Meta locks itself out of user data on its AI glasses
Meta extended Private Processing to AI glasses so cloud AI runs without Meta accessing user data.
Meta is extending Private Processing to its AI glasses so cloud workloads run inside confidential virtual machines intended to keep user data inaccessible to Meta, host operating systems, and hypervisors. Glasses check hardware credentials and software measurements against a public transparency ledger and refuse to connect if verification fails. Data retained for later recall is encrypted with a user-provided key and decrypted only inside a verified trusted execution environment. Meta said it is expanding its bug bounty and working with NCC Group and outside researchers on attestation and isolation.
- AI glasses offload transcription, search, and recall to confidential VMs.
- Clients attest CVM images against a public append-only transparency ledger.
- Stored data is encrypted with a user-provided key Meta cannot use alone.
- Bug bounty expanded; NCC Group and researchers are reviewing the design.
- Vendors
- Meta
From the original article
3 min read at helpnetsecurity.com
Meta is expanding Private Processing to its AI glasses, extending their security protections into cloud data centers. The system runs AI models inside confidential virtual machines (CVMs) designed to prevent Meta from accessing users’ data. Private Processing combines protected hardware, encryption and software verification to secure data during cloud processing and storage.
By Anamarija Pogorelec · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.