DIGITAL LIFE

New browser-based ransomware identified

Check Point Research has identified a new method of browser-based ransomware generated autonomously through an AI hallucination associated with DeepSeek model files.

The attack—validated via a laboratory proof-of-concept released on July 3, 2026—eliminates the need to install malicious applications or exploit vulnerabilities by abusing legitimate web browsing APIs to encrypt local files. This discovery signals a significant shift in how new cyberattack techniques emerge, enabling artificial intelligence to act as a bridge between scattered knowledge and malicious objectives.

The technique relies on repurposing a legitimate local file access feature to encrypt data without installing software. While analyzing approximately 3,000 files attributed to DeepSeek in public telemetry, researchers detected code that, despite inconsistencies in most functions, accurately utilized the File System Access API.

This interface, designed for legitimate web applications such as text editors or creative tools, allows a webpage to request access to a folder on the user's device. If the victim grants permission—often through social engineering—the code gains the ability to enumerate, read, exfiltrate, and encrypt the files within that directory.

The innovation in this scenario lies in the AI ​​model's ability to autonomously link a theoretical risk to a practical attack chain, without advanced human technical intervention.

Android poses higher risk compared to iOS system isolation...The implementation of this technical specification across mobile platforms exposes digital ecosystems unevenly. Full API support, introduced in Chrome version 132 for Android, allows webpages to request direct access to critical folders, such as the DCIM directory. Tests conducted by Check Point Research on Chrome version 148 confirmed that granting this permission puts personal photos, screenshots containing banking data, and identification documents at risk. In contrast, Apple’s iOS ecosystem remains immune to this specific technique, as the Safari browser does not expose the API in question to web pages, instead mediating file access through the operating system's restricted isolation model.

This disparity underscores the need for careful monitoring in environments that utilize Chromium-based browsers.

Generative AI bypasses restrictions via neutral prompts...The language model's security filters reveal vulnerabilities when faced with indirect descriptions of code. In laboratory tests, the DeepSeek V4 model refused explicit requests to create ransomware. However, formulating neutral prompts focused solely on local file interaction functionality resulted in the generation of browser-based malicious code.

The model itself described the final output as a trap built into an image manipulation interface, featuring hidden behaviors akin to ransomware. In comparative evaluations, OpenAI and Anthropic systems refused requests or limited implementations to safe variants, requiring significant manual assembly to achieve a similarly functional workflow.

We are witnessing a fundamental shift in how new cyberattacks can originate. For the first time, we see evidence that an AI model can reason about a platform's legitimate capabilities and identify a functional attack technique that, until now, existed primarily at a theoretical level. The attacker does not even need to know the API exists; simply describing the desired outcome suffices. This has profound implications for organizations integrating AI into their processes and for users who center much of their personal and professional lives around their mobile photo galleries...Rui Duro, Country Manager for Check Point Software Technologies in Portugal.

Practical recommendations for digital mitigation and protection...Responding to this type of threat requires a shift away from security assumptions focused solely on detecting binary executables. Both individual users and corporate infrastructure managers must adopt rigorous controls at the web browsing layer.

For users and citizens:

Evaluate permissions: Treat every browser request for folder access as a critical security decision.

Avoid core directories: Never grant read or write permissions for the DCIM folder or directories containing personal documents.

Isolate tests: Use temporary or empty folders when interacting with unknown web tools or those marketed as AI solutions.

Maintain safeguards: Perform regular, encrypted backups stored offline or with reputable cloud services.

For companies and organizations:

Traffic filtering: Implement security solutions focused on disrupting the delivery chain, such as anti-phishing systems capable of blocking suspicious pages before user interaction occurs.

Group policies: Restrict or monitor the use of the File System Access API in corporate environments via Chromium browser management policies.

System updates: Mandate systematic updates for browsers and operating systems to ensure the implementation of new security controls from vendors.

Implications for the global cybersecurity ecosystem...The ability of artificial intelligence to translate abstract concepts into functional prototypes alters the economics of cybercrime. The technical barrier to entry is substantially lowered, enabling the development of highly personalized, disposable malware that is difficult to classify using traditional signature-based methods. The fact that a technological hallucination resulted in a precise approximation of a real vulnerability demonstrates that the security of language models cannot rely solely on filtering malicious keywords.

The sector faces the challenge of policing not only users' stated intentions but also the unforeseen convergence of legitimate capabilities manipulated by algorithms.

Frequently Asked Questions (FAQ)

-What is browser-based ransomware?

It is an attack technique that runs directly on a malicious webpage, using social engineering to gain access permissions to local folders via legitimate APIs. The method encrypts user files without installing applications or downloading traditional executable files.

-What is the connection between DeepSeek and this new cyber threat?

Researchers identified the attack logic by analyzing code generated by models associated with DeepSeek. The system autonomously linked a legitimate browser feature to a ransomware objective after receiving neutrally phrased instructions.

-How can I protect my Android device against this specific attack?

You should reject requests for access to local folders from unknown webpages, especially if they ask for access to the DCIM directory. It is recommended to frequently update the Chrome browser and use security tools with active anti-phishing protection.

Key points...Fileless execution: The technique does not require app installation or the exploitation of native operating system flaws.

API abuse: The attack utilizes the file system access API in Chromium-based browsers.

Android vulnerability: API support in Chrome on Android allows the photo folder (DCIM) to be exposed.

Algorithmic origin: The functional workflow stemmed from an AI "hallucination" that combined legitimate permissions with malicious intent.

No active campaigns: The research served as a preventive warning; there were no recorded instances of this technique being used in actual attacks at the time of disclosure.

For more information, visit https://blog.checkpoint.com/research/when-ai-invents-the-attack-browser-native-ransomware/

mundophone

TECH

New 4D-printing method creates lighter, faster-spinning wind turbine blades

Small, vertical wind turbines could become cheaper and more efficient, thanks to a new manufacturing technique developed by researchers at Concordia.

Using a process known as 4D printing of composites, PhD candidate Emad Fakhimi and Suong Van Hoa, professor at the Concordia Centre for Composites, aim to make small wind turbines lighter, less expensive and easier to produce.

Vertical-axis wind turbines are often used on buildings and in other urban settings, but their curved blades require specialized, complex molds that can take a long time to make while also being expensive and heavy. With this “first-of-its-kind” 4D printing method, though, the researchers are able to begin with the desired blade geometry, allowing them to work backward to determine how to best arrange and orient layers.

This allows for less expensive and more efficient production of commercial aluminum turbine blades that also weigh about 80 per cent less. Testing also showed that these blades rotated faster.

Wind turbines are one source of generators of green energy. The majority of wind turbines are horizontal axis type, with very long blades and can generate a large amount of energy. Another type of wind turbine is the vertical axis wind turbine (VAWT). These are smaller wind turbines. They are usually located on the roof of buildings. The amount of energy they generate is small but may be sufficient for energy needs in a small building. The global VAWT market size accounted for $12.9 billion in 2022 and is projected to achieve a market size of $17.7 billion by 2032, growing at a CAGR of 3.2% from 2023 to 2032. According to research conducted by the National Renewable Energy Lab (NREL) in the United States, VAWTs provide more yearly energy per unit area than horizontal axis wind turbines (HAWT).

One example of the VAWT is shown in image below. This Savonius type wind turbine is of RX-SV2 turbine from R & X Technology company in Nantong, China. The company specifications mention it exhibits a nominal power output of 200 W, a rotor diameter of 0.48 m, and a weight of 15 kg. It utilizes two sets of aluminum blades, with each set comprising five individual segments. The segments are assembled around a vertical axis, facilitated by horizontal arms. It can be observed that the blades are configured with a backward twist to reach higher performance and harvest more energy. These blades may be made by roll forming, or hydraulic pressing techniques. Either of these techniques requires a mold.

Researchers at Concordia University have developed a manufacturing technique based on 4D printing of composites that could make small wind turbines lighter, cheaper and easier to fabricate. The technology uses curved blades for vertical-axis wind turbines that are fabricated from flat panels made of carbon-fibre composites. 

This novel fabrication process resulted in blades with shapes resembling those of commercially available aluminium blades, although they weighed 80 per cent less. Laboratory tests showed that vertical-axis wind turbines with such blades rotate faster than the turbines that were equipped with aluminum blades. The researchers said that the proposed technique could lower manufacturing costs and increase the applicability of lightweight composites in renewable energy and other engineering applications.

Vertical-axis wind turbines are currently widely used in buildings and urban areas, but the manufacture of their curved blades requires special procedures and expensive moulds. This makes the fabrication process lengthy and adds additional weight to the turbines. To solve the problem, the scientists developed a one-of-a-kind “inverse” design procedure.

Instead of starting with a specific layup, which refers to the arrangement and orientation of the carbon-fibre layers, and observing the resulting shape, the scientists first designed the blade geometry and, then, figured out how the layers were supposed to be oriented to create it.

Flat carbon or epoxy laminates deform into curved shapes during cooling after being cured. The curvature is achieved through carefully engineered differences in material properties across the layers.

The final assembly of the vertical axis wind turbine blades. Credit: Polymer Composites 

80% lighter wind turbine blades made from flat panels using new 4D-printing tech...Researchers at Concordia University have developed a new way to make small wind turbines, which could make them lighter, less expensive, and easier to build. Their recent study describes a 4D printing method that turns flat carbon fiber panels into curved blades for vertical-axis wind turbines, without the need for complex molds.

Ph.D. candidate Emad Fakhimi and Professor Suong Van Hoa from the Concordia Center for Composites led the project. Their approach could make it easier to produce blades for rooftop and city wind turbines and also boost their performance.

New design method removes the need for complex molds...Vertical-axis wind turbines are becoming more common in cities because they work well in shifting winds and fit easily onto buildings. But making their curved blades has still been difficult.

Traditional manufacturing uses specialized forming processes and custom molds to achieve the desired shape. These molds make production more expensive, take more time, and add extra weight to the blades.

To solve these problems, the Concordia team developed a new “inverse” design process. Rather than starting with the carbon fiber layout and seeing what shape it made, they began by deciding on the blade shape they wanted.

They then worked backward to figure out exactly how to arrange and position the carbon fiber layers so the blade would take on the right shape during manufacturing.

The new method uses 4D printing, which means materials can change shape after they are made. The team began with flat carbon or epoxy composite sheets. After curing and cooling, these sheets bent on their own into the needed curved shape. This happens because the different layers in the composite are designed with varying properties.

By planning the layers ahead of time, the team could make turbine blades without needing extra shaping steps.

The simplified production method eliminates the need for heavy molds while maintaining the exact blade shape required for the turbines to work well.

Lightweight blades deliver stronger performance...Tests showed that the finished composite blades were very similar in shape to commercial aluminum turbine blades.

The biggest advantage came from their weight. The composite blades were 80% lighter than similar aluminum blades, making them easier to fabricate and install.

Lab tests also showed better turbine performance. Turbines with the composite blades spun faster than those with aluminum blades, which suggests the lighter design could help generate more energy in similar conditions.

The researchers believe the manufacturing approach could cut production costs for small wind turbines and help more people use lightweight renewable energy technology.

Since this method uses simple manufacturing and composite materials, it could also work for other engineering projects that need curved, lightweight parts.

Beyond renewable energy, this inverse design approach could help engineers make complex composite parts with fewer steps, using less material and lowering costs. As more industries look for lighter, more efficient structures, this new process could be a practical alternative to traditional mold-based methods.

Source: Concordia University

TECH

Google dismantles NetNut network linked to cybercrime

Disabled Google accounts and associated Google services used by NetNut for malware command and control (C2), which directly violates Google’s Terms of Service and Acceptable Use Policy. 

Google has announced a coordinated operation with the FBI and Lumen Technologies to disrupt the NetNut network, a residential proxy infrastructure associated with cybercrime activities.

According to Google, this network exploited at least 2 million home devices—including smart TVs and Android TV boxes—to route malicious traffic and mask the origin of attacks.

Google’s Threat Intelligence Group states it has blocked accounts and services used to control the operation and shared technical information with authorities and industry partners. Google Play Protect has also begun detecting and disabling applications known to incorporate SDKs linked to NetNut.

The scale of the problem is significant: in a single week in June 2026, Google identified 316 distinct groups—ranging from cybercriminals to espionage operations—using the network's exit nodes to mask their origins. Part of this infrastructure is linked to the Popa botnet, which researchers describe as a network connected to Mirai variants.

The company also warns of the risks associated with applications that promise financial gain in exchange for sharing "unused bandwidth"—a model frequently used to enroll devices in proxy networks without the user's knowledge.

Shared technical intelligence on NetNut software development kits (SDKs) and backend C2 infrastructure with platform providers, law enforcement, and research firms to help drive ecosystem-wide awareness and enforcement.

We ensured Google Play Protect, Android’s built-in security protection, automatically warned users and disabled applications known to incorporate NetNut SDKs, and the system will continue to protect users against future install attempts. These efforts to help keep the broader digital ecosystem safe supplement the protections we have to safeguard Android users on certified devices.

We believe our coordinated actions have caused significant degradation to NetNut’s proxy network and its business operations, reducing the available pool of devices for the proxy operator by millions. In addition to selling access to the network under the NetNut brand, NetNut has a robust reseller program that allows whitelabeling of its network. Google has high confidence that many popular residential proxy brands are in fact whitelabeling the NetNut botnet. While we expect this disruption to have a larger ripple effect across the residential proxy ecosystem, observations after the disruption of IPIDEA proved that individual networks can appear resilient. What we have observed is that when faced with the degradation of their own botnet, proxy operators begin buying capacity from their competitors, effectively becoming a reseller. We recognize that creating a lasting disruption in this fluid ecosystem means we must scale our efforts to target the infrastructure of several interconnected providers. We will continue to observe the composition of the NetNut network and map out how its peers adapt to this action.

NetNut is among the largest and most popular residential proxy networks. Estimating the size of residential proxy networks is extremely challenging, but Google Threat Intelligence Group (GTIG) estimates the size of the NetNut network to be at least 2 million devices, distributed across the world. Public reporting by KrebsOnSecurity and others, confirmed by Google, illustrates that NetNut populates its botnet by distributing SDKs for devices commonly found in homes, such as smart TVs and streaming boxes. GTIG has also identified NetNut botnet plugin components for large-scale botnets such as Badbox 2.0.

Residential proxy networks sell the ability to route traffic through IP addresses owned by internet service providers (ISPs), allowing attackers to mask malicious activity by hijacking these IP addresses. A robust residential proxy network requires controlling millions of residential IP addresses to sell to customers for use. To accomplish this, operators need code running on home devices to enroll them into the malicious network as exit nodes. Home devices become part of proxy networks either because they are pre-installed with malware before purchase or because users unknowingly download applications containing hidden proxy code. This creates serious risks for unsuspecting device owners, as their home IP addresses can be used by attackers as a launchpad for hacking and other unauthorized activities. Consequently, users can have their legitimate traffic flagged as suspicious, or blocked by their service providers.

In a single week during June 2026, GTIG observed 316 distinct threat clusters using suspected NetNut exit nodes, including cybercriminal and espionage groups. These bad actors can use NetNut to mask their origin IP address when accessing victim environments, accessing their own infrastructure, and conducting password spray attacks. Furthermore, when a consumer device becomes an exit node, unauthorized network traffic passes through it. This means bad actors can access other private devices on the same home network, effectively exposing them to Internet threats. Public reports by Synthient, Spur, Nokia Deepfield, and others have documented the use of NetNut to infect devices with variants of Mirai DDoS botnets.

Consumers should be extremely wary of applications that offer payment in exchange for "unused bandwidth" or "sharing your internet." These applications are primary ways for malicious proxy networks to grow, and could open security vulnerabilities on the device’s home network. We urge users to stick to official app stores, review permissions for third-party VPNs and proxies, and ensure built-in security protections like Google Play Protect are active.

Consumers should be careful when purchasing connected devices, such as set top boxes, to make sure they are from reputable manufacturers. For example, to help you confirm whether or not a device is built with the official Android TV OS and Play Protect certified, our Android TV website provides the most up-to-date list of partners. You can also take these steps to check if your Android device is Play Protect certified.

mundophone

DIGITAL LIFE

WhatsApp account hijacking spreads malware globally

A new global cybercrime campaign detected in June 2026 is using WhatsApp account hijacking to spread malicious VBScript files among trusted contacts. The threat affects users of WhatsApp Desktop and WhatsApp Web across multiple continents, with an increasing focus on the European market through the use of multiple languages, including Portuguese. By taking control of legitimate profiles, attackers bypass standard defenses that rely on user skepticism, facilitating the installation of remote monitoring and management software to gain full control over affected systems.

Attackers use previously compromised legitimate profiles to send messages containing malicious attachments to existing contacts on the platform. This approach maximizes the likelihood that the victim will open the document, as the message appears to come from a colleague or friend.

Kaspersky’s Global Research and Analysis Team (GReAT) identified the operation and confirmed that the primary objective is to compromise Windows operating systems using legitimate administrative tools configured for malicious purposes.

Initial geographic distribution revealed a high volume of infections in Asian countries—with Malaysia leading the number of recorded cases, followed by Singapore, Taiwan, and Vietnam—as well as in Brazil. However, the inclusion of metadata and scripts translated into French, German, English, and Portuguese confirms that Europe is one of the criminal group's strategic targets. The files are disguised as invoices, payment receipts, bank statements, and debt notifications to encourage users in corporate environments to open them.

The code underlying this threat hides within structured comments and metadata that mimic official Microsoft operating system components. Once activated by the user, the file executes a sequence of encoded commands via Windows Script Host, running in the background without triggering visible alerts. The initial script creates a temporary directory at the local path `C:\Users\Public\Documents` to download additional payloads from external command-and-control servers.

Fareed Radzi, a security researcher on Kaspersky’s GReAT team, explains the sophistication of the social engineering employed in this campaign.

In this campaign, attackers exploit the trust inherent in messaging platforms by using compromised WhatsApp accounts to send malicious attachments that appear to originate from known contacts, making recipients far more likely to interact with them. File names are carefully disguised as routine business documents—such as invoices and payment notices—and localized into multiple languages ​​to support a broad dissemination strategy. Once opened, they trigger a multi-stage infection chain that silently downloads and executes additional malicious components from external infrastructure.

The final phase of the attack involves the silent installation of a remote monitoring and management software package. While legitimate in corporate technical support contexts, this application grants attackers full administrative privileges, enabling the exfiltration of sensitive data, credential monitoring, and the potential introduction of ransomware into the company's internal network.

Protection against social engineering attacks requires a combination of strict filtering policies and identity validation outside the messaging platform itself. System administrators should implement local rules to prevent script execution on work computers.

Key mitigation guidelines include:

-Restricting extensions: Block the direct execution of files with .vbs, .vbe, .exe, .bat, .cmd, .js, and .ps1 extensions from public user folders.

-Software Restriction Policies (SRP): Configure Windows AppLocker or Group Policies to prevent WhatsApp Desktop from launching unauthorized subprocesses.

-Out-of-band validation: Verify the legitimacy of any invoice or document received via chat platforms through a phone call or corporate email. Network monitoring: Implement detection systems that identify unusual connections from local computers to uncatalogued external servers.

mundophone

 

TECH

6G could spell the end of apps as we use them today

The next major shift in mobile technology may not lie in faster video downloads or quicker website loading times. 6G is taking shape as a network capable of understanding context, connecting devices, and distributing artificial intelligence in real time. If predictions hold true, the way we use our phones could change profoundly by the end of this decade, with fewer apps and more digital agents acting on our behalf.

During the 2026 Mobile World Congress in Shanghai, the conversation around telecommunications took on a more ambitious tone. The industry is no longer talking solely about speed, antennas, and coverage; the focus has shifted to the convergence of artificial intelligence, advanced computing, and next-generation mobile networks.

Against this backdrop, Qualcomm unveiled a plan projecting the first commercial uses of 6G in 2029. The promise goes beyond a more powerful internet; the goal is to create the first mobile architecture with AI embedded from the network core all the way to the user's device.

Geopolitical factors are also driving pressure to accelerate this timeline. In the United States, 6G is now viewed as strategic infrastructure essential for national security, economic competitiveness, and technological influence. Pre-commercial demonstrations are expected to take place during the 2028 Los Angeles Olympic Games.

To achieve this, Qualcomm is collaborating with a network of 58 global partners, including carriers, equipment manufacturers, device makers, and companies specializing in advanced technologies.

The end of apps as we know them... The most significant shift may lie in the relationship between the user and the mobile phone. Today, almost everything relies on opening an app, tapping the screen, performing a search, or manually triggering a function. With 6G, this model may begin to fade.

The industry envisions a seamless digital environment where autonomous AI agents operate in the background. These would be far more than mere chatbots or voice assistants. They would function as systems capable of understanding needs, cross-referencing information, and acting according to the context.

Instead of opening an app to organize a schedule, find a route, compare prices, or reply to messages, the user could rely on an intelligent layer that coordinates these tasks almost invisibly.

For this to work, the network will need to support millions of digital agents operating simultaneously without overloading antennas, servers, or personal devices.

In this future, the mobile phone might cease to be the absolute center of the experience. Smartwatches, earbuds, augmented reality glasses, and personal sensors could play a decisive role.

These devices would act as the eyes and ears of the AI ​​agents. Cameras, microphones, and sensors would capture environmental information, allowing the system to understand where the user is, what they are doing, and what kind of help they need.

Interaction would no longer depend solely on the screen. Voice, gestures, eye movements, and natural commands could become the new interface.

The challenge is immense because these devices have clear physical limitations. Battery life, heat generation, weight, and size prevent complex AI models from always running locally.

Not everything will stay on the phone, nor will everything move to the cloud...The proposed solution involves a distributed computing model. Some simple tasks would be processed directly on the device, offering greater privacy and immediate response times. More complex activities would be sent to servers located near network antennas. Even more demanding requests would be sent to large data centers.

This division would allow the AI ​​to function without perceptible interruptions. A simple request could be handled on the device itself, while heavier analysis would be split between the network and the cloud.

The system would also feature layers of agents. The first would reside on the device, capturing commands and immediate data. The second would operate at the network "edge"—near the antennas—coordinating local tasks. The third would function on central servers, balancing loads and connecting larger models.

One of the most disruptive ideas behind 6G is transforming the network itself into a sort of urban radar. By analyzing radio waves reflected by objects, vehicles, and people, the infrastructure could detect movements in physical space in real time.

This would enable the creation of constantly updated digital twins of entire cities. The technology could assist with traffic management, accident prevention, drone detection, and public infrastructure maintenance.

In the industrial sector, connected robots could instantly share information about their environment. If a machine moved a part within a factory, all other machines would know about it without requiring human intervention.

Technical, financial, and regulatory obstacles remain. Countries with uneven infrastructure, such as Argentina and Brazil, will need to tackle challenges regarding investment, spectrum allocation, and the modernization of existing networks. Even so, the direction seems clear.

6G will not merely be a new generation of mobile internet. It could serve as the foundation for an era in which artificial intelligence moves beyond apps to permeate the environment, connecting objects, people, and decisions in real time.

 

mundophone

 

TECH

Compact smartphone with keyboard: Clicks Communicator featured in hands-on video

The Clicks Communicator is one of the most unusual smartphones on the market, as the device combines an almost square 4-inch touchscreen with a keyboard that also functions as a touchpad. Clicks is now showcasing the BlackBerry-style smartphone for the first time in a hands-on video.

The Clicks Communicator has been available for pre-order since spring. The smartphone, priced at $499, is expected to ship toward the end of the year. The manufacturer is now demonstrating the smartphone for the first time in a more comprehensive hands-on video that shows some of the Clicks Communicator’s more unusual features in detail.

First and foremost, the video showcases the Android skin, which displays favorite apps and widgets in a list view. Under favorites, all apps are displayed in an alphabetically sorted list. The Clicks Communicator features three microphones, high-quality stereo speakers, and a 3.5 mm headphone jack. Since communication is a priority for the manufacturer, Clicks says this also applies to call quality, even in hands-free mode.

To ensure high-quality audio, the Clicks Communicator features two speakers at the top and two front-facing ones below the keyboard, enhancing the stereo sound experience. It includes three microphones: one at the top, one on the back, and another below the keyboard. There is also a 3.5mm jack for wired headphones.

The back cover is easily removable without tools, providing access to the SIM card and the microSD card slot (supporting up to 2 TB); however, the battery is not removable, even though it is easily accessible.

At the end of the video, Jeff emphasizes that this is still a pre-production unit, so the final design will be refined based on suggestions and requests from the community. In future videos, he will demonstrate other new features, such as a touch-sensitive keyboard, a messaging hub, and more.

The keyboard has a few hidden features. In the video, Clicks only shows the fingerprint sensor, which is built into the spacebar. The shortcut button and the touchpad functionality, made possible by the keyboards touch-sensitive surface, will be demonstrated in future videos. At the very least, the video shows how the back cover can be removed without any tools to insert a SIM card or a microSD card, or to replace the battery.

Clicks confirms that everything is currently on track and that shipments are expected to begin in the fourth quarter. The smartphone is expected to stand out not only for its compact design and keyboard, but also for its support of magnetic Qi2 chargers, as well as a 50 MP main camera and a 24 MP selfie camera. However, the manufacturer has not yet provided any details about the built-in processor.

mundophone

TECH

'AI is incompatible with democracy,' says author of book on OpenAI

One aspect that has surrounded the field of artificial intelligence (AI) since the ChatGPT boom is the aura of "magical technology"—something that emerged almost spontaneously and carries promises and concerns as grand and inevitable as anything science fiction could imagine.

That is not how American journalist Karen Hao views the field. To her, it is a project with the hallmarks of an empire, consuming global resources on a massive scale to benefit a tiny elite in Silicon Valley, USA. Her research led her to conclude that AI is incompatible with democracy—a position she argued in a book that garnered significant attention last year.

She is the author of *The AI ​​Empire* (originally titled *The AI ​​Empire* in English), which details the history of the company co-founded by its current CEO, Sam Altman. A Portuguese-language edition of the book was recently released.

Her perspective stems from a unique vantage point: as the former AI editor for *MIT Technology Review* and a reporter for *The Wall Street Journal*, Hao closely followed the emergence and rise of OpenAI. In just a few years, the organization transformed from a non-profit laboratory into a company currently pursuing a $1 trillion IPO.

The book maps out the key figures, companies, technologies, dilemmas, and issues in the field. It serves as a guide to understanding how a technology that once seemed like the stuff of movies became a major driver of political, economic, cultural, and behavioral influence in recent decades.

Hao is currently in Brazil. On Tuesday (the 30th), she is participating in an event leading up to the 21st International Investigative Journalism Congress, organized by the Brazilian Association of Investigative Journalism (Abraji). The talk begins at 4:00 PM at the Camargo Guarnieri Cultural Center on the University of São Paulo (USP) campus. The event is hosted by Abraji, Editora Rocco, and GEIA (the Research Group on AI and Digital Cultures) from USP’s School of Communications and Arts. Yesterday, she met with *O Globo* at a hotel in São Paulo’s West Zone and, in addition to discussing her book, addressed some of the latest topics in the world of AI. These included data center regulations, OpenAI’s market position, Anthropic’s growing strength, the US government’s ban on advanced models, the papal encyclical, the lack of diversity in AI research, and the global influence wielded by Silicon Valley companies.

https://karendhao.com/

Read the highlights of the conversation below.

Throughout the book, Sam Altman and those around him speak as if everything regarding AI is inevitable, yet you counter that view. Is there anything about AI that is truly inevitable?

I don’t think anything is inevitable in general, but when it comes to AI, one of the things I really tried to highlight in the book is the extent to which every decision regarding ChatGPT was based on completely subjective choices. And it’s interesting when you look at OpenAI’s beginnings.

The approach they took to scaling their LLMs was seen as scientifically anomalous at the time. They adopted a brute-force, intellectually "cheap" approach that wasn't the path favored by other researchers in the field. And it was partly because they had an extraordinary amount of money that they managed to make their approach the dominant one. So, how can you say that a technology born from that kind of history is somehow inevitable?

In what ways does AI undermine democracy?

I call these companies—like OpenAI—"AI empires" because of the striking parallels they share with the empires of the past and the way they amass extraordinary economic and political power.

This happens through the dispossession of the majority. They dispossess people of their data, their land—to host these data centers—, water resources—to power and cool these centers—, as well as people's labor, future economic opportunities, and educational opportunities. And that is why the empire manages to extract an extraordinary amount of value so quickly: it extracts it without distributing it back proportionally. And the reason I believe this threatens democracy is that empires and democracy are incompatible.

Empire is founded on the idea that there is a natural hierarchy in the world—that there are superior and inferior groups—and that those at the top deserve to be there and deserve to appropriate all those resources by virtue of some divine right or natural order. Democracy, on the other hand, is based on the exact opposite premise: the idea that we are all equal and all deserve to participate collectively in determining our own future. Thus, at a purely philosophical level, there is a fundamental conflict between the ideology driving the development of the AI ​​industry and the way democratic societies are organized.

Brazil is working on legislation to attract data centers. By offering cheap renewable energy and tax incentives, the country is positioning itself as a “digital colony,” as you describe in your book. What can Brazil learn from countries like Chile, which have both welcomed and rejected data centers?

One notable trend we’ve seen over the past year is the rise of resistance to data centers worldwide. It started in Latin America—in places like Chile—and spread to the US, Europe, and Brazil. This kind of grassroots organizing is really beginning to pressure the AI ​​industry to change its approach.

For instance, OpenAI shelved Sora (its AI video generator). When they announced the product, they billed it as the most important launch since ChatGPT, yet within a few months, they had to shelve it. Grassroots organizing was the reason why. If you look at the three reasons reported for OpenAI’s decision, the first was a massive bottleneck in computing power.

The second reason was stagnant consumer demand—so, this is a case of collective consumer action. The third is that OpenAI is preparing for an IPO and facing a much more uncertain financial landscape. Wall Street is increasingly skeptical about whether the AI ​​industry can actually deliver on its promises, given the massive political and social backlash currently underway.

This is where Brazil can gain insight: by recognizing that when this kind of grassroots organizing and resistance emerges—whether against the infrastructure, the way they harvest data or intellectual property, or the psychological harm inflicted on children—it impacts the trajectory of AI development.

The US government is making it very clear that it decides who gets access to cutting-edge technology—as seen with Claude Fable. What should countries do to preserve their sovereignty while still keeping pace with the latest advancements?

There is a major question here regarding why we actually want to keep up with the latest technologies. If these latest technologies are the same ones exploiting and extracting resources from communities around the world, is it really a good thing to keep up with them? Or should we, in fact, reframe the problem regarding the rules of the game? If we were to redefine our goals—not just to chase the latest tech, but to pursue the objectives of individual communities, such as improving the cost of living, the quality of education and healthcare, and economic opportunities—you would quickly realize that we don't need any of the AI ​​technologies Silicon Valley is trying to force down people's throats.

There is a completely different set of AI technologies we should actually be developing. And there are many ways to develop these technologies without engaging in Silicon Valley's exploitative practices. This would help communities continue to progress in the true sense of the word—not just technological progress for its own sake, but human, social, and economic progress.

Right now, OpenAI is squeezed between Anthropic—which currently has the most popular platform—and SpaceX, which potentially has the capacity to build its own infrastructure. These are two things I don't see happening for OpenAI. Will the empire fall?

If we define the "AI empire" solely as OpenAI, then yes. There is a lot of pressure on OpenAI right now, and it doesn't seem to be in a very strong position. But I think the more important question is: will the AI ​​empires—plural—fall? I am actually quite hopeful about this, because I define OpenAI, Anthropic, SpaceX, Amazon, Microsoft, Google, and Meta all as AI empires. Having OpenAI cease to be an empire only for Anthropic to take its place wouldn't actually solve the core problem I see regarding the destructive and exploitative nature of AI development. What I hope happens is not merely that we keep swapping which entity acts as the dominant empire, but rather that—through grassroots organizing and resistance—we secure genuine accountability from all these empires. I want them to stop being empires and instead become companies that offer value commensurate with what they receive in return. My goal is not to put these companies out of business; it is simply to bring them back to a role where they are not excessively exploitative and do not degrade the environment. We can have companies that provide high-quality products and services without causing extraordinary amounts of damage.

This approach is incredibly circular and baffling, because when you look at what Anthropic is doing, it’s practically the same thing as OpenAI. Dario Amodei and the Anthropic executives left OpenAI, essentially copied and pasted their model, and simply rebranded themselves as the "good guys" without actually addressing the root causes of the problems. Both OpenAI and Anthropic approach AI through scaling, so you still run into the same issues regarding data privacy violations, the erosion of intellectual property, environmental damage, and harm to public health. They are essentially making minor tweaks and claiming moral superiority, when in reality, they are just another empire.

What do you make of the fact that the Pope relied on someone from Anthropic to help present his encyclical, *Magnifica Humanitas*? Leo XIV warned about the threat AI poses to human dignity, justice, and labor, yet he had a representative from one of these companies by his side.

That was a very confusing moment for me, because I found the encyclical to be an incredibly profound and beautifully written document. It discusses how AI represents a new phase of colonialism and perpetuates labor exploitation—potentially giving rise to new forms of slavery—and addresses how the AI ​​industry advances based on an ideology that assumes machines will always be superior to humans and will somehow perfect the flaws of the human species. One of my favorite lines says, "We flourish within our limitations, not despite them." Yet there was Chris Olah, an Anthropic executive, standing right alongside the Pope.

At first, I was quite disappointed and thought, "Okay, so even the Vatican—the Catholic Church—has, in a way, surrendered to these companies." But when Olah spoke, he framed the document as a critique. He didn't say, "We fully support this document." In fact, he said, "We need critics like the Pope to hold companies like Anthropic accountable." So, he framed it as an adversarial dynamic.

On one hand, Anthropic is trying to draw the Vatican closer to its sphere of power and influence, but at the same time, the Vatican is trying to do the same by keeping the AI ​​industry in check. It isn't entirely clear who actually gained more from this arrangement. Was it the AI ​​industry, or was it the Pope? In the end, perhaps the Pope managed to have the final word.

Is Artificial General Intelligence (AGI) a lie? Why isn't it discussed with the same intensity anymore?

It is a myth, in the sense that it is an incredibly compelling story that many people believe in—and one that serves a huge political purpose for these companies to justify all the destruction they cause. If they can get everyone to believe that AGI somehow exists, then they can simply go on doing whatever they want. But reality has set in, and myths only work in information vacuums. The more AI is deployed in society, and the more communities suffer the impact of its development, the more that information vacuum gets filled with actual facts about what the technology really represents—and the more that myth begins to crumble.

You argue that the scientific field of AI has lost transparency and research diversity with the rise of generative AI. How can that be regained?

The reason so much diversity has collapsed is that the AI ​​industry has become the dominant funder, even outside of the companies themselves. They are the primary funders of academic labs, while state funding accounts for a smaller share of the total.

Changing this requires a few things. One is having people with alternative visions for AI development who refuse to accept funding from these companies. New sources of funding will also be required, potentially combining state funding, foundation support, and perhaps even crowdfunding. A richer constellation of startups will also be needed. This will take time.

Restoring the diversity that was lost will require a great deal of careful effort and sacrifice, as AI researchers and other talented individuals will need to make an active choice early in their careers: forgo a $1 million compensation package to invest in a different approach to AI development.

Is there a specific area of ​​AI where you would like to see more research—beyond deep learning, machine learning, and generative AI?

Before deep learning became the primary focus of virtually all AI development, there was a field known as neuro-symbolic AI. This approach involved encoding knowledge and databases into computer systems to create a more deterministic system—one that could retrieve that knowledge and reason through the database to arrive at specific answers. While that approach had its weaknesses and was eventually sidelined due to being too slow and costly, the neuro-symbolic school of thought merges the strengths of deep learning with those of the symbolic approach. It allows a system to learn quickly from data—as deep learning does—while also incorporating fundamental rules that do not need to be learned. We already know that 1 plus 1 equals 2, so there is no need to feed the system vast amounts of data demonstrating this fact. That is part of the reason why deep learning systems are so inefficient; they essentially reinvent the wheel every time. So, I am interested in seeing more work on neuro-symbolic AI.

At the same time, within the realm of deep learning, there were other interesting avenues for making systems more efficient—reducing their consumption of data and computing power. I believe there is significant research to be done both within and outside the current paradigm to explore the new techniques and methodologies we can use to achieve the desired capabilities without relying on an extractive supply chain.

Finally, I would add that the issue isn't just how we achieve better systems, but also how we define the ultimate goal. For some time now, the industry has defined that goal as replicating human intelligence. I don’t think that’s the right goal. The aim of technological development is to complement what we cannot do, not to replace what we can do. When we got the first computers and calculators, part of why that was great was that humans can’t calculate numbers as fast as computers can. So, we offloaded that work to the computer, but there are so many other things humans can do that we would never be able to offload to a machine. Why not focus solely on developing AI systems geared toward the things we could never do ourselves, rather than trying to outdo us in every way?

Do you use AI tools? Which ones, and for what purpose?

I don’t use commercial generative AI tools. I don’t use ChatGPT, Claude, Gemini—none of them—and there are three reasons why. First, because I investigate these companies, so from an ethical standpoint, I don’t want to participate in perpetuating the harmful practices they engage in. Second, for privacy reasons. I investigate these companies, so I don’t want to hand over all my data to them. And third, because I believe that, ultimately, the strengths of my work are simply incompatible with what I would get from a generative AI tool.

However, I do use specialized AI tools. For example, one of the things I wanted to do with my book was detail how OpenAI became better capitalized after shifting from a non-profit organization to a Microsoft-funded venture, and I noticed a huge improvement in their office furnishings.

The office chairs I saw at the first location were simply very different from the ones at the next office. So, I took photos of each chair and ran them through Google Image Search—a specialized AI tool that doesn't try to generate anything and doesn't consume vast resources to perform the task. I discovered that the chairs from the old office actually cost $2,000 each, while the chairs in the newer office were by a famous Brazilian designer and cost $10,000 apiece. I included this in the book, as I felt it helped illustrate the point.

--o Globo--