g1a55er
Joined 3 years ago
Joined 3 years ago
The Commerce Clause has been read very expansively since the Wickard v. Filburn[1] in the New Deal era. One of the current legal projects of the Federalist Society, the conservative legal movement the current Supreme Court majority stems from, is rolling this back, and limiting the power of the Commerce Clause. They argue that reading the Commerce Clause so expansively coupled with modern technological/economic change gives the Federal Government effectively unchecked power to regulate behavior, which was contrary to the intention/design of the Constitution. Supporters of the current status quo argue that reading the Commerce Clause too narrowly would make the modern economy unmanageable and ungovernable. It's an open question how far the current Supreme Court will go in paring it back, but they have started narrowing parts of this doctrine.[2]
(There are no prior cases on this in the context of AI generated content in the United States, because this is the first time this offense has been charged for AI generated content in the United States. That's why it's so newsworthy and why I posted it - it's going to set some precedent, one way or another.)
I personally find the much more interesting argument here to be about obscenity. The obscenity doctrine places "obscene" speech completely outside the protection of the First Amendment. Previously, the Supreme Court ruled in Ashcroft vs FSC that for CSAM to be illegal, it must at least meet the bar for obscenity, or it must be produced via actual exploitation.[3] This is the most similar case I am aware of.
Obscenity doctrine in the United States is... a bit of a hot mess, in my humble opinion. The current test is as follows:
> The basic guidelines for the trier of fact must be: (a) whether "the average person, applying contemporary community standards" would find that the work, taken as a whole, appeals to the prurient interest; (b) whether the work depicts or describes, in a patently offensive way, sexual conduct specifically defined by the applicable state law; and (c) whether the work, taken as a whole, lacks serious literary, artistic, political, or scientific value.
To be blunt, I don't think anyone really knows what that word salad means. What are the "contemporary community standards"? Who is the "community"? What does it mean to be "patently offensive"? According to whom? The whole thing that makes exclusions to the First Amendment tenable is that they need to be really, really clear. Otherwise ambiguity in the standard leads to curtailment of expression by a chilling effect.
Furthermore, there's also this ruling[4] - that as far as I can tell is still good law - which makes it unconstitutional to ban the mere possession of obscene material. I don't think that applies here, because in this case, the defendant is alleged to have distributed the material widely. Furthermore, it also stems from a "right to privacy" the current Supreme Court is rather skeptical of.
There's not really a conclusion to all this. The main point here is that something is happening and that will probably result in interesting decisions later on.
[1] https://fedsoc.org/case/wickard-v-filburn; held that Congress could bar farmers from growing wheat on their own land for their own consumption.
[2] https://www.nlc.org/article/2023/06/15/supreme-court-decides...; limited the related Dormant Commerce Clause doctrine.
The point of (d) is to create a jurisdictional hook for the US federal government. The federal government only has power over a limited number of offenses, including "interstate commerce" related offenses, but not most normal criminal offenses, which can only be criminalized by the states. So, for the federal government to regulate it, the easiest way is to only regulate things that involve interstate commerce somehow. In this case, downloading the Stable Diffusion model over the Internet probably creates enough of a hook, and this defendant is alleged to have done much more than that, so it's probably enough.
[1] https://github.blog/2020-12-21-get-up-to-speed-with-partial-...
[2] https://github.blog/2022-06-29-improve-git-monorepo-performa...
[3] https://arstechnica.com/information-technology/2017/02/micro...
"When the administrator uses a Microsoft account to sign in, the clear key is removed, a recovery key is uploaded to the online Microsoft account..."
Microsoft does not break down requests by key disclosure, but they do say in their most recent report for 2022 H2 that they released account content for 522 requests to US criminal authorities in that half. It does not note how many accounts were included in those 522 requests.[2]
[1] https://learn.microsoft.com/en-us/windows/security/operating...
[2] https://www.microsoft.com/en-us/corporate-responsibility/law...
My argument isn't that this isn't documented. It's that it is a bit counterintuitive.
My points are:
1) It would be best if Microsoft just asked if you wanted encryption if you create a local account. This is what Apple does in this situation. I imagine a large portion of the people who are creating local accounts on Windows 11 Home are the sort that want to manage their own keys.
2) If you are in that set of people, you should double check your setting if you never thought about it before, because it's easy to miss.
"Unlike a standard BitLocker implementation, device encryption is enabled automatically so that the device is always protected... When the administrator uses a Microsoft account to sign in, the clear key is removed, a recovery key is uploaded to the online Microsoft account, and a TPM protector is created. Should a device require the recovery key, the user is guided to use an alternate device and navigate to a recovery key access URL to retrieve the recovery key by using their Microsoft account credentials."
From https://learn.microsoft.com/en-us/windows/security/operating...
This is also how it's reported in the press:
"In fact, the mechanisms to do exactly that are already in place. Windows 11 Home and Windows 11 Pro both support automatic device encryption, with the Home version a more streamlined experience. You just have to sign into the machine with a Microsoft account, which nearly all people do during setup."
From https://www.pcworld.com/article/624593/is-your-windows-11-pc...
My main point is just that if you skip this, like a lot of privacy conscious people do, you might end up inadvertently not having encryption fully enabled.