Media
Preference-based learning for news headline recommendation
Bouras, Alexandre, Durand, Audrey, Khoury, Richard
This study explores strategies for optimizing news headline recommendations through preference-based learning. Using real-world data of user interactions with French-language online news posts, we learn a headline recommender agent under a contextual bandit setting. This allows us to explore the impact of translation on engagement predictions, as well as the benefits of different interactive strategies on user engagement during data collection. Our results show that explicit exploration may not be required in the presence of noisy contexts, opening the door to simpler but efficient strategies in practice.
RAID: A Dataset for Testing the Adversarial Robustness of AI-Generated Image Detectors
Eddoubi, Hicham, Ricker, Jonas, Cocchi, Federico, Baraldi, Lorenzo, Sotgiu, Angelo, Pintor, Maura, Cornia, Marcella, Baraldi, Lorenzo, Fischer, Asja, Cucchiara, Rita, Biggio, Battista
AI-generated images have reached a quality level at which humans are incapable of reliably distinguishing them from real images. To counteract the inherent risk of fraud and disinformation, the detection of AI-generated images is a pressing challenge and an active research topic. While many of the presented methods claim to achieve high detection accuracy, they are usually evaluated under idealized conditions. In particular, the adversarial robustness is often neglected, potentially due to a lack of awareness or the substantial effort required to conduct a comprehensive robustness analysis. In this work, we tackle this problem by providing a simpler means to assess the robustness of AI-generated image detectors. We present RAID (Robust evaluation of AI-generated image Detectors), a dataset of 72k diverse and highly transferable adversarial examples. The dataset is created by running attacks against an ensemble of seven state-of-the-art detectors and images generated by four different text-to-image models. Extensive experiments show that our methodology generates adversarial images that transfer with a high success rate to unseen detectors, which can be used to quickly provide an approximate yet still reliable estimate of a detector's adversarial robustness. Our findings indicate that current state-of-the-art AI-generated image detectors can be easily deceived by adversarial examples, highlighting the critical need for the development of more robust methods. We release our dataset at https://huggingface.co/datasets/aimagelab/RAID and evaluation code at https://github.com/pralab/RAID.
MINT: Multimodal Instruction Tuning with Multimodal Interaction Grouping
Shan, Xiaojun, Cao, Qi, Han, Xing, Yu, Haofei, Liang, Paul Pu
Recent advances in multimodal foundation models have achieved state-of-the-art performance across a range of tasks. These breakthroughs are largely driven by new pre-training paradigms that leverage large-scale, unlabeled multimodal data, followed by instruction fine-tuning on curated labeled datasets and high-quality prompts. While there is growing interest in scaling instruction fine-tuning to ever-larger datasets in both quantity and scale, our findings reveal that simply increasing the number of instruction-tuning tasks does not consistently yield better performance. Instead, we observe that grouping tasks by the common interactions across modalities, such as discovering redundant shared information, prioritizing modality selection with unique information, or requiring synergistic fusion to discover new information from both modalities, encourages the models to learn transferrable skills within a group while suppressing interference from mismatched tasks. To this end, we introduce MINT, a simple yet surprisingly effective task-grouping strategy based on the type of multimodal interaction. We demonstrate that the proposed method greatly outperforms existing task grouping baselines for multimodal instruction tuning, striking an effective balance between generalization and specialization.
A Comprehensive Survey in LLM(-Agent) Full Stack Safety: Data, Training and Deployment
Wang, Kun, Zhang, Guibin, Zhou, Zhenhong, Wu, Jiahao, Yu, Miao, Zhao, Shiqian, Yin, Chenlong, Fu, Jinhu, Yan, Yibo, Luo, Hanjun, Lin, Liang, Xu, Zhihao, Lu, Haolang, Cao, Xinye, Zhou, Xinyun, Jin, Weifei, Meng, Fanci, Xu, Shicheng, Mao, Junyuan, Wang, Yu, Wu, Hao, Wang, Minghe, Zhang, Fan, Fang, Junfeng, Qu, Wenjie, Liu, Yue, Liu, Chengwei, Zhang, Yifan, Li, Qiankun, Guo, Chongye, Qin, Yalan, Fan, Zhaoxin, Wang, Kai, Ding, Yi, Hong, Donghai, Ji, Jiaming, Lai, Yingxin, Yu, Zitong, Li, Xinfeng, Jiang, Yifan, Li, Yanhui, Deng, Xinyu, Wu, Junlin, Wang, Dongxia, Huang, Yihao, Guo, Yufei, Huang, Jen-tse, Wang, Qiufeng, Jin, Xiaolong, Wang, Wenxuan, Liu, Dongrui, Yue, Yanwei, Huang, Wenke, Wan, Guancheng, Chang, Heng, Li, Tianlin, Yu, Yi, Li, Chenghao, Li, Jiawei, Bai, Lei, Zhang, Jie, Guo, Qing, Wang, Jingyi, Chen, Tianlong, Zhou, Joey Tianyi, Jia, Xiaojun, Sun, Weisong, Wu, Cong, Chen, Jing, Hu, Xuming, Li, Yiming, Wang, Xiao, Zhang, Ningyu, Tuan, Luu Anh, Xu, Guowen, Zhang, Jiaheng, Zhang, Tianwei, Ma, Xingjun, Gu, Jindong, Pang, Liang, Wang, Xiang, An, Bo, Sun, Jun, Bansal, Mohit, Pan, Shirui, Lyu, Lingjuan, Elovici, Yuval, Kailkhura, Bhavya, Yang, Yaodong, Li, Hongwei, Xu, Wenyuan, Sun, Yizhou, Wang, Wei, Li, Qing, Tang, Ke, Jiang, Yu-Gang, Juefei-Xu, Felix, Xiong, Hui, Wang, Xiaofeng, Tao, Dacheng, Yu, Philip S., Wen, Qingsong, Liu, Yang
The remarkable success of Large Language Models (LLMs) has illuminated a promising pathway toward achieving Artificial General Intelligence for both academic and industrial communities, owing to their unprecedented performance across various applications. As LLMs continue to gain prominence in both research and commercial domains, their security and safety implications have become a growing concern, not only for researchers and corporations but also for every nation. Currently, existing surveys on LLM safety primarily focus on specific stages of the LLM lifecycle, e.g., deployment phase or fine-tuning phase, lacking a comprehensive understanding of the entire "lifechain" of LLMs. To address this gap, this paper introduces, for the first time, the concept of "full-stack" safety to systematically consider safety issues throughout the entire process of LLM training, deployment, and eventual commercialization. Compared to the off-the-shelf LLM safety surveys, our work demonstrates several distinctive advantages: (I) Comprehensive Perspective. We define the complete LLM lifecycle as encompassing data preparation, pre-training, post-training, deployment and final commercialization. To our knowledge, this represents the first safety survey to encompass the entire lifecycle of LLMs. (II) Extensive Literature Support. Our research is grounded in an exhaustive review of over 800+ papers, ensuring comprehensive coverage and systematic organization of security issues within a more holistic understanding. (III) Unique Insights. Through systematic literature analysis, we have developed reliable roadmaps and perspectives for each chapter. Our work identifies promising research directions, including safety in data generation, alignment techniques, model editing, and LLM-based agent systems. These insights provide valuable guidance for researchers pursuing future work in this field.
London AI firm says Getty copyright case poses 'overt threat' to industry
Stability allows users to generate images using text prompts, and its directors include James Cameron, the Oscar-winning film director of Avatar and Titanic. But Getty called the people who were training the AI system "a bunch of tech geeks" and claimed they were indifferent to the problems their innovation might create. Stability countered by alleging that Getty was using "fanciful" legal routes and spending approximately 10m to fight a technology it feared was "an existential threat" to its business. As a result the program, called Stability Diffusion, outputs images with Getty Images watermarks still on them. Getty alleges that Stability was "completely indifferent to what they fed into the training data".
The Download: an inspiring toy robot arm, and why AM radio matters
As a child of an electronic engineer, I spent a lot of time in our local Radio Shack as a kid. While my dad was locating capacitors and resistors, I was in the toy section. It was there, in 1984, that I discovered the best toy of my childhood: the Armatron robotic arm. Described as a "robot-like arm to aid young masterminds in scientific and laboratory experiments," it was a legit robotic arm. And the bold look and function of Armatron made quite an impression on many young kids who would one day have a career in robotics.
Movie Facts and Fibs (MF$^2$): A Benchmark for Long Movie Understanding
Zaranis, Emmanouil, Farinhas, Antรณnio, Santos, Saul, Canaverde, Beatriz, Ramos, Miguel Moura, Surikuchi, Aditya K, Viveiros, Andrรฉ, Liao, Baohao, Bueno-Benito, Elena, Sivakumaran, Nithin, Vasylenko, Pavlo, Yu, Shoubin, Sannigrahi, Sonal, Mohammed, Wafaa, Peters, Ben, Villegas, Danae Sรกnchez, Stengel-Eskin, Elias, Attanasio, Giuseppe, Yoon, Jaehong, Frank, Stella, Suglia, Alessandro, Zerva, Chrysoula, Elliott, Desmond, Dimiccoli, Mariella, Bansal, Mohit, Lanz, Oswald, Bernardi, Raffaella, Fernรกndez, Raquel, Pezzelle, Sandro, Niculae, Vlad, Martins, Andrรฉ F. T.
Despite recent progress in vision-language models (VLMs), holistic understanding of long-form video content remains a significant challenge, partly due to limitations in current benchmarks. Many focus on peripheral, ``needle-in-a-haystack'' details, encouraging context-insensitive retrieval over deep comprehension. Others rely on large-scale, semi-automatically generated questions (often produced by language models themselves) that are easier for models to answer but fail to reflect genuine understanding. In this paper, we introduce MF$^2$, a new benchmark for evaluating whether models can comprehend, consolidate, and recall key narrative information from full-length movies (50-170 minutes long). MF$^2$ includes over 50 full-length, open-licensed movies, each paired with manually constructed sets of claim pairs -- one true (fact) and one plausible but false (fib), totalling over 850 pairs. These claims target core narrative elements such as character motivations and emotions, causal chains, and event order, and refer to memorable moments that humans can recall without rewatching the movie. Instead of multiple-choice formats, we adopt a binary claim evaluation protocol: for each pair, models must correctly identify both the true and false claims. This reduces biases like answer ordering and enables a more precise assessment of reasoning. Our experiments demonstrate that both open-weight and closed state-of-the-art models fall well short of human performance, underscoring the relative ease of the task for humans and their superior ability to retain and reason over critical narrative information -- an ability current VLMs lack.
PersonaAgent: When Large Language Model Agents Meet Personalization at Test Time
Zhang, Weizhi, Zhang, Xinyang, Zhang, Chenwei, Yang, Liangwei, Shang, Jingbo, Wei, Zhepei, Zou, Henry Peng, Huang, Zijie, Wang, Zhengyang, Gao, Yifan, Pan, Xiaoman, Xiong, Lian, Liu, Jingguo, Yu, Philip S., Li, Xian
Large Language Model (LLM) empowered agents have recently emerged as advanced paradigms that exhibit impressive capabilities in a wide range of domains and tasks. Despite their potential, current LLM agents often adopt a one-size-fits-all approach, lacking the flexibility to respond to users' varying needs and preferences. This limitation motivates us to develop PersonaAgent, the first personalized LLM agent framework designed to address versatile personalization tasks. Specifically, PersonaAgent integrates two complementary components - a personalized memory module that includes episodic and semantic memory mechanisms; a personalized action module that enables the agent to perform tool actions tailored to the user. At the core, the persona (defined as unique system prompt for each user) functions as an intermediary: it leverages insights from personalized memory to control agent actions, while the outcomes of these actions in turn refine the memory. Based on the framework, we propose a test-time user-preference alignment strategy that simulate the latest n interactions to optimize the persona prompt, ensuring real-time user preference alignment through textual loss feedback between simulated and ground-truth responses. Experimental evaluations demonstrate that PersonaAgent significantly outperforms other baseline methods by not only personalizing the action space effectively but also scaling during test-time real-world applications. These results underscore the feasibility and potential of our approach in delivering tailored, dynamic user experiences.
Phonetically-Augmented Discriminative Rescoring for Voice Search Error Correction
Van Gysel, Christophe, Wu, Maggie, Verwimp, Lyan, Tirkaz, Caglar, Bertola, Marco, Lei, Zhihong, Oualil, Youssef
End-to-end (E2E) Automatic Speech Recognition (ASR) models are trained using paired audio-text samples that are expensive to obtain, since high-quality ground-truth data requires human annotators. Voice search applications, such as digital media players, leverage ASR to allow users to search by voice as opposed to an on-screen keyboard. However, recent or infrequent movie titles may not be sufficiently represented in the E2E ASR system's training data, and hence, may suffer poor recognition. In this paper, we propose a phonetic correction system that consists of (a) a phonetic search based on the ASR model's output that generates phonetic alternatives that may not be considered by the E2E system, and (b) a rescorer component that combines the ASR model recognition and the phonetic alternatives, and select a final system output. We find that our approach improves word error rate between 4.4 and 7.6% relative on benchmarks of popular movie titles over a series of competitive baselines.
Generating Grounded Responses to Counter Misinformation via Learning Efficient Fine-Grained Critiques
Xu, Xiaofei, Zhang, Xiuzhen, Deng, Ke
Fake news and misinformation poses a significant threat to society, making efficient mitigation essential. However, manual fact-checking is costly and lacks scalability. Large Language Models (LLMs) offer promise in automating counter-response generation to mitigate misinformation, but a critical challenge lies in their tendency to hallucinate non-factual information. Existing models mainly rely on LLM self-feedback to reduce hallucination, but this approach is computationally expensive. In this paper, we propose MisMitiFact, Misinformation Mitigation grounded in Facts, an efficient framework for generating fact-grounded counter-responses at scale. MisMitiFact generates simple critique feedback to refine LLM outputs, ensuring responses are grounded in evidence. We develop lightweight, fine-grained critique models trained on data sourced from readily available fact-checking sites to identify and correct errors in key elements such as numerals, entities, and topics in LLM generations. Experiments show that MisMitiFact generates counter-responses of comparable quality to LLMs' self-feedback while using significantly smaller critique models. Importantly, it achieves ~5x increase in feedback generation throughput, making it highly suitable for cost-effective, large-scale misinformation mitigation. Code and LLM prompt templates are at https://github.com/xxfwin/MisMitiFact.