A brand new research paper recommends that web users be issued with credentials to prove that they’re human as AI becomes increasingly indistinguishable from real people.
The paper, authored by researchers from OpenAI, Microsoft, MIT, and others, comes at a time when the “dead web theory” is becoming increasingly more believable. That theory suggests that nearly all of online interactions and content are generated by bots.
It’s described as a conspiracy theory, however the authors of this latest paper seem convinced it could occur if it hasn’t already done so. The paper notes that “ highly capable AI systems may change the landscape: There is a considerable risk that, without further mitigations, deceptive AI-powered activity could overwhelm the Internet.”
Distinguishing AI-powered users on the Internet is becoming increasingly difficult. AI can generate human-like content that sounds perfectly conversational and human-like avatars in image or video form.
AI agents are improving at browsing web sites like an peculiar user, making sophisticated plans to realize goals, and even solving CAPTCHAs when challenged.
The second problem the paper identifies is scalability. AI models have gotten more powerful, cheaper, and increasingly available. AI has made online deception by malicious actors easy to do at scale, especially if you have got an open-weight model.
The paper notes the researchers’ concern, “We are concerned that the Internet is inadequately prepared for the challenges highly capable AI may pose.”
Personhood credentials
The researchers propose issuing web users with what they call “personhood credentials”, or PHCs. These credentials may be stored digitally on a holder’s devices and can be used to prove personhood when signing up for a web-based service like an email address or account on X.
Various organizations, governmental or otherwise, could function issuers of the credentials. While the paper doesn’t go into detail on how this might work, it suggests one possible implementation where a PHC might be issued to any holder of a tax identification number.
The enrollment and usage process for the personhood credentials. Source: arXiv
Verifying the credentials might be done using zero-knowledge proofs in order that no features of the person’s identity are tied to the PHC. The idea is that you possibly can prove to a web-based service provider that you simply are human but still retain anonymity.
If PHCs were rolled out you’d see an end to “sockpuppeting” just like the hundreds of bots pretending to be people on X and other platforms. The proposed solution would also prevent a single user from creating multiple accounts on a platform that might then be utilized in large-scale bot attacks.
Risks and challenges
If we now have come to a degree where we want a company to issue us with credentials that prove we’re human, then we’re well into Blade Runner territory. The PHC idea could cut down on the AI bot problem but comes with other challenges.
How would equitable access be ensured? If you’re not in a position to physically visit a PHC issuer you possibly can end up unable to make use of the web, or not less than enroll for online accounts.
Even though the PHC wouldn’t reveal your identity online, your issuer would have that info. How comfortable would you’re feeling about speaking your mind online when you weren’t sure your anonymity might be preserved?
Suppose an issuer of the PHC is just not a democratically elected government with checks on its powers and accountability. Might it resolve to withhold a PHC from someone who was critical of it?
The researchers acknowledge that a “PHC system, like several digital system, is vulnerable to attacks and exploits by multiple actors—most notably, subversion by the issuer itself, by service providers, and by users with malicious intent.”
Not too way back we thought that CAPTCHAs, selfies, or a video call were sufficient to prove that an actual live human was on the opposite end of a web-based interaction. AI has put an end to that.
We need a greater solution, but applying to a company for “proof of personhood” seems very Orwellian.
