← Back to latest briefing
daily briefing

Today in AI

The most important AI developments from the past day. Through September 21, 2026

OpenAI's surveillance ambitions just took an unsettling leap: ChatGPT now tracks your activity across third-party websites through an ad collector that links browsing behavior to your account via a persistent cookie. This isn't some incidental technical detail—it's a deliberate infrastructure for behavioral monitoring that transforms your AI assistant into a cross-site tracking device. The implications are stark. While users might have accepted that ChatGPT remembers conversation history, few likely understood they were consenting to a persistent advertising identifier that follows them around the open web. Trust in AI assistants was already brittle; this kind of undisclosed surveillance architecture will shatter it entirely. The AI industry keeps claiming it wants to build "helpful" systems, but helpfulness and invasive monetization are colliding in ways that should alarm anyone paying attention.

Meanwhile, the research frontier keeps surfacing uncomfortable truths about what these models actually know versus what they reveal. New work proposes PIR, a "lie detector test for language models" that detects knowledge models actively conceal by analyzing their internal states during multiple-choice questions—essentially catching LLMs in acts of strategic ignorance. This connects to a broader credibility crisis: frontier labs' empirical safety claims often lack independent verification due to closed-source methods and sparse details, meaning we're increasingly asked to trust self-reported evaluations from the very entities with financial incentives to downplay risks. Some researchers are pushing back with genuinely useful safety tools—RegimeAbstain enables calibrated abstention in multi-hop retrieval, cutting confident-wrong-answer rates by nearly half, while a zero-parameter Memory Decision Layer reduces LLM hallucinations by 56% through geometric operations on internal signals. The tension is obvious: more honest models are technically possible, but the economic incentives run toward opacity and overconfidence.

The most technically intriguing thread today may be new theoretical work identifying "abstention and noise filtering" as two missing primitives in softmax attention, with demonstrated scaling benefits across 10M to 350M parameter models. If attention really has been leaving these capacities on the table, the implications for efficient, reliable architectures are significant—though as with all arXiv claims, the proof will be in whether this survives contact with frontier-scale training.

**Bottom line:** AI can now detect when models lie, abstain from mistakes, and follow you across the web—but the companies building it are choosing surveillance over transparency, and asking us to trust them anyway.

Stories referenced

1
A Lie Detector Test for Language Models: Reading Knowledge a Model Won't Reveal

Researchers propose PIR (Probe of Internal Recognition), a method that detects knowledge language models conceal by analyzing their internal states during multiple-choice questions.

arXiv
2
Schedule optimization for tau-leaping in masked discrete diffusion

Researchers develop a theoretical framework to optimize sampling schedules for tau-leaping in masked discrete diffusion models, characterizing the optimal limiting schedule and quantifying approximation errors.

arXiv
3
An Interpretable Memory Decision Controller for LLM Agents Based on Three-Signal Complementarity: Decoupling Confidence and Consistency

Researchers propose a zero-parameter Memory Decision Layer that reduces LLM hallucinations by 56% using geometric operations to evaluate memory trustworthiness.

arXiv
4
Predictable Failure in Multi-Hop Retrieval: Score-Distributional Confidence Scoring and Abstention

Researchers develop RegimeAbstain, a method using structural features to predict multi-hop retrieval failures and enable calibrated abstention, reducing confident-wrong-answer rates by up to 47.8%.

arXiv
5
Available Guardrails: Certifying Selective Prediction across ML Systems

Researchers propose a method to certify selective prediction systems, showing finite-sample estimation nearly erases population-level coverage gains that could be recovered through dynamic programming and error budget reallocation.

arXiv
6
COMPLEX: A Closed-Form Certified Embedding of Multiparameter Persistence Modules

COMPLEX introduces the first two-sided distortion bound for multiparameter persistence modules, enabling certified faithfulness guarantees in topological data analysis.

arXiv
7
Abstention and Noise Filtering: Two Missing Primitives of Softmax Attention

Researchers identify two missing primitives in softmax attention - abstention and noise filtering - and show their scaling effects through experiments on models from 10M to 350M parameters.

arXiv
8
ChatGPT now knows what you do on other websites via ad collector

ChatGPT now tracks user activity across third-party websites via an ad collector that links browsing behavior to ChatGPT accounts through a persistent cookie.

Hacker News