cross-posted from: https://lemmy.sdf.org/post/60687522

cross-posted from: https://lemmy.sdf.org/post/60685725

Archived (removepaywall.com)

Four founders of one of China’s most promising artificial intelligence companies, Z. ai [also known in China as Zhipu AI], worked on research in a joint project with a technology institute that the British government accused of having “very strong ties” to China’s main spy agency, according to publicly available research papers from China and an “espionage alert” from Britain.

The nearly four-year AI research project, which overlapped with the company’s start in 2019, was co-funded by Beijing-based China General Technology Research Institute (CGTRI) and the National Natural Science Foundation of China, according to a previously unreported 78-page report that the project’s leaders compiled to detail their findings.

A CGTRI engineer and one of Z ai’s founders were among the project’s leaders, and three other Z. ai founders contributed to the research, according to the report.

[…]

An additional report says Z. AI co-founder Li Juanzi, a professor at Tsinghua University, led the research alongside CGTRI engineer Cao Weibing and a Southeast University professor. Three additional Z. AI founders contributed to the work:

  • Tang Jie, listed as co-author on project papers
  • Xu Bin, named as co-inventor on related patents
  • Zhang Peng (current Z. AI CEO), holder of software copyrights from the project

[…]

Separate analysis by national security consulting firm Garnaut Global revealed troubling patterns in Z. AI’s handling of software vulnerabilities discovered by its AI models: According to the firm’s report, Z. AI established a public ledger on August 14, 2026 documenting 2,436 vulnerabilities found in software from Western technology companies, but disclosed only 5% to affected companies before routing data to Chinese government.

Rather than following standard responsible disclosure practices, Z. AI disclosed only 5% of these vulnerabilities to affected vendors. Ten days after posting the ledger, the company replaced it with a notice stating the Chinese government would manage vulnerabilities through databases including one operated by the Ministry of State Security.

James Mulvenon, who leads intelligence research at national security contractor Pamir Consulting, characterized the situation as giving China’s peak cyberespionage agency access to exploitable weaknesses in critical Western software systems.

[…]

      • senseamidmadness@lemmygrad.ml
        link
        fedilink
        English
        arrow-up
        6
        ·
        22 hours ago

        What are the Chinese gonna do with my data? I’m not Chinese. They can’t do me any material harm half a world away and they have no reason to.

        The US tech companies will send my entire life story straight to the NSA if I say enough mean things about Trump on Facebook and then use it to harass me at the airports, and border checkpoints if I dare to leave the country. They’ll hand over every bit of data readily so my government’s not-so-secret-police (ICE) can accuse me of being a terrorist, and all I have to do is a touch of public activism against any of the evil shit constantly happening here. Google or the phone company will send law enforcement my location if I’m deemed enough of a “threat” and they won’t even ask for a warrant. I’m probably already on a thought-crimes list just for browsing leftist websites enough.

        Tell me why I should trust any American tech company, if you’re so much more enlightened than the folks in the “propaganda sub”.