Events and news relevant to the Laboratory for Foundations of Computer Science

[Sherrie Shen <sherrie.shen@ed.ac.uk>]

BEGIN:VCALENDAR
METHOD:REQUEST
PRODID:Microsoft Exchange Server 2010
VERSION:2.0
BEGIN:VTIMEZONE
TZID:GMT Standard Time
BEGIN:STANDARD
DTSTART:16010101T020000
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=-1SU;BYMONTH=10
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:16010101T010000
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
RRULE:FREQ=YEARLY;INTERVAL=1;BYDAY=-1SU;BYMONTH=3
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
ORGANIZER;CN=Sherrie Shen:mailto:sherrie.shen@ed.ac.uk
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=Lawrence P
 iao:mailto:Lawrence.Piao@ed.ac.uk
ATTENDEE;ROLE=REQ-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=Adam Harri
 son:mailto:A.Harrison-15@sms.ed.ac.uk
ATTENDEE;ROLE=OPT-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=inf-semina
 rs@mlist.is.ed.ac.uk:mailto:inf-seminars@mlist.is.ed.ac.uk
ATTENDEE;ROLE=OPT-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=ilcc-membe
 rs:mailto:ilcc-members@inf.ed.ac.uk
ATTENDEE;ROLE=OPT-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=aiai-membe
 rs@inf.ed.ac.uk:mailto:aiai-members@inf.ed.ac.uk
ATTENDEE;ROLE=OPT-PARTICIPANT;PARTSTAT=NEEDS-ACTION;RSVP=TRUE;CN=lfcs-inter
 est@mlist.is.ed.ac.uk:mailto:lfcs-interest@mlist.is.ed.ac.uk
DESCRIPTION;LANGUAGE=en-US:The next AI Safety Hub reading group will be tak
 ing place today in G.158 - Quad Teaching Room (Old College).\n\nTitle: “
 Abuse Risks are Often Inherent to Product Features”: Exploring AI Vendor
 s’ Bug Bounty and Responsible Disclosure Policies\n\nSpeaker: Lawrence P
 iao\n\nAbstract: As vendors adopt AI technologies\, security researchers a
 re working to uncover and fix related vulnerabilities\, which is important
  given AI systems handle sensitive data and critical functions. This proce
 ss relies on vendors receiving and rewarding AI vulnerability reports. To 
 assess current practices\, we analyzed the vulnerability disclosure polici
 es of 264 AI vendors. We employed a mixed-methods approach\, combining sna
 pshot and longitudinal qualitative analysis\, as well as comparing alignme
 nt with 320 AI incidents and 260 academic articles. Our analysis reveals t
 hat 36% of AI vendors have no established policy\, and only 18% mention AI
  risks. Data access\, authorization\, and model extraction vulnerabilities
  are most consistently declared in-scope. Jailbreaking and hallucination a
 re most commonly declared out-of-scope. We identify three profiles that re
 flect vendors' different positions toward AI vulnerabilities: proactive cl
 arification (n = 46)\, silent (n = 115)\, and restrictive (n = 103). Our a
 lignment results suggest that vendors may address AI vulnerability disclos
 ure later than academic research and real-world incidents.\n\nPaper Link: 
 https://arxiv.org/abs/2509.06136\n\nTeams meeting: https://teams.microsoft
 .com/l/meetup-join/19%3Ameeting_NWRkMjVjN2ItOTY5My00ZTY4LWEyNGQtMThmZTU2M2
 U3NjQx%40thread.v2/0?context=%7B%22Tid%22%3A%222e9f06b0-1669-4589-8789-10a
 06934dc61%22%2C%22Oid%22%3A%22e0f73f04-7a9f-404a-b597-700b0a2315b7%22%7D\n
 \nAll the best\,\nSherrie\nThe University of Edinburgh is a charitable bod
 y\, registered in Scotland\, with registration number SC005336. Is e buidh
 eann carthannais a th’ ann an Oilthigh Dhùn Èideann\, clàraichte an A
 lba\, àireamh clàraidh SC005336.\n
UID:040000008200E00074C5B7101A82E00800000000FB04816F30DDDC01000000000000000
 010000000C91C22045F137C45820356D2F4AB6F94
SUMMARY;LANGUAGE=en-US:[AISHED] Lawrence Piao - “Abuse Risks are Often In
 herent to Product Features”: Exploring AI Vendors’ Bug Bounty and Resp
 onsible Disclosure Policies 
DTSTART;TZID=GMT Standard Time:20260506T173000
DTEND;TZID=GMT Standard Time:20260506T193000
CLASS:PUBLIC
PRIORITY:5
DTSTAMP:20260506T081504Z
TRANSP:OPAQUE
STATUS:CONFIRMED
SEQUENCE:0
LOCATION;LANGUAGE=en-US:G.158 - Quad Teaching Room (Old College)
X-MICROSOFT-CDO-APPT-SEQUENCE:0
X-MICROSOFT-CDO-OWNERAPPTID:2124755588
X-MICROSOFT-CDO-BUSYSTATUS:TENTATIVE
X-MICROSOFT-CDO-INTENDEDSTATUS:BUSY
X-MICROSOFT-CDO-ALLDAYEVENT:FALSE
X-MICROSOFT-CDO-IMPORTANCE:1
X-MICROSOFT-CDO-INSTTYPE:0
X-MICROSOFT-ONLINEMEETINGEXTERNALLINK:
X-MICROSOFT-ONLINEMEETINGCONFLINK:
X-MICROSOFT-DONOTFORWARDMEETING:FALSE
X-MICROSOFT-DISALLOW-COUNTER:FALSE
X-MICROSOFT-REQUESTEDATTENDANCEMODE:DEFAULT
X-MICROSOFT-ISRESPONSEREQUESTED:TRUE
X-MICROSOFT-LOCATIONDISPLAYNAME:G.158 - Quad Teaching Room (Old College)
X-MICROSOFT-LOCATIONSOURCE:None
X-MICROSOFT-LOCATIONS:[{"DisplayName":"G.158 - Quad Teaching Room (Old Coll
 ege)"\,"LocationAnnotation":""\,"LocationUri":""\,"LocationStreet":""\,"Lo
 cationCity":""\,"LocationState":""\,"LocationCountry":""\,"LocationPostalC
 ode":""\,"LocationFullAddress":""}]
BEGIN:VALARM
DESCRIPTION:REMINDER
TRIGGER;RELATED=START:-PT15M
ACTION:DISPLAY
END:VALARM
END:VEVENT
END:VCALENDAR