This week the Council of the European Union made an announcement. “With a view to ensuring a trusted and secure digital identity for all Europeans, the Council presidency and European Parliament representatives reached today a provisional agreement on a new framework for a European digital identity (eID).”

The proposed new framework would also require member states “to issue a digital wallet under a notified eID scheme, built on common technical standards, following compulsory certification.”

“With the approval of the European digital identity regulation, we are taking a fundamental step so that citizens can have a unique and secure European digital identity,” said Nadia Calviño, acting Spanish first vice-president and minister for economy and digitalisation.
From the announcement:

The revised regulation constitutes a clear paradigm shift for digital identity in Europe aiming to ensure universal access for people and businesses to secure and trustworthy electronic identification and authentication. Under the new law, member states will offer citizens and businesses digital wallets that will be able to link their national digital identities with proof of other personal attributes (e.g., driving licence, diplomas, bank account). Citizens will be able to prove their identity and share electronic documents from their digital wallets with a click of a button on their mobile phone.

The new European digital identity wallets will enable all Europeans to access online services with their national digital identification, which will be recognised throughout Europe, without having to use private identification methods or unnecessarily sharing personal data. User control ensures that only information that needs to be shared will be shared…

The revised law clarifies the scope of the qualified web authentication certificates (QWACs), which ensures that users can verify who is behind a website, while preserving the current well-established industry security rules and standards.
“When finalised, the text will be submitted to the member statesâ(TM) representatives (Coreper) for endorsement. Subject to a legal/linguistic review, the revised regulation will then need to be formally adopted by the Parliament and the Council before it can be published in the EUâ(TM)s Official Journal and enter into force.”

Read more of this story at Slashdot.

Source: Slashdot – ‘Provisional Agreement’ Reached on eID, a ‘Digital Identity for All Europeans’

Started in 2013, “Hour of Code” is an annual tradition started by the education non-profit Code.org (which provides free coding lessons to schools). Its FAQ describes the December event for K-12 students as “a worldwide effort to celebrate computer science, starting with 1-hour coding activities,” and over 100 million schoolkids have participated over the years.

This year’s theme will be “Creativity With AI,” and the “computer vision” lesson includes a short video (less than 7 minutes) featuring a Tesla Autopilot product manager from its computer vision team. “I build self-driving cars,” they say in the video. “Any place where there can be resources used more efficiently I think is a place where technology can play a role. But of course one of the best, impactful ways of AI, I hope, is through self-driving cars.” (The video then goes on to explain how lots of training data ultimately generates a statistical model, “which is just a fancy way of saying, a guessing machine.”)

The 7-minute video is part of a larger lesson plan (with a total estimated time of 45 minutes) in which students tackle a fun story problem. If a sports arena’s scoreboard is showing digital numbers, what series of patterns would a machine-vision system have to recognize to identify each digit. (Students are asked to collaborate in groups.) And it’s just one of seven 45-minute lessons, each one accompanied by a short video. (The longest video is 7 minutes and 28 seconds, and all seven videos, if watched back-to-back, would run for about 31 minutes.)

Not all the lessons involve actual coding, but the goal seems to be familiarizing students (starting at the 6th grade level) with artificial intelligence of today, and the issues it raises. The second-to-last lesson is titled “Algorithmic Bias” — with a video including interviews with an ethicist at Open AI and professor focused on AI from both MIT and Stanford. And the last lesson — “Our AI Code of Ethics” — challenges students to assemble documents and videos on AI-related “ethical pitfalls,” and then pool their discoveries into an educational resource “for AI creators and legislators everywhere.”

This year’s installment is being billed as “the largest learning event in history.” And it’s scheduled for the week of December 4 so it coincides with “Computer Science Education Week” (a CS-education event launched in 2009 by the Association for Computing Machinery, with help from partners including Intel, Microsoft, Google, and the National Science Foundation).

Read more of this story at Slashdot.

Source: Slashdot – How ‘Hour of Code’ Will Teach Students About Issues with AI

The senior security editor at Ars Technica writes:

Highly invasive malware targeting software developers is once again circulating in Trojanized code libraries, with the latest ones downloaded thousands of times in the last eight months, researchers said Wednesday.

Since January, eight separate developer tools have contained hidden payloads with various nefarious capabilities, security firm Checkmarx reported. The most recent one was released last month under the name “pyobfgood.” Like the seven packages that preceded it, pyobfgood posed as a legitimate obfuscation tool that developers could use to deter reverse engineering and tampering with their code. Once executed, it installed a payload, giving the attacker almost complete control of the developerâ(TM)s machine. Capabilities include:

– Exfiltrate detailed host information
– Steal passwords from the Chrome web browser
– Set up a keylogger
– Download files from the victim’s system
– Capture screenshots and record both screen and audio
– Render the computer inoperative by ramping up CPU usage, inserting a batch script in the startup directory to shut down the PC, or forcing a BSOD error with a Python script
– Encrypt files, potentially for ransom
– Deactivate Windows Defender and Task Manager
– Execute any command on the compromised host

In all, pyobfgood and the previous seven tools were installed 2,348 times. They targeted developers using the Python programming language… Downloads of the package came primarily from the US (62%), followed by China (12%) and Russia (6%)

Ars Technica concludes that “The never-ending stream of attacks should serve as a cautionary tale underscoring the importance of carefully scrutinizing a package before allowing it to run.”

Read more of this story at Slashdot.

Source: Slashdot – Highly Invasive Backdoors Hidden in Python Obfuscation Packages, Downloaded by 2,348 Developers

This week the Verge’s podcast Decoder interviewed former U.S. president Barack Obama for a discussion on “AI, free speech, and the future of the internet.”
Obama warns that future copyright questions are just part of a larger issue. “If AI turns out to be as pervasive and as powerful as it’s proponents expect — and I have to say the more I look into it, I think it is going to be that disruptive — we are going to have to think about not just intellectual property; we are going to have to think about jobs and the economy differently.”

Specific issues may include the length of the work week and the fact that health insurance coverage is currently tied to employment — but it goes far beyond that:

The broader question is going to be what happens when 10% of existing jobs now definitively can be done by some large language model or other variant of AI? And are we going to have to reexamine how we educate our kids and what jobs are going to be available…?

The truth of the matter is that during my presidency, there was I think a little bit of naivete, where people would say, you know, “The answer to lifting people out of poverty and making sure they have high enough wages is we’re going to retrain them and we’re going to educate them, and they should all become coders, because that’s the future.” Well, if AI’s coding better than all but the very best coders? If ChatGPT can generate a research memo better than the third-, fourth-year associate — maybe not the partner, who’s got a particular expertise or judgment? — now what are you telling young people coming up?

While Obama believes in the transformative potential of AI, “we have to be maybe a little more intentional about how our democracies interact with what is primarily being generated out of the private sector. What rules of the road are we setting up, and how can we make sure that we maximize the good and maybe minimize some of the bad?”

AI’s impact will be a global problem, Obama believes, which may require “cross-border frameworks and standards and norms”. (He expressed a hope that governments can educate the public on the idea that AI is “a tool, not a buddy”.) During the 44-minute interview Obama predicted AI will ultimately force a “much more robust” public conversation about rules needed for social media — and that at least some of that pressure could come from how consumers interact with companies. (Obama also argues there will still be a market for products that don’t just show you what you want to see.)

“One of Obama’s worries is that the government needs insight and expertise to properly regulate AI,” writes the Verge’s editor-in-chief in an article about the interview, “and you’ll hear him make a pitch for why people with that expertise should take a tour of duty in the government to make sure we get these things right.”

You’ll hear me get excited about a case called Red Lion Broadcasting v. FCC, a 1969 Supreme Court decision that said the government could impose something called the Fairness Doctrine on radio and television broadcasters because the public owns the airwaves and can thus impose requirements on how they’re used. There’s no similar framework for cable TV or the internet, which don’t use public airwaves, and that makes them much harder, if not impossible, to regulate. Obama says he disagrees with the idea that social networks are something called “common carriers” that have to distribute all information equally.
Obama also applauded last month’s newly-issued Executive Order from the White House, a hundred-page document which Obama calls important as “the beginning of building out a framework.”

We don’t know all the problems that are going to arise out of this. We don’t know all the promising potential of AI, but we’re starting to put together the foundations for what we hope will be a smart framework for dealing with it… In talking to the companies themselves, they will acknowledge that their safety protocols and their testing regimens may not be where they need to be yet. I think it’s entirely appropriate for us to plant a flag and say, “All right, frontier companies, you need to disclose what your safety protocols are to make sure that we don’t have rogue programs going off and hacking into our financial system,” for example. Tell us what tests you’re using. Make sure that we have some independent verification that right now this stuff is working.

But that framework can’t be a fixed framework. These models are developing so quickly that oversight and any regulatory framework is going to have to be flexible, and it’s going to have to be nimble.

Read more of this story at Slashdot.

Source: Slashdot – Former President Obama Warns ‘Disruptive’ AI May Require Rethinking Jobs and the Economy