It is astonishing that the word “privacy” appears zero times in this announcement. There have been repeated controversies over exactly how Google sees just the URL I visit. Now they want to see the entire contents of multiple browser tabs?
But the security enhancements appear to be using Gemini nano which can run on device. They kind of buried that detail though.
https://store.google.com/intl/en/ideas/articles/gemini-nano-...
Not that even the strongest models are 100% effective at spotting prompt injection attacks, but they have way more of a fighting chance than Gemini nano does.
If anything a local LLM is more likely to have those problems because it's not as capable at detecting malicious tricks as a larger model.
Of course there will probably be a setting to auto-approve everything...
At a technical level the risk isn’t from the size of the model but the fact that it is open weight and anyone can use it to create an adversarial payload.
Long live private ecosystems
And yet my healthcare company's IT department insists everyone only use Chrome on work computers.
I've been bringing up the HIPAA implications of that for years, but people just look at me like I asked the dog to do algebra. All the IT department cares about is that Chrome is free.