3 ms·

The interesting thing is that Google Assistant has teh same problem, it's right there in the subtitle. It's interesting that it was omitted from the main title.

by Jun8 8y ago

The interesting thing is that Google Assistant has teh same problem, it's right there in the subtitle. It's interesting that it was omitted from the main title. Rather than journalistic oversight I think this verifies what people have commented many times: that the fact that GA does not have a personalized name makes it to refer to it. SO much so that a very distant third product is included rather than GA.

baxtr 8y ago
Maybe the main title would be too long if it included “and google’s voice assistant”
- GW150914 8y ago
  This was the title I used, it must have been changed: “Alexa and Siri Can Hear This Hidden Command. You Can’t.” I couldn’t have added the subtitle because as you say, it would have been too long.
  - osteele 8y ago
    "Alexa, Siri, and Google Home, can hear inaudible commands" "Alexa, Siri, and Google Home, can hear commands that humans can't"
    - srtjstjsj 8y ago
      That's less clickbaity than "This Hidden Command" and "You can't." that are specifically designed to hack your psychology and make you feel uncomfortable and threatened by not knowing what they are referring to.
      - GW150914 8y ago
        I agree with you and Osteele, but I didn’t feel it was my place to editorialize the title, but I’m happy for the moderators to do it.
lozenge 8y ago
Usually the attack requires the source code (or weightings of the neural network), I'd be surprised if they are able to actually attack these systems.
- ninguem2 8y ago
  Can't you just "machine learn" the attack?
- saagarjha 8y ago
  Does it really? As far as I was aware, it is still possible to perform a black box attack without knowing the weights of a network. Using specially crafted input, it's even possible to "steal" weights from a network!
  - srtjstjsj 8y ago
    https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/carlini https://www.usenix.org/conference/usenixsecurity16/technical... "We evaluate these attacks under two different threat models. In the black-box model, an attacker uses the speech recognition system as an opaque oracle. We show that the adversary can produce difficult to understand commands that are effective against existing systems in the black-box model. Under the white-box model, the attacker has full knowledge of the internals of the speech recognition system and uses it to create attack commands that we demonstrate through user testing are not understandable by humans."
dirkgently 8y ago
And ".... hidden commands that are undetectable to the human ear to Apple’s Siri, Amazon’s Alexa and Google’s Assistant." And then "digital assistants like Amazon’s Alexa or Apple’s Siri are set to outnumber people by 2021". Why is Google mentioned in one context but not other?
- tinus_hn 8y ago
  Dark times are ahead for Assistant. You must warn her of your discovery!

by Jun8 8y ago

baxtr 8y ago

Maybe the main title would be too long if it included “and google’s voice assistant”

GW150914 8y ago
This was the title I used, it must have been changed: “Alexa and Siri Can Hear This Hidden Command. You Can’t.” I couldn’t have added the subtitle because as you say, it would have been too long.
- osteele 8y ago
  "Alexa, Siri, and Google Home, can hear inaudible commands" "Alexa, Siri, and Google Home, can hear commands that humans can't"
  - srtjstjsj 8y ago
    That's less clickbaity than "This Hidden Command" and "You can't." that are specifically designed to hack your psychology and make you feel uncomfortable and threatened by not knowing what they are referring to.
    - GW150914 8y ago
      I agree with you and Osteele, but I didn’t feel it was my place to editorialize the title, but I’m happy for the moderators to do it.

lozenge 8y ago

Usually the attack requires the source code (or weightings of the neural network), I'd be surprised if they are able to actually attack these systems.

ninguem2 8y ago
Can't you just "machine learn" the attack?
saagarjha 8y ago
Does it really? As far as I was aware, it is still possible to perform a black box attack without knowing the weights of a network. Using specially crafted input, it's even possible to "steal" weights from a network!
- srtjstjsj 8y ago
  https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/carlini https://www.usenix.org/conference/usenixsecurity16/technical... "We evaluate these attacks under two different threat models. In the black-box model, an attacker uses the speech recognition system as an opaque oracle. We show that the adversary can produce difficult to understand commands that are effective against existing systems in the black-box model. Under the white-box model, the attacker has full knowledge of the internals of the speech recognition system and uses it to create attack commands that we demonstrate through user testing are not understandable by humans."

dirkgently 8y ago

And ".... hidden commands that are undetectable to the human ear to Apple’s Siri, Amazon’s Alexa and Google’s Assistant." And then "digital assistants like Amazon’s Alexa or Apple’s Siri are set to outnumber people by 2021". Why is Google mentioned in one context but not other?

tinus_hn 8y ago
Dark times are ahead for Assistant. You must warn her of your discovery!