cross-posted from: https://lemmy.sdf.org/post/60687522

cross-posted from: https://lemmy.sdf.org/post/60685725

Archived (removepaywall.com)

Four founders of one of China’s most promising artificial intelligence companies, Z. ai [also known in China as Zhipu AI], worked on research in a joint project with a technology institute that the British government accused of having “very strong ties” to China’s main spy agency, according to publicly available research papers from China and an “espionage alert” from Britain.

The nearly four-year AI research project, which overlapped with the company’s start in 2019, was co-funded by Beijing-based China General Technology Research Institute (CGTRI) and the National Natural Science Foundation of China, according to a previously unreported 78-page report that the project’s leaders compiled to detail their findings.

A CGTRI engineer and one of Z ai’s founders were among the project’s leaders, and three other Z. ai founders contributed to the research, according to the report.

[…]

An additional report says Z. AI co-founder Li Juanzi, a professor at Tsinghua University, led the research alongside CGTRI engineer Cao Weibing and a Southeast University professor. Three additional Z. AI founders contributed to the work:

  • Tang Jie, listed as co-author on project papers
  • Xu Bin, named as co-inventor on related patents
  • Zhang Peng (current Z. AI CEO), holder of software copyrights from the project

[…]

Separate analysis by national security consulting firm Garnaut Global revealed troubling patterns in Z. AI’s handling of software vulnerabilities discovered by its AI models: According to the firm’s report, Z. AI established a public ledger on August 14, 2026 documenting 2,436 vulnerabilities found in software from Western technology companies, but disclosed only 5% to affected companies before routing data to Chinese government.

Rather than following standard responsible disclosure practices, Z. AI disclosed only 5% of these vulnerabilities to affected vendors. Ten days after posting the ledger, the company replaced it with a notice stating the Chinese government would manage vulnerabilities through databases including one operated by the Ministry of State Security.

James Mulvenon, who leads intelligence research at national security contractor Pamir Consulting, characterized the situation as giving China’s peak cyberespionage agency access to exploitable weaknesses in critical Western software systems.

[…]

      • senseamidmadness@lemmygrad.ml
        link
        fedilink
        English
        arrow-up
        6
        ·
        11 hours ago

        What are the Chinese gonna do with my data? I’m not Chinese. They can’t do me any material harm half a world away and they have no reason to.

        The US tech companies will send my entire life story straight to the NSA if I say enough mean things about Trump on Facebook and then use it to harass me at the airports, and border checkpoints if I dare to leave the country. They’ll hand over every bit of data readily so my government’s not-so-secret-police (ICE) can accuse me of being a terrorist, and all I have to do is a touch of public activism against any of the evil shit constantly happening here. Google or the phone company will send law enforcement my location if I’m deemed enough of a “threat” and they won’t even ask for a warrant. I’m probably already on a thought-crimes list just for browsing leftist websites enough.

        Tell me why I should trust any American tech company, if you’re so much more enlightened than the folks in the “propaganda sub”.

  • DupaCycki@lemmy.world
    link
    fedilink
    arrow-up
    14
    arrow-down
    2
    ·
    20 hours ago

    So basically the same as American AI companies?

    Except only one of these two may actually benefit anyone other than billionaire pedophiles, while the other contributes to genocide.

  • Blaad@europe.pub
    link
    fedilink
    arrow-up
    6
    ·
    20 hours ago

    Their ZCODE harness quite literally got caught zipping up people’s entire git trees and uploading them to alibaba servers. I have no qualms with Chinese ai but this specific company is on my blacklist.

  • Avicenna@programming.dev
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    22 hours ago

    I mean ofcourse they do, and so does probably some/all western AI companies. People share all their secrets with these tools, I know people who were previously obsessed with being ghosts in the internet now running AI sessions in their computer (non local) with full access. This level of reach is a wet dream for intelligence agencies.

  • onlinepersona@programming.dev
    link
    fedilink
    arrow-up
    41
    arrow-down
    3
    ·
    2 days ago

    Same as the US. Somehow, I’d rather have the Chinese steal my data and be able to do nothing meaningful with it, than have the US steal it and subvert my democracy.

    • cideyav138@lemmy.ml
      link
      fedilink
      arrow-up
      4
      ·
      23 hours ago

      I think about that sometimes as well. Less about subverting western democracies, because multiple parties foreign and domestic have that goal. But more about which government actually has authority over me. My own government does. And they cannot be trusted.

    • Hotznplotzn@lemmy.sdf.orgOP
      link
      fedilink
      English
      arrow-up
      13
      arrow-down
      12
      ·
      2 days ago

      China isn’t subverting democracy?

      Chinese steal my data and be able to do nothing meaningful with it.

      Is this satire?

      • onlinepersona@programming.dev
        link
        fedilink
        arrow-up
        14
        arrow-down
        6
        ·
        1 day ago

        Which Western country’s democracy is being subverted by China with my data, and how? I genuinely want to know.

        I know Facebook, Instagram, YouTube, Twitter, Reddit, and others target citizens and radicalise them to destabilise countries. Their private data is also sold to “think tanks” who work with politicians to influence people to vote in a specific way. How is China influencing Western democracies. Tell me. Link to articles so I can read up on it.

        • pycorax@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          13 hours ago

          I guess it makes sense for you but not everyone here is from the west and the west has no exclusive ownership on democracy.

        • Hotznplotzn@lemmy.sdf.orgOP
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          5
          ·
          17 hours ago

          Which Western country’s democracy is being subverted by China …?

          The Chinese party-state aims to subvert all countries, may they be democracies or not.

          • senseamidmadness@lemmygrad.ml
            link
            fedilink
            English
            arrow-up
            2
            ·
            16 hours ago

            They are not the USSR and have explicitly disavowed the Soviet doctrine of “Socialism in one country” as a historical mistake, which it was. They trade with almost the entire world and have embassies in most countries on the planet. I would hardly call that subversion.

      • cornishon@lemmygrad.ml
        link
        fedilink
        arrow-up
        9
        arrow-down
        4
        ·
        1 day ago

        How was your (probably largely non-existent) democracy subverted by China? I’m genuinely curious.

        • captcha@lemmy.frozeninferno.xyz
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          4
          ·
          1 day ago

          Probably largely the same as by the US or Russia, by covert propaganda and other such bullshit.

          And it’s not valid to say that it doesn’t exist if you or I don’t know about it, some things take a lot of time to become public if ever. I wouldn’t think that China is so stupid and weak to not have an influence network like other big fishes do

  • [object Object]@lemmy.ca
    link
    fedilink
    arrow-up
    17
    ·
    2 days ago

    I thought it should be fairly obvious to people not to rely on code run from Chinese servers in general for security or privacy.

    Also, not any worse than the US based services, who already work with US government directly and via secret courts and backdoors – they also do not report vulnerabilities, and in the case of Claude, will allow you to find zero of them.

    In general though, you should be running these on your own servers or compute you control or can trust.