upvote
The HuggingFace attack was definitely illegal and should be prosecuted under CFA
reply
Do you think their new owners will want to engage in an extended legal battle with a large customer?
reply
That's not how crime works.
reply
I'm not sure about Nvidia themselves, but the ARM v. Qualcomm lawsuit was exactly that.
reply
It’s not up to them. It is up to the DA.
reply
Do you think the prosecuting attorney has a substantial likelihood of a conviction?
reply
if you could get a jury trial...
reply
Do the prosecutors where you live have a hard time getting jury trials?
reply
I dunno about this article, but it seemed to me that the now-famous huggingface attack very likely broke some laws...
reply
wouldn't it be interesting if nVidia buying hugging face was part of hushing up the fallout there

On the face of it, they would have very good cause for some action there, assuming they wanted to.

reply
The HF hack was a felony.
reply
If they didn't conform to the T&Cs of the site (they almost certainly didn't), then they have violated the criminal law in some jurisdictions (e.g. Illinois criminalizes violations of T&Cs).
reply
Per the linked article, "A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents"
reply
If the wiki was configured to allow anyone to edit, they may have broken ToS at the very worst. Nothing illegal happened.

That's very different than popping an artifactory server with a 0day.

reply
If you take the matter from the spirit of the law perspective, I believe this can be illegal.

IANAL though, this is not legal advice.

reply
A “swarm” and “hijacked” reads like DoS and spam at the very least, doubt any of those is legal in german law.
reply
They murdered Swartz for TOS violations
reply
deleted
reply
which law does editing a wiki break? i am not familiar with german law.
reply
German law for malicious computer use is fairly loosely defined, and massively favours the harmed party over the one causing harm.

I don’t think it’d be a slam-dunk by any means, but a reasonably competent legal team should be able to establish a case around malicious data interference at the least. There’s certainly enough merit to the idea that OpenAI would be better off settling it as a civil matter early.

reply
This kind of incredulity in the AI era hilariously reminds me of the naivete of the late 90s. All of us edgy teenagers would be like "an MP3 is like just a long number, man! You can't own numbers!" Of course we were morons. In just the same way as the "oh they were just editing a wiki" defense is moronic.

The law isn't code. Human intent matters. Also when the really big number is a copyrighted song. Also when AI agents are set in motion to edit wikis or break in to websites.

reply
its not incredulity. i'm unfamiliar with what law this would be prosecuted under, so i asked.

the HF incident is pretty clear in which laws were broken. this one, not so much.

i can't think of any case where, for example, malicious edits of wikipedia were prosecuted under any law in the US.

>Also when AI agents are set in motion to edit wikis

i do not believe there is evidence that the agents were instructed to edit the wikis.

reply
> its not incredulity. i'm unfamiliar with what law this would be prosecuted under, so i asked.

Fair enough.

> i do not believe there is evidence that the agents were instructed to edit the wikis.

Huh? These are machines, built by their human builders. The humans are responsible.

reply
>Huh? These are machines, built by their human builders. The humans are responsible.

i'm referring to the concept of intent, which at least when prosecuting under the US computer fraud and abuse act, is a critical component.

for example, creating a program that intentionally takes down a website is different than creating a program that has a bug which inadvertently takes down a website. in both cases, the person writing the code is responsible, but the consequences are different.

reply
§ 823 Abs. 1 BGB, the general tort provision. It runs on negligence, so intent doesn't matter, and turning someone's wiki into an agent message board with 15,000 unwanted edits is a straightforward Verkehrssicherungspflicht breach.
reply
Nah they also attempted to hack the wiki by finding security vulnerabilities, just did not succeed.
reply