragraphs | Comments

Authors Accuse OpenAI of Using Pirate Sites to Train ChatGPT

Generative AI is a revolutionary technology that’s expected to change society as we know it but, in parallel, it raises many copyright infringement concerns. This week, book authors Paul Tremblay and Mona Awad filed a lawsuit against OpenAI, accusing the company of using pirated books to train its ChatGPT models.

From: TF, for the latest news on copyright battles, piracy and more.

openaiGenerative AI models such as ChatGPT have captured the imagination of millions of people, offering a glimpse of what an AI-assisted future might look like.

The new technology also brings up novel copyright questions. Several rightsholders are worried that their work is being used to train AI without any form of compensation, for example.

How these and other copyright questions will be dealt with is not entirely clear. Governments around the world are taking different approaches, with U.S. Congress recently stating that it doesn’t plan to overreact. Meanwhile, rightsholders don’t intend to stand idly by.

Authors Sue OpenAI for Copyright Infringement

This week, authors Paul Tremblay and Mona Awad filed a class action lawsuit against OpenAI, accusing ChatGPT’s parent company of copyright infringement and violating the DMCA, among other things. According to the authors, ChatGPT was partly trained on their copyrighted works, without permission.

The proof for this claim is seemingly simple. The authors never gave OpenAI permission to use their works, yet ChatGPT can provide accurate summaries of their writings. This information must have come from somewhere.

“Indeed, when ChatGPT is prompted, ChatGPT generates summaries of Plaintiffs’ copyrighted works—something only possible if ChatGPT was trained on Plaintiffs’ copyrighted works,” the complaint reads.

Pirate Training

While these types of claims are not new, this week’s lawsuit alleges that OpenAI used pirate websites as training input. This potentially includes Z-Library, a shadow library of millions of pirated books that’s at the center of a criminal prosecution by the U.S. Department of Justice.

OpenAI hasn’t disclosed the datasets that ChatGPT is trained on, but in an older paper two databases are referenced; “Books1” and “Books2”. The first one contains roughly 63,000 titles and the latter around 294,000 titles.

These numbers are meaningless in isolation. However, the authors note that OpenAI must have used pirated resources, as legitimate databases with that many books don’t exist.

“The only ‘internet-based books corpora’ that have ever offered that much material are notorious ‘shadow library’ websites like Library Genesis (aka LibGen), Z-Library (aka Bok), Sci-Hub, and Bibliotik. The books aggregated by these websites have also been available in bulk via torrent systems.”

chatgpt complaint

Based on these data points, the complaint concludes that OpenAI committed copyright infringement. As compensation, the plaintiffs demand statutory damages, which can reach $150,000 per work. Additional damages for the alleged removal of copyright management information, in violation of the DMCA, are also on the table.

AI, Piracy and Copyright

There is no direct evidence that OpenAI used pirate sites to train ChatGPT. That said, it is no secret that some AI projects have trained on pirated material in the past, as an excellent summary from Search Engine Journal highlights.

The mainstream media has picked up this issue too. The Washington Post previously reported that the “C4 data set,” which Google and Facebook used to train their AI models, included Z-Library and various other pirate sites.

“At least 27 other sites identified by the U.S. government as markets for piracy and counterfeits were present in the data set,” the article added.

The present lawsuit will be closely watched by AI enthusiasts and rightsholders. It may result in OpenAI having to disclose some of its training data, which would be interesting in its own right

Even if it transpires that ChatGPT was trained with pirated books, the court would still have to decide whether that amounted to copyright infringement. Some experts believe that this type of AI training can be considered fair use.

Fair use protects transformative uses of copyrighted works that don’t compete with the original content. According to several experts, that defense could likely apply to AI training cases.

A copy of the complaint filed against OpenAI at the federal court for the Northern District of California is available here (pdf)

From: TF, for the latest news on copyright battles, piracy and more.

AMD announces limited-run Ryzen 5600X3D CPU, an ideal upgrade for an aging Ryzen PC

Micro Center will be the only seller of this $229, while-supplies-last chip.

AMD's Ryzen 5 5600X3D.

Enlarge / AMD's Ryzen 5 5600X3D. (credit: AMD)

A surprise twist for owners of older AMD PCs using socket AM4: AMD is announcing one last (?) processor for the aging socket, a six-core Ryzen 5 5600X3D that brings the company's 3D V-Cache chip stacking technology to a $229 chip.

The catch? The new CPU will only be available through Micro Center, a brick-and-mortar tech retailer that doesn't ship most of what it sells to online buyers. The chip will only be sold for as long as Micro Center's supply holds out, though Tom's Hardware reports that the company will have "several months'" worth of stock.

AMD Zen 3 CPUs Street price Cores/threads Clocks (Base/Boost) L3 cache TDP
Ryzen 5 5600 $129 6/12 3.5/4.4GHz 32MB 65W
Ryzen 5 5600X $149 6/12 3.7/4.6GHz 32MB 65W
Ryzen 5 5600X3D $229 (MSRP) 6/12 3.3/4.4GHz 96MB 105W
Ryzen 7 5800X3D $289 8/16 4.2/5.0GHz 96MB 120W

Like the Ryzen 5800X3D, the 5600X3D combines a regular Zen 3 processor die with an extra 64MB chunk of L3 cache stacked on top. Relative to its regular Zen 3 counterparts—in this case, the Ryzen 5 5600 and 5600X—the chip will consume slightly more power and run at somewhat lower clock speeds, which can make it slower than the non-X3D chips in tasks that don't benefit from the extra cache. They also have limited support for overclocking and undervolting. However, games in particular tend to like the extra cache a lot, benefitting people who want to pair a high-end GPU with the cheapest CPU that won't hold it back.

Read 5 remaining paragraphs | Comments

AMD announces limited-run Ryzen 5600X3D CPU, an ideal upgrade for an aging Ryzen PC

Micro Center will be the only seller of this $229, while-supplies-last chip.

AMD's Ryzen 5 5600X3D.

Enlarge / AMD's Ryzen 5 5600X3D. (credit: AMD)

A surprise twist for owners of older AMD PCs using socket AM4: AMD is announcing one last (?) processor for the aging socket, a six-core Ryzen 5 5600X3D that brings the company's 3D V-Cache chip stacking technology to a $229 chip.

The catch? The new CPU will only be available through Micro Center, a brick-and-mortar tech retailer that doesn't ship most of what it sells to online buyers. The chip will only be sold for as long as Micro Center's supply holds out, though Tom's Hardware reports that the company will have "several months'" worth of stock.

AMD Zen 3 CPUs Street price Cores/threads Clocks (Base/Boost) L3 cache TDP
Ryzen 5 5600 $129 6/12 3.5/4.4GHz 32MB 65W
Ryzen 5 5600X $149 6/12 3.7/4.6GHz 32MB 65W
Ryzen 5 5600X3D $229 (MSRP) 6/12 3.3/4.4GHz 96MB 105W
Ryzen 7 5800X3D $289 8/16 4.2/5.0GHz 96MB 120W

Like the Ryzen 5800X3D, the 5600X3D combines a regular Zen 3 processor die with an extra 64MB chunk of L3 cache stacked on top. Relative to its regular Zen 3 counterparts—in this case, the Ryzen 5 5600 and 5600X—the chip will consume slightly more power and run at somewhat lower clock speeds, which can make it slower than the non-X3D chips in tasks that don't benefit from the extra cache. They also have limited support for overclocking and undervolting. However, games in particular tend to like the extra cache a lot, benefitting people who want to pair a high-end GPU with the cheapest CPU that won't hold it back.

Read 5 remaining paragraphs | Comments

Windows Insiders on the Dev Channel can now test Windows Copilot, a new Settings homepage, and updated Backup and Restore app

Microsoft is rolling out a major Windows 11 update to members of the Windows Insider Preview program running Dev Channel builds of the operating system. Among other things, it brings a big update to the Backup and Restore tool introduced last month, a…

Microsoft is rolling out a major Windows 11 update to members of the Windows Insider Preview program running Dev Channel builds of the operating system. Among other things, it brings a big update to the Backup and Restore tool introduced last month, a new Settings homepage, a new volume mixer experience in Quick Settings, accessibility […]

The post Windows Insiders on the Dev Channel can now test Windows Copilot, a new Settings homepage, and updated Backup and Restore app appeared first on Liliputing.

Red Hat’s new source code policy and the intense pushback, explained

A (reasonably) condensed version of two weeks’ worth of heated GPL argument.

Man wearing fedora in red light

Enlarge / A be-hatted person, tipping his brim to the endless amount of text generated by the conflict of corporate versus enthusiast understandings of the GPL. (credit: Getty Images)

When CentOS announced in 2020 that it was shutting down its traditional "rebuild" of Red Hat Enterprise Linux (RHEL) to focus on its development build, Stream, CentOS suggested the strategy "removes confusion." Red Hat, which largely controlled CentOS by then, considered it "a natural, inevitable next step."

Last week, the IBM-owned Red Hat continued "furthering the evolution of CentOS Stream" by announcing that CentOS Stream would be "the sole repository for public RHEL-related source code releases," with RHEL's core code otherwise restricted to a customer portal. (RHEL access is free for individual developers and up to 16 servers, but that's largely not what is at issue here).

Red Hat's post was a rich example of burying the lede and a decisive moment for many who follow the tricky balance of Red Hat's open-source commitments and service contract business. Here's what followed.

Read 11 remaining paragraphs | Comments

Red Hat’s new source code policy and the intense pushback, explained

A (reasonably) condensed version of two weeks’ worth of heated GPL argument.

Man wearing fedora in red light

Enlarge / A be-hatted person, tipping his brim to the endless amount of text generated by the conflict of corporate versus enthusiast understandings of the GPL. (credit: Getty Images)

When CentOS announced in 2020 that it was shutting down its traditional "rebuild" of Red Hat Enterprise Linux (RHEL) to focus on its development build, Stream, CentOS suggested the strategy "removes confusion." Red Hat, which largely controlled CentOS by then, considered it "a natural, inevitable next step."

Last week, the IBM-owned Red Hat continued "furthering the evolution of CentOS Stream" by announcing that CentOS Stream would be "the sole repository for public RHEL-related source code releases," with RHEL's core code otherwise restricted to a customer portal. (RHEL access is free for individual developers and up to 16 servers, but that's largely not what is at issue here).

Red Hat's post was a rich example of burying the lede and a decisive moment for many who follow the tricky balance of Red Hat's open-source commitments and service contract business. Here's what followed.

Read 11 remaining paragraphs | Comments