Live data from Hacker News

Some notes on the Stable Diffusion safety filter

vickiboykis.com

31–40 of 88 posts

Re: Some notes on the Stable Diffusion safety filter

#31

Earlier quoted context omitted.

We need to let it completely loose and get everyone exposed to it everywhere so that maybe we can finally get rid of this insane taboo and uptightness about sex and nudity we have in society.

Nudity? Yes. Pornography? No.

No rules.

Re: Some notes on the Stable Diffusion safety filter

#32

Unfortunately the safety filters have enough false positives (basically any image with a large amount of fleshy color) to the point that it's just easier to disable it and handle it manually.

And then the CSAM filter on your device reports you to some authority.

Only available on the latest iphone

Re: Some notes on the Stable Diffusion safety filter

#33
post #3

Unfortunately the safety filters have enough false positives (basically any image with a large amount of fleshy color) to the point that it's just easier to disable it and handle it manually.

That'll only work for a little while longer (for future named big-public-release models, obviously the cat's out of the bag for the current version of stable diffusion), right up until the point where they incorporate the filter into the training process. At which point, the end model users get to download will be incapable of producing anything that comes close to triggering the filter, and there will be no way to w…

Training's only prohibitively expensive for normal people today, and the dollar cost per compute operation is still decreasing fairly rapidly.

Re: Some notes on the Stable Diffusion safety filter

#34
post #9

Earlier quoted context omitted.

That problem is being solved. Pornhub now has an AI R&D unit.[1] Their current project is to upscale and colorize out of copyright vintage porn. As a training set, they use modern porn. They point out that they have access to a big training set. Next step, porn generation. [1] https://www.pornhub.com/art/remastured

For a glimpse at what’s possible: https://www.reddit.com/r/unstablediffusion https://www.reddit.com/r/aiwaifu I’ve been trying to generate tentacle porn since 2019 or so. It’s the whole reason I got into AI. We’re finally there, and it only took three years. Can’t wait to see what 2026 brings. http://n.actionsack.com/pic/media%2FFh08F_hXkAAhalt.jpg

> https://www.reddit.com/r/unstablediffusion

This subreddit was banned due to a violation of Reddit's rules against non-consensual intimate media.

Interesting. Why "non-consensual"? Does it mean Stable Diffusion generated porn of people who actually exist?

Re: Some notes on the Stable Diffusion safety filter

#35

Earlier quoted context omitted.

We need to let it completely loose and get everyone exposed to it everywhere so that maybe we can finally get rid of this insane taboo and uptightness about sex and nudity we have in society.

Nudity? Yes. Pornography? No.

Football? Yes. Violence? No.

Try getting that rule passed on any form of media.

Re: Some notes on the Stable Diffusion safety filter

#36
post #34

Earlier quoted context omitted.

For a glimpse at what’s possible: https://www.reddit.com/r/unstablediffusion https://www.reddit.com/r/aiwaifu I’ve been trying to generate tentacle porn since 2019 or so. It’s the whole reason I got into AI. We’re finally there, and it only took three years. Can’t wait to see what 2026 brings. http://n.actionsack.com/pic/media%2FFh08F_hXkAAhalt.jpg

> https://www.reddit.com/r/unstablediffusion This subreddit was banned due to a violation of Reddit's rules against non-consensual intimate media. Interesting. Why "non-consensual"? Does it mean Stable Diffusion generated porn of people who actually exist?

Yes, reddit routinely bans deepfake subreddits. In practice, this means any net that can produce output that looks like any living person is banned.

Re: Some notes on the Stable Diffusion safety filter

#37
post #4

> Using the model to generate content that is cruel to individuals is a misuse of this model. This includes, but is not limited to: ... >+ Sexual content without consent of the people who might see it I understand that it's their TOS and they can put pretty much anything in there, but this item seems... odd. I don't really know why exactly this stands out to me. Maybe it's because it's practically un-enforceable? Are…

We need to let it completely loose and get everyone exposed to it everywhere so that maybe we can finally get rid of this insane taboo and uptightness about sex and nudity we have in society.

>insane taboo and uptightness about sex and nudity we have in society //

In the UK we're on aggregate definitely too uptight about nudity, but sex ... inhibition towards things like infidelity, promiscuity, fecundity, seems like a relatively good thing. Sex being the preserve of committed relationships is not a problem to fix to my view.

It sounds like you think we should basically be bonobos? Preoccupied with carnal interactions to the exclusion of all else?

Re: Some notes on the Stable Diffusion safety filter

#38

Earlier quoted context omitted.

If you have things on your device that match entries in the CSAM database, yes there's a chance you're a victim of a targeted attack taking advantage of highly experimental collisions... but the odds you "accidentally generated" that content are not realistic.

>not realistic The odds are zero. 1/2^256 = 0. In cryptography these odds are treated as zero until you generate close to 2^128 images. Unfortunately there's no word in natural English to describe how unlikely. The most precise is "zero".

How can you be so sure? As I understand it, the hash is of features in the image and not the image itself. Are the CSAM feature detection heuristics public?

Re: Some notes on the Stable Diffusion safety filter

#39

Earlier quoted context omitted.

If you have things on your device that match entries in the CSAM database, yes there's a chance you're a victim of a targeted attack taking advantage of highly experimental collisions... but the odds you "accidentally generated" that content are not realistic.

>not realistic The odds are zero. 1/2^256 = 0. In cryptography these odds are treated as zero until you generate close to 2^128 images. Unfortunately there's no word in natural English to describe how unlikely. The most precise is "zero".

Are you assuming that digital images are evenly distributed over the set of all possible 256 bit vectors?

Because I don't think that's a reasonable assumption.

Even if image recognition was perfectly solved with no known edge cases (ha!), when an entire topic is a semantic stop-sign for most people, you can't expect the mysterious opaque box that is a guilty-enough-to-investigate detection mechanism to be something that gets rapid updates and corrections when new failure modes are discovered.

Re: Some notes on the Stable Diffusion safety filter

#40
post #7

Earlier quoted context omitted.

I think the issue they're mainly worried about might be exemplified with a prompt of 'my little pony'. A children's show with quite a lot of adult imagery associated with it on the internet. A child entering this prompt is probably expecting one thing, but the internet is filled with pictures of another nature. There are possibly more adult 'my little pony' images than screenshots of the show on the internet. Did the…

A child entering this prompt is probably expecting one thing, but the internet is filled with pictures of another nature. There are possibly more adult 'my little pony' images than screenshots of the show on the internet. So everyone has to have gimpy AI just because parents can't be expected to take responsibility for what their child does and does not see? Why the fuck is a child being allowed to play with somethin…

I would recommend looking more closely at the article.

Stability.ai, the company who developed and released the model being discussed, have not added a safety filter to the model. As the article points out, the filter is specifically implemented by HuggingFace's Diffusers library, which is a popular library for working with diffusion models (but again, to be clear, not the only option for using Stable Diffusion). The library is also open source, and turning off the safety filter would be trivial if you felt compelled to do so.

So, "these tech companies" aren't overcome by glee over censoring you. One company implemented one filter in one open source and easily editable library.

Post reply on HN