lowering their costs, increasing their scale, and increasing the SECΓÇÖs
reliance on a few seasoned, trusted firms. The SEC already, as Platt
documented, relies on a few firms to prioritize their investigative agenda.
Experienced firms like ThomasΓÇÖs might wield AI automation to the greatest
advantage. SEC staff struggling to keep pace with tips might have less
capacity to look beyond the ones seemingly pre-vetted by familiar sources.

But the real effects will be on the conflicts of interest between
whistleblowing firms and the SEC. The ability to automate whistleblower
reporting will open new competitive strategies that could disrupt business
practices and market dynamics.

An AI-assisted data analyst could dig up potential violations faster, for a
greater scale of competitor firms, and consider a greater scope of
potential violations than any unassisted human could. The AI doesnΓÇÖt have
to be that smart to be effective here. Complaints are not required to be
accurate; claims based on insufficient evidence could be filed against
competitors, at scale.

Even more cynically, firms might use AI to help cover up their own
violations. If a company can deluge the SEC with legitimate, if minor, tips
about potential wrongdoing throughout the industry, it might lower the
chances that the agency will get around to investigating the companyΓÇÖs own
liabilities. Some companies might even use the strategy of submitting minor
claims about their own conduct to obscure more significant claims the SEC
might otherwise focus on.

Many of these ideas are not so new. There are decades of precedent for
using algorithms to detect fraudulent financial activity, with lots of
current-day application of the latest large language models and other AI
tools. In 2019, legal scholar Dimitrios Kafteranis, research coordinator
for the European Whistleblowing Institute, proposed using AI to automate
corporate whistleblowing.

And not all the impacts specific to AI are bad. The most optimistic
possible outcome is that AI will allow a broader base of potential tipsters
to file, providing assistive support that levels the playing field for the
little guy.

But more realistically, AI will supercharge the for-profit whistleblowing
industry. The risks remain as long as submitting whistleblower complaints
to the SEC is a viable business model. Like tax farming, the interests of
the institutional whistleblower diverge from the interests of the state,
and no amount of tweaking around the edges will make it otherwise.

Ultimately, AI is not the cause of or solution to the problems created by
the runaway growth of the SEC whistleblower program. But it should give
policymakers pause to consider the incentive structure that such programs
create, and to reconsider the balance of public and private ownership of
regulatory enforcement.

This essay was written with Nathan Sanders, and originally appeared in The
American Prospect.

** *** ***** ******* *********** ************* No, the Chinese Have Not
Broken Modern Encryption Systems with a Quantum Computer

[2024.10.22] The headline is pretty scary: ΓÇ£ChinaΓÇÖs Quantum Computer
Scientists Crack Military-Grade Encryption.ΓÇ¥

No, itΓÇÖs not true.

This debunking saved me the trouble of writing one. It all seems to have
come from this news article, which wasnΓÇÖt bad but was taken wildly out of
proportion.

Cryptography is safe, and will be for a long time

EDITED TO ADD (11/3): Really good explainer from Dan Goodin.

** *** ***** ******* *********** ************* Are Automatic License Plate
Scanners Constitutional?

[2024.10.23] An advocacy groups is filing a Fourth Amendment challenge
against automatic license plate readers.

    ΓÇ£The City of Norfolk, Virginia, has installed a network of cameras that
    make it functionally impossible for people to drive anywhere without
    having their movements tracked, photographed, and stored in an
    AI-assisted database that enables the warrantless surveillance of their
    every move. This civil rights lawsuit seeks to end this dragnet
    surveillance program,ΓÇ¥ the lawsuit notes. ΓÇ£In Norfolk, no one can
    escape the governmentΓÇÖs 172 unblinking eyes,ΓÇ¥ it continues, referring
    to the 172 Flock cameras currently operational in Norfolk. The Fourth
    Amendment protects against unreasonable searches and seizures and has
    been ruled in many cases to protect against warrantless government
    surveillance, and the lawsuit specifically says NorfolkΓÇÖs installation
    violates that.ΓÇ¥

** *** ***** ******* *********** ************* Watermark for LLM-Generated
Text

[2024.10.25] Researchers at Google have developed a watermark for
LLM-generated text. The basics are pretty obvious: the LLM chooses between
tokens partly based on a cryptographic key, and someone with knowledge of
the key can detect those choices. What makes this hard is (1) how much text
is required for the watermark to work, and (2) how robust the watermark is
to post-generation editing. GoogleΓÇÖs version looks pretty good: itΓÇÖs
detectable in text as small as 200 tokens.

** *** ***** ******* *********** ************* Criminals Are Blowing up
ATMs in Germany

[2024.10.28] ItΓÇÖs low tech, but effective.

Why Germany? It has more ATMs than other European countries, and -- if I
read the article right -- they have more money in them.

EDITED TO ADD (11/14): Blog readers commented that countries like the
Netherlands have laws requiring ATMs to have better security features. One
that I thought particularly clever is a small ΓÇ£glue explosionΓÇ¥ inside the
safe thatΓÇÖs triggered when the ATM safe is breached. The glue renders the
currency worthless.

** *** ***** ******* *********** ************* Law Enforcement Deanonymizes
Tor Users

[2024.10.29] The German police have successfully deanonymized at least four
Tor users. It appears they watch known Tor relays and known suspects, and
use timing analysis to figure out who is using what relay.
--- 
 * Origin: High Portable Tosser at my node (618:500/14.1)