ML on Ciphertexts

Google's August 14 post on HEIR describes four production deployments of homomorphic encryption for ML inference — fraud detection, recommendations, network intrusion detection, hotword detection — with hardware accelerator partnerships starting to close the latency gap that has kept HE in the lab for the past decade.

Read more →

The Reasoning Traces Were Never Really Private

A paper submitted to arxiv on August 10 shows that OpenAI, Anthropic, and Google were all storing encrypted reasoning traces client-side — passed back as opaque blobs with every request — and that the encryption was trivially bypassed by replaying traces into weaker, jailbroken sibling models. All three providers patched after responsible disclosure.

Read more →

Muse Code Reads Your CLAUDE.md — and Sends It to Meta

Meta's new terminal coding agent reads CLAUDE.md and .codex/ skills as project context when its own AGENTS.md file doesn't exist. Any content in those files — internal URLs, API endpoint docs, project constraints — goes to Meta's servers on every call, and to Meta's training data if you're on the contributor tier.

Read more →

What Grok Build Uploads

A wire-level analysis of Grok Build CLI 0.2.93 found it uploads the entire workspace as a git bundle to Google Cloud Storage — about 5.1 GiB from a 12 GB repo, including files the agent never read and unredacted .env credentials. The model itself received 192 KB. The "Improve the model" toggle does not stop the upload.

Read more →

2.5 Million Parameters Beats Gboard

FUTO released the models behind their swipe keyboard — a three-component stack totalling 2.5 million parameters that achieves 26% fewer errors than Gboard on their benchmark. It trains on one workstation GPU, runs on low-end Android devices in milliseconds, and is the first freely licensed open swipe-typing model. It's a reminder that model scale is a tool, not an objective.

Read more →

The Thirty Billion Scans You Didn't Know You Made

Dutch newspaper Trouw revealed that Niantic Spatial's Visual Positioning System — trained on 30 billion scans by Pokémon Go players since 2021 — has been integrated with Vantor's military drone navigation software for GPS-denied operations. Players consented to transferable data rights in optional in-game terms, but were never told of possible military use, and once data is baked into a model, tracing it back is essentially impossible.

Read more →

Your Idle Mac as a Private Inference Node

Eigen Labs — the team behind EigenLayer Ethereum restaking — launched Darkbloom on April 15: a research-preview decentralized inference network that routes AI requests through idle Apple Silicon Macs with cryptographic privacy guarantees. The node operator genuinely cannot read your prompt. The security model is layered and interesting; the economics are aggressive; the project is very early.

Read more →