3 ms·

Yes, it's DRM for AI models. The idea seems to be that approved hardware will only run signed models This doesn't end well. It's censorship on the user's machi

Yes, it's DRM for AI models. The idea seems to be that approved hardware will only run signed models This doesn't end well. It's censorship on the user's machine. There will have to be multiple versions for different markets. - MAGA (US red states) - Woke (US blue states) - Xi Thought (China) - Monarchy criticism lockout (Thailand) - Promotion of the gay lifestyle lockout (Russia)

kfrzcode 2y ago
This misunderstands what Verifiable Compute actually does. VC isn't about restricting execution, it's about proving properties of computation. The key difference is that VC lets you verify what happened, not control what can happen. Think SSH keys, not DRM. SSH lets you verify you're talking to the right server without restricting which servers exist. Similarly, VC lets you verify properties of AI models (like training data lineage or inference characteristics) without restricting which models can run. The regional censorship concern isn't relevant here since VC doesn't enable content restriction. It's a mathematical verification tool, not an enforcement mechanism.
- chii 2y ago
  > lets you verify what happened > It's a mathematical verification tool, not an enforcement mechanism. enforcement comes from the rubber hose. The maths is what makes the enforcement possible. Unless you are able to prevent attestations from being made with your machine (presumably against your will).
  - ramoz 2y ago
    The attestations in this case are completely determined by you.
ramoz 2y ago
> approved hardware will only run signed models This is true. But this is an ability of the hardware owners. Intel and NVIDIA are not setting the rules - and there is a real commitment to that because its open source. It's also confidential. Data, code, rules, ... all of these are processed together in secure enclaves. It's up to the hardware owner/users to determine that processing and to stamp/verify what they want.
- ramoz 2y ago
  BTW it's also a measure to ensure your own standards are met - in distant execution, e.g.where you can ensure your data is processed privately, or your end of a contract is adhered to (something that we think resonates with an agentic/autonomous future). "How can we ensure that the system enforces the rules that I want"

kfrzcode 2y ago

This misunderstands what Verifiable Compute actually does. VC isn't about restricting execution, it's about proving properties of computation. The key difference is that VC lets you verify what happened, not control what can happen. Think SSH keys, not DRM. SSH lets you verify you're talking to the right server without restricting which servers exist. Similarly, VC lets you verify properties of AI models (like training data lineage or inference characteristics) without restricting which models can run. The regional censorship concern isn't relevant here since VC doesn't enable content restriction. It's a mathematical verification tool, not an enforcement mechanism.

chii 2y ago
> lets you verify what happened > It's a mathematical verification tool, not an enforcement mechanism. enforcement comes from the rubber hose. The maths is what makes the enforcement possible. Unless you are able to prevent attestations from being made with your machine (presumably against your will).
- ramoz 2y ago
  The attestations in this case are completely determined by you.

ramoz 2y ago

> approved hardware will only run signed models This is true. But this is an ability of the hardware owners. Intel and NVIDIA are not setting the rules - and there is a real commitment to that because its open source. It's also confidential. Data, code, rules, ... all of these are processed together in secure enclaves. It's up to the hardware owner/users to determine that processing and to stamp/verify what they want.

ramoz 2y ago
BTW it's also a measure to ensure your own standards are met - in distant execution, e.g.where you can ensure your data is processed privately, or your end of a contract is adhered to (something that we think resonates with an agentic/autonomous future). "How can we ensure that the system enforces the rules that I want"