How to Use AI With Your Privacy Intact
www.wired.com
Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect yourself.

Very confused, is this all BS?

“Confer, the private AI chatbot launched by Signal creator Moxie Marlinspike, uses that Nvidia-based TEE setup— along with an authentication system…”

“Meta, too, uses a TEE to offer a more private version of the Meta AI chatbot included in WhatsApp—a privacy system that Confer’s Marlinspike has said he is helping Meta to develop.”

This feels too good to be true and I am surprised this article is the first i am hearing about the relationship between Marlinspike and Meta for this product.

  • hirihit640@sh.itjust.worksEnglish
    1·
    3 days ago

    If TEE is anything like Secure Computing, then it works something like this:

    1. first you have to trust the CPU manufacturer to not insert any backdoors
    2. the CPU is designed to only run code that is signed with a certain signature (aka secure boot)
    3. the AI company (Signal or Meta in this case), gets their code audited to make sure it does not exfiltrate user data, and then signs the code
    4. now the signed code can run on the servers, and if the code is ever modified, eg to add spyware, then the servers will reject it

    There’s also ways to make sure you as a user/client are communicating with one of these trusted servers and not some malicious server masquerading as a trusted server, but I forgot how that part worked. You can look up Apple’s announcement on Private Cloud Compute, or any article on remote attestation.

    • Matt@lemmy.ml
      1·
      2 days ago

      the AI company (Signal […])

      AFAIK Confer is independent from Signal.