Category: News

  • Will AI help doctors decide whether you live or die? – Computerworld

    Will AI help doctors decide whether you live or die? – Computerworld

    [ad_1]

    “Clinicians may also become de-skilled as over-reliance on the outputs of AI diminishes critical thinking,” Shegewi said. “Large-scale deployments will likely raise issues concerning patient data privacy and regulatory compliance. The risk for bias, inherent in any AI model, is also huge and might harm underrepresented populations.”

    Additionally, AI’s increasing use by healthcare insurance companies doesn’t typically translate into what’s best for a patient. Doctors who face an onslaught of AI-generated patient care denials from insurance companies are fighting back — and they’re using the same technology to automate their appeals.

    “One reason the AI outperformed humans is that it’s very good at thinking about why it might be wrong,” Rodman said. “So, it’s good at what doesn’t fit with the hypothesis, which is a skill humans aren’t very good at. We’re not good at disagreeing with ourselves. We have cognitive biases.”

    Of course, AI has its own biases, Rodman noted. The higher ratio of sex and racial biases has been well documented with LLMs, but it’s probably less prone to biases than people are, he said.

    Even so, bias in classical AI has been a longstanding problem, and genAI has the potential to exacerbate the problem, according to Gartner’s Walk. “I think one of the biggest risks is that the technology is outpacing the industry’s ability to train and prepare clinicians to detect, respond to, and report these biases,” she said. 

    GenAI models are inherently prone to bias due to their training on datasets that may disproportionately represent certain populations or scenarios. For example, models trained primarily on data from dominant demographic groups might perform poorly for underrepresented groups, said Mutaz Shegewi, a senior research director with IDC’s Worldwide Healthcare Provider Digital Strategies group.

    “Prompt design can further amplify bias, as poorly crafted prompts may reinforce disparities,” he said. “Additionally, genAI’s focus on common patterns risks overlooking rare but important cases.”

    For example, research literature that’s ingested by LLMs is often skewed toward white males, creating critical data gaps regarding other populations, Mutaz said. “Due to this, AI models might not recognize atypical disease presentations in different groups. Symptoms for certain diseases, for example, can have stark differences between groups, and a failure to acknowledge such differences could lead to delayed or misguided treatment,” he said.

    With current regulatory structures, LLMs and their genAI interfaces can’t accept liability and responsibility the way a human clinician can. So, for “official purposes,” it’s likely a human will still be needed in the loop for liability, judgement, nuance, and the many other layers of evaluation and support patients need.

    Chen said it wouldn’t surprise him if physicians were already using LLMs for low-stakes purposes, like explaining medical charts or generating treatment options  for less-severe symptoms.

    “Good or bad, ready or not, Pandora’s box has already been opened, and we need to figure out how to effectively use these tools and counsel patients and clinicians on appropriately safe and reliable ways to do so,” Chen said.

    [ad_2]

  • the conversation that never ends – Computerworld

    the conversation that never ends – Computerworld

    [ad_1]

    All this, due in large part to the explosion of ChatGPT. In fact, six months after the chatbot’s release, the Future of Life Institute asked for a pause in its development in an open letter, saying its risks could not be controlled, even going so far as to say that it could pose a danger to our civilization as we know it if systems were built that surpassed humans. More than 31,000 people signed the letter, including industry figures such as Apple cofounder Steve Wozniak and OpenAI cofounder Elon Musk.

    ChatGPT broke all predictions. A study by UBS found that it was the fastest consumer application to reach 100 million users, in just two months, although it has since been surpassed by Meta’s social network Threads. And, at the business level, it has one million licenses. In total, it has more than 180.5 million monthly active users as of April of this year, and its page was accessed by 1,625 million visitors in the month of February, according to PrimeWeb.

    “It has transformed the way we interact with technology,” says Fernando Maldonado, an independent analyst. “Today, anyone can access AI without the need for advanced knowledge or intermediaries, something that was previously reserved for specialists.” 

    [ad_2]

  • FTC opens antitrust investigation into Microsoft’s cloud, AI, and cybersecurity practices – Computerworld

    FTC opens antitrust investigation into Microsoft’s cloud, AI, and cybersecurity practices – Computerworld

    [ad_1]

    Focus on market dominance and security practices

    The investigation centers on Microsoft’s bundling of office productivity and security software with its cloud services, a practice critics argue disadvantages competitors in the authentication and cybersecurity markets. The FTC is particularly examining Microsoft Entra ID, its user authentication service, amid complaints that licensing terms and integration with its cloud offerings impede rival companies.

    Microsoft’s role as a major government contractor and recent cybersecurity incidents involving its products have added urgency to the probe. The company provides billions of dollars in services to US agencies, including the Department of Defense, making its practices critical to national security.

    In November 2023, FTC flagged concerns about the concentrated nature of the cloud market, warning that outages or performance issues could ripple through the economy. The authority had then collected feedback from civil society, industry stakeholders, and academia to prepare its report. As per the feedback, the majority of the concerns were related to competition and licensing practices.

    [ad_2]

  • The M4 Pro Mac mini is a ‘triumph’ – Computerworld

    The M4 Pro Mac mini is a ‘triumph’ – Computerworld

    [ad_1]

    In the interests of objectivity, I should say up from I love the new Mac mini. It’s a triumph, a culmination of everything the first Mac mini aimed to be, but much, much better. Introduced along with the also superb MacBook Pro, Apple’s Mac line-up proves that, with Apple Silicon inside, the company is a the top of its game.

    What you can expect under the hood

    All this capability comes because of the amazing M-series processor Apple has slotted inside and reflects the device’s extensive processor history that straddles the company’s PowerPC chips on its first release, the Intel years, and today’s super-efficient, low-power chips that put Apple ahead of the industry. There’s a lot to love, starting at $599 (though the M4 Pro with 14‑core CPU and 20‑core GPU, 48GB, and 1TB SSD model I tested costs a lot more, $2,199.) That price tag might dent the superlatives a little, but probably not fatally. 

    For a company made famous by the quality of its design, the Mac mini you see today isn’t a major departure from the models of yesteryear, other than size. This third major redesign remains faithful to the breed — a compact all-in-one metal box designed to work with the mouse, keyboard and display you already own. Now just 2-in. high, the 5-in.-by-5-in. (100% carbon neutral aluminum) box remains, resolutely, a Mac mini.

    [ad_2]

  • AWS and Anthropic ink deal to accelerate model development, enhance AI chips – Computerworld

    AWS and Anthropic ink deal to accelerate model development, enhance AI chips – Computerworld

    [ad_1]

    Notably, last month Anthropic introduced “Computer Use” to Claude 3.5 Sonnet. This capability allows the model to use computers as people do; it can quickly move cursors, toggle between tabs, navigate websites, click buttons, type, and compile research documents in addition to its generative capabilities. All told, the company claims that Sonnet outperforms all other available models on agentic coding tasks.

    Claude has experienced rapid adoption since its addition to Amazon Bedrock, AWS’ fully-managed service for building generative AI models, in April 2023, and now supports “tens of thousands” of companies across numerous industries, according to AWS. The foundation models are used to build a number of functions, including chatbots, coding assistants, and complex business processes.

    “This has been a year of breakout growth for Claude, and our collaboration with Amazon has been instrumental in bringing Claude’s capabilities to millions of end users on Amazon Bedrock,” Dario Amodei, co-founder and CEO of Anthropic, said in an announcement.

    [ad_2]

  • You’ll soon be able to clone your voice to speak other languages ​​in Teams – Computerworld

    You’ll soon be able to clone your voice to speak other languages ​​in Teams – Computerworld

    [ad_1]

    In connection with this year’s Ignite conference, Microsoft has unveiled a new interpretation tool that will be added to Teams in the spring. What makes the voice cloning tool — currently called “Interpreter In Teams” — special is that users will be able to use your own voice to speak in other languages ​​in real time.

    According to Techcrunch, users need a subscription to Microsoft 365 to have access to the technology.

    Initially, the tool will support nine languages: English, French, Italian, Portuguese, Spanish, German, Japanese, Korean and Mandarin. More languages ​​are likely to be added over time.

    [ad_2]

  • With SearchGPT, could OpenAI rewrite online search rules — and invite plagiarism? – Computerworld

    With SearchGPT, could OpenAI rewrite online search rules — and invite plagiarism? – Computerworld

    [ad_1]

    For its part, Perplexity said in an updated FAQ that its web crawler, PerplexityBot, will not index the full or partial text content of any site that disallows it using robots.txt code. Robots.txt files are common simple text files stored on a web server to instruct web crawlers about which pages or sections of a website they are allowed to crawl and index.

    “PerplexityBot only crawls content in compliance with robots.txt,” the FAQ explained. Perplexity also said it does not build “foundation models,” (also known as large language models), “so your content will not be used for AI model pre-training.”

    The bottom line, Yamin said, is that search engines are in a “tricky position” as genAI evolves. “They want to provide the best results to users, which increasingly involves AI-generated or AI-enhanced content. At the same time, they need to protect original creators and maintain the integrity of search results. We’re seeing efforts to strike this balance, but it’s a complex issue that will take time to fully address.”

    [ad_2]

  • For November, Patch Tuesday includes three Windows zero-day fixes

    For November, Patch Tuesday includes three Windows zero-day fixes

    [ad_1]

    Microsoft’s November Patch Tuesday release addresses 89 vulnerabilities in Windows, SQL Server, .NET and Microsoft Office — and three zero-day vulnerabilities (CVE-2024-43451, CVE-2024-49019 and CVE-2024-49039) that mean a patch now recommendation for Windows platforms. Unusually, there are a significant number of patch “re-releases” that might also require administrator attention. 

    The team at Readiness has provided this infographic outlining the risks associated with each of the updates for this cycle.  (For a rundown of recent Patch Tuesday updates, see Computerworld‘s round-up here.

    Known issues 

    There were a few reported issues for the September update that have been addressed now, including:

    • Enterprise customers are reporting issues with the SSH service failing to start on updated Windows 11 24H2 machines. Microsoft recommended updating the file/directory level permissions on the SSH program directories (remember to include the log files). You can read more about this official workaround here

    It looks like we are entering a new age of ARM compatibility challenges for Microsoft. However, before we get ahead of ourselves, we really need to sort out the (three-month old) Roblox issue.

    Major revisions 

    This Patch Tuesday includes the following major revisions: 

    • CVE-2013-390: WinVerifyTrust Signature Validation Vulnerability. This update was originally published in 2013 via TechNet. This update is now made available and is applicable to Windows 10 and 11 users due to a recent change in the EnableCertPaddingCheck Windows API call. We highly recommend a review of this CVE and its associated Q&A documentation. Remember: if you must set your values in the registry, ensure that they are type DWORD not Reg SZ.
    • CVE-2024-49040: Microsoft Exchange Server Spoofing Vulnerability. When Microsoft updates a CVE (twice) in the same week, and the vulnerability has been publicly disclosed, it’s time to pay attention. Before you apply this Exchange Server update, we highly recommend a review of the reportedheader detection issues and mitigating factors.

    And unusually, we have three kernel mode updates (CVE-2024-43511, CVE-2024-43516 and CVE-2024-43528 that were re-released in October and updated this month.  These security vulnerabilities exploit a race condition in Microsoft’s Virtualization Based Security (VBS). It’s worth a review of the mitigating strategies while you thoroughly test these low-level kernel patches. 

    Testing guidance

    Each month, the Readiness team analyzes the latest Patch Tuesday updates and provides detailed, actionable testing guidance based on a large application portfolio and a detailed analysis of the patches and their potential impact on Windows platforms and application installations.

    For this release cycle, we have grouped the critical updates and required testing efforts into separate product and functional areas including:

    Networking

    • Test end-to-end VPN, Wi-Fi, sharing and Bluetooth scenarios. 
    • Test out HTTP clients over SSL.
    • Ensure internet shortcut files (ICS) display correctly

    Security/crypto

    • After installing the November update on your Certificate Authority (CA) servers, ensure that enrollment and renewal of certificates perform as expected.
    • Test Windows Defender Application Control (WDAC) and ensure that line-of-business apps are not blocked. Ensure that WDAC functions as expected on your Virtual Machines (VM).

    Filesystem and logging:

    • The NTFileCopyChunk API was updated and will require internal application testing if directly employed. Test the validity of your parameters and issues relating to directory notification.

    I cannot claim to have any nostalgia for dial-up internet access (though I do have a certain Pavlovian response to the dial-up handshake sound). For those who are still using this approach to access the internet, the November update to the TAPI API has you in mind. A “quick” (haha) test is required to ensure you can still connect to the internet via dial-up once you update your system.

    Windows lifecycle and enforcement updates

    There were no product or security enforcements this cycle. However, we do have the following Microsoft products reaching their respective end of servicing terms:

    • Oct. 8, 2024: Windows 11 Enterprise and Education, Version 21H2, Windows 11 Home and Pro, Version 22H2, Windows 11 IoT Enterprise, Version 21H2.
    • Oct. 9, 2024: Microsoft Project 2024 (LTSC)

    Mitigations and workaround

    Microsoft published the following mitigations applicable to this Patch Tuesday.

    • CVE-2024-49019: Active Directory Certificate Services Elevation of Privilege Vulnerability. As this vulnerability has been publicly disclosed, we need to take it seriously. Microsoft has offered some mitigation strategies during the update/testing/deployment for most enterprises that include:
    • Remove overly broad enroll or auto-enroll permissions.
    • Remove unused templates from certification authorities.
    • Secure templates that allow you to specify the subject in the request.

    As most enterprises employ Microsoft Active Directory, we highly recommend a review of this knowledge note from Microsoft. 

    Each month, we break down the update cycle into product families (as defined by Microsoft) with the following basic groupings: 

    • Browsers (Microsoft IE and Edge);
    • Microsoft Windows (both desktop and server); 
    • Microsoft Office;
    • Microsoft Exchange Server;
    • Microsoft Development platforms (ASP.NET Core, .NET Core and Chakra Core);
    • Adobe (if you get this far).

    Browsers 

    Microsoft released a single update specific to Microsoft Edge (CVE-2024-49025), and two updates for the Chromium engine that underpins the browser (CVE-2024-10826 and CVE-2024-10827). There’s a brief note on the browser update here. We recommend adding these low-profile browser updates to your standard release schedule.

    Windows 

    Microsoft released two (CVE-2024-43625 and CVE-2024-43639) patches with a critical rating and another 35 patches rated as important by Microsoft. This month the following key Windows features have been updated:

    • Windows Update Stack (note: installer rollbacks may be an issue);
    • NT OS, Secure Kernel and GDI;
    • Microsoft Hyper-V;
    • Networking, SMB and DNS;
    • Windows Kerberos.

    Unfortunately, these Windows updates have been publicly disclosed or reported as exploited in the wild, making them zero-day problems:

    • CVE-2024-43451: NTLM Hash Disclosure Spoofing Vulnerability.
    • CVE-2024-49019: Active Directory Certificate Services Elevation of Privilege.
    • CVE-2024-49039: Windows Task Scheduler Elevation of Privilege Vulnerability.

    Add these Windows updates to your Patch Now release cadence. 

    Microsoft Office 

    Microsoft pushed out six Microsoft Office updates (all rated important) that affect SharePoint, Word and Excel. None of these reported vulnerabilities involve remote access or preview pane issues and have not been publicly disclosed or exploited in the wild. Add these updates to your standard release schedule.

    Microsoft SQL (nee Exchange) Server 

    You want updates to Microsoft SQL Server? We got ‘em: 31 patches to the SQL Server Native client this month. That’s a lot of patches, even for a complex product like Microsoft SQL Server. These updates appear to be the result of a major clean-up effort from Microsoft addressing the following reported security vulnerabilities:

    The vast majority of these SQL Server Native Client updates address the CWE-122 related buffer overflow issues. Note: these patches update the SQL Native client, so this is a desktop, not a server, update. Crafting a testing profile for this one is a tough call. No new features have been added, and no high-risk areas have been patched. However, many internal line-of-business applications rely on these SQL client features. We recommend that your core business applications be tested before this SQL update, otherwise add it to your standard release schedule. 

    Boot note: Remember that there is a major revision to CVE-2024-49040 — this could affect the SQL Server “server” side of things.

    Microsoft development platforms

    Microsoft released one critical-rated update (CVE-2024-43498) and three updates rated as important for Microsoft .NET 9 and Visual Studio 2022. These are pretty low-risk security vulnerabilities and very specific to these versions of the development platforms. They should present a reduced testing profile. Add these updates to your standard developer schedule this month.

    Adobe Reader (and other third-party updates)

    Microsoft did not publish any Adobe Reader-related updates this month. The company  released three non-Microsoft CVEs covering Google Chrome and SSH (CVE-2024-5535). Given the update to Windows Defender (as a result of the SSH issue), Microsoft also published a list of Defender vulnerabilities and weaknesses that might assist with your deployments.  

    [ad_2]

  • OpenAI’s SimpleQA tool for discerning genAI accuracy — right message, wrong messenger – Computerworld

    OpenAI’s SimpleQA tool for discerning genAI accuracy — right message, wrong messenger – Computerworld

    [ad_1]

    OpenAI pretty much concedes this in the report: “In this work, we will sidestep the open-endedness of language models by considering only short, fact-seeking questions with a single answer. This reduction of scope is important because it makes measuring factuality much more tractable, albeit at the cost of leaving open research questions such as whether improved behavior on short-form factuality generalizes to long-form factuality.”

    Later in the report, OpenAI elaborates: “A main limitation with SimpleQA is that while it is accurate, it only measures factuality under the constrained setting of short, fact-seeking queries with a single, verifiable answer. Whether the ability to provide factual short answers correlates with the ability to write lengthy responses filled with numerous facts remains an open research question.”

    Here are the specifics: SimpleQA consists of 4,326 “short, fact-seeking questions.” 

    [ad_2]

  • Mistral’s new tool automatically deletes offending content – Computerworld

    Mistral’s new tool automatically deletes offending content – Computerworld

    [ad_1]

    French tech company Mistral AI has launched a new online moderation tool based on the AI ​​model Ministral 8B that can detect and remove offensive or illegal posts automatically. (There is still a risk of some misjudgments, however.)

    According to Techcrunch, for example, some studies have shown that posts about people with disabilities can be flagged as “negative” or “toxic” even though that’s not the case.

    Initially, Mistral’s new moderation tool will support Arabic, English, French, Italian, Japanese, Chinese, Korean, Portuguese, Russian, Spanish and German, with more languages ​​are on the way later. Mistral in July launched a large language model that can generate longer tranches of code faster than other open-source models.

    [ad_2]