Outcry Over Weights & Biases' New Terms Allowing Customer Data Use for AI Training, Colorado AI Law Enjoined, AI Evaluation Firm Braintrust Confirms Security Breach

Weights & Biases' New Terms Allow Customer Data to Be Used for AI Training — Researchers Raise Concerns

Weights & Biases (wandb), the ML experiment tracking platform, is applying new service terms (Master Service Agreement) starting May 11. The new terms add a clause permitting the use of customer data (including ML models, logs, reports, and more) to "provide and improve AI features" and to "develop new products."

The previous terms explicitly stated that "customers retain all rights to customer data," but that clause has been removed. Critics have also pointed out that there is no clear distinction in how data is treated for Pro and Enterprise plans — not just for Free and Academic customers.

The r/MachineLearning community on Reddit has erupted in debate over the possibility that "my research models and logs could be used for AI training," and it remains unclear whether any opt-out mechanism exists. Weights & Biases has said it "escalated the questions to the team," but no clear explanation has been offered so far.

ML experiment tracking is a foundational tool for research workflows, and transparency around data usage goes to the heart of user trust. How this terms change plays out could also influence other AI development tools.

Federal Court Enjoins Colorado's AI Regulation Law — xAI's Free Speech Argument

A federal court has issued an injunction against Colorado's AI regulation law (SB 24-205). The ruling came after xAI raised objections based on the First Amendment (freedom of speech), effectively acknowledging that laws regulating AI-generated content may conflict with free speech protections.

The law requires transparency and accountability for high-risk decisions made by AI systems. xAI argues that AI-generated content should be protected as "speech."

This ruling could significantly shape the direction of AI regulation in the United States. While state-level AI legislation continues to gain momentum, its consistency with the federal Constitution is likely to face growing scrutiny.

AI Evaluation Startup Braintrust Confirms Security Breach — All Customers Told to Rotate Keys

Braintrust, which provides an AI model evaluation platform, has confirmed a security breach. The company has notified all customers to immediately rotate (replace) their highly sensitive API keys.

Braintrust provides benchmarking and evaluation infrastructure for AI models, which places it in a position to access customer API keys. The full scope and impact of the breach are not yet clear, but concerns are mounting over the security posture of the startups underpinning AI infrastructure.

Across the AI development toolchain, the management of API keys and model access credentials is becoming increasingly critical. This incident has underscored the difficulty of managing credentials through third-party tools — a problem that extends well beyond the AI evaluation and benchmarking space.

Snap × Perplexity's $400 Million Partnership Ends — AI Search Integration Never Materializes

It has emerged that Snap's $400 million partnership with Perplexity, announced last November, has ended "amicably." The deal had planned to integrate Perplexity's AI search engine directly into Snapchat.

Snap's spokesperson said the partnership "ended amicably," but the dissolution of a $400 million deal after only about six months suggests possible technical integration difficulties or a mismatch in business models.

Integrating AI search into social media is an area where Google and Microsoft are also active, but balancing user experience with monetization remains a notoriously difficult challenge. Perplexity itself, amid rapid growth, is believed to be reevaluating its partnerships.

Google Chrome Downloads a 4GB AI Model Without Users' Consent — Privacy and Energy Concerns

According to Tom's Hardware, Google Chrome has been downloading a roughly 4GB AI model onto devices without users' permission. Researchers point out that this practice may violate EU law, and warn that it also contributes to massive energy waste.

The model appears to be deployed for local inference to power Chrome's AI features (such as "Help me write"), but the approach of downloading large payloads without explicit consent has drawn criticism.

The impact is particularly hard to ignore on mobile connections with data caps and on devices with limited storage. While moving AI features on-device is welcomed from a privacy protection standpoint, ensuring transparency has become an urgent priority.

Is xAI Really an AI Company, or a "Neocloud"?

A TechCrunch analysis is drawing attention, arguing that xAI's center of gravity is shifting from training AI models toward building and operating data centers.

In fact, xAI's Colossus data center houses more than 220,000 NVIDIA GPUs and has signed contracts to supply computing power to external companies including Anthropic. Elon Musk's announcement that xAI would be merged into an SpaceX AI division called "SpaceXAI" also symbolizes this pivot toward the infrastructure business.

The picture of an AI company deriving revenue not only from training its own models but also from selling computing infrastructure echoes how Amazon AWS evolved from EC2 into SageMaker. As competition in the AI infrastructure market heats up, all eyes are on how xAI's strategy will reshape the industry's structure.