North Korean Hackers Posed as Recruiters.They Infected 30k Devices Worldwide
North Korean hackers used fake recruiter profiles to target individuals worldwide. They infected approximately 30,000 devices through this deception. (inc.com)
ZK-JPEG is a cryptographic system that proves an image was correctly produced by compressing a secret, committed input into the JPEG format, enabling robust camera attestation and verifiable edits even after lossy encoding. It targets the problem that digital signatures on raw camera output are invalidated by common downstream operations - lossy compression, selective blurring or redaction - so provenance tools must survive these transformations. ZK-JPEG generates zero-knowledge proofs that a published JPEG was derived from an authenticated source and that permitted transformations were applied, preserving privacy of the original while allowing public verification against a commitment.
The implementation converts Python image-editing code into a zero-knowledge circuit using PicoZK and constructs proofs for the line-point zero-knowledge (LPZK) proof system, demonstrating practical instantiation from off-the-shelf ZK tooling. The design integrates a broad family of image transformations directly into the JPEG compression pipeline with minimal added cost, and emphasizes speed and flexibility suitable for real-world workflows. Authors are Samuel Dittmer, Steve Lu, Kimberlee Model (Stealth Software Technologies, Inc.) and Joseph Near (University of Vermont).
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
North Korean hackers used fake recruiter profiles to target individuals worldwide. They infected approximately 30,000 devices through this deception. (inc.com)
Google AI Studio's data deletion practices are questioned due to a CWE-459 vulnerability and evidence of data retention, according to AI Weekly. Industry experts express concerns over backend data hoarding and UI misrepresentation. (bitu79.substack.com)
Flock partnered with a nonprofit accused of using AI to create fake grassroots support for its surveillance cameras. Critics argue the campaign manipulates public opinion and raises privacy concerns. (theintercept.com)
Sports betting apps like FanDuel and DraftKings are being sued for being designed to create addiction, similar to the effects of crack cocaine in the 1980s. Attorneys argue that these apps cause financial and personal devastation for users, with some losing their homes and families. (cbsnews.com)
The Snowden Archive is a collection of documents and information leaked by NSA whistleblower Edward Snowden. Its current status and accessibility have become topics of discussion and concern. (libroot.org)
OpenAI's CEO Sam Altman is scheduled to brief the UN Security Council next week. The meeting will focus on AI-related topics and global security concerns. (reuters.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.