特別節目·中文精讀

邁克爾·卡恩斯:機器學習中的演算法公平、偏見、隱私與倫理

Michael Kearns: Algorithmic Fairness, Bias, Privacy, and Ethics in Machine Learning

討論演算法歧視與資料隱私的成因,以及如何用技術與社會手段約束機器學習帶來的倫理問題。

官方音訊00:00 / --:--
中文精讀由 AI 基於原始訪談改寫,非官方翻譯,可能存在偏差或錯誤;表述以原音訊與官方文稿為準。說明

2019 年,賓夕法尼亞大學教授邁克爾·卡恩斯(Michael Kearns)和合著者亞倫·羅斯(Aaron Roth)出了一本書,叫《倫理演算法》(The Ethical Algorithm)。書裡擺著一個已經被證明的結論:三條各自看起來都站得住腳的公平要求,數學上不可能同時滿足。

它比“機器人會不會接管世界”現實得多,就橫在每一個想給貸款模型、量刑模型、招聘模型加上公平約束的工程師面前。

卡恩斯本人的路徑也挺有意思。他本科進校時是英語專業,後來轉去學數學和計算機,在哈佛跟萊斯·瓦利安特(Les Valiant)讀博士,做機器學習理論、博弈論、演算法交易,還和費城聯儲合辦過研討會。他有一個叔叔是道德哲學家,這件事在談話裡反覆出現,因為它劃定了卡恩斯對“演算法能解決什麼”的判斷邊界。

一個哲學家用“視情況而定”回答了所有問題

卡恩斯剛進入公平這個課題時,給那位當哲學家的叔叔寫過一封郵件。他說,我們這裡有一個具體的演算法公平定義,我們認為它算是羅爾斯式公平的某種變體,您覺得怎麼樣。他以為自己在問一個是非題。

我收到的是哲學家最經典的那種回覆:視情況而定。你看,如果你從這個前提出發,會得出這個結論;把那個假設換掉,結論就變了。(邁克爾·卡恩斯)

就是這一刻,他意識到兩邊存在一道真實的裂縫。哲學家從人道主義視角討論公平,討論了兩千多年,從柏拉圖問“什麼是正義”開始;電腦科學家要做的是把這個東西寫成能執行的約束。前者可以永遠懸置判斷,後者必須在某個具體時刻給出是或否。

他也沒有把演算法的作用說得太大。書裡有個比喻,說大家其實是在路燈下面找鑰匙。

如果警察在決定攔誰、盤查誰的時候就是種族主義的,這個判斷會進入資料。下游再聰明的演算法方法,也沒法把這件事撤回來。(邁克爾·卡恩斯)

演算法能處理的是那些明顯的壞情況。一個完全不考慮公平的模型,往往不公平得離譜;一個完全不考慮隱私的系統,往往把隱私侵犯得很徹底。把這幾類大問題修掉,收益很實在。再往裡走,走進灰色地帶,討論就變成了“對誰公平、讓誰承擔代價”,那就回到了哲學家和立法者的地盤。

他給出的對比很能說明問題:隱私這個領域,社群基本已經收斂到一個定義,就是差分隱私(differential privacy)。公平不一樣。公平的文獻裡已經有定理擺在那裡,告訴你三個各自都合理的公平概念無法同時成立。所以卡恩斯說,公平還處在非常早期的階段,而且註定比隱私更難。

97% 倫理的演算法長什麼樣

訪談裡 Lex 提了一個很樸素的問題:電腦科學家說一個排序演算法的複雜度是 O(n log n),說一個分類器的準確率是 97%,那麼有一天能不能說“這個演算法有 97% 倫理”。

卡恩斯的回答是,在特定前提下可以。

書裡從排序講起,一堆寫著數字的卡片,你從頭掃一遍挑出最小的放最前面,再掃一遍挑出第二小的。這算一個演算法,而且是個壞演算法,它的複雜度是平方級的,而排序的最優解是 n log n。這個例子想說明的是:哪怕在一個定義得極其精確的問題上,也存在許多種不同的演算法,各有各的取捨,有的跑得快,有的省記憶體,有的更適合分散式。電腦科學早就習慣了用這種方式比較不同方案的優劣。

倫理演算法要做的,是把倫理問題裡能被放上這種定量檯面的那部分拿過來。

你可以說,對這個放貸模型,黑人和白人的錯誤拒絕率差距在 3% 以內。那我們也許可以把它叫作一個 97% 倫理的演算法。而一個 100% 倫理的演算法,意味著這個差距是 0。(邁克爾·卡恩斯)

注意這裡的前置條件。公平的定義一旦確定,數學就能接手。確定定義這一步,機器幫不上忙。使用者必須先回答兩個問題:你要保護誰,什麼算傷害。

放貸的例子能把這層難度暴露得很清楚。你可能會認為,把一個有還款能力的人錯誤拒貸,也就是假陰性,是真正的傷害。而那些還不上錢卻拿到了貸款的人,算是走運,不算受害。反過來想,一個人如果沒有能力還款卻被塞了一筆貸款,這本身是不是也是一種傷害。這個問題沒有技術答案。

還有更麻煩的一層。目前主流的所有群體公平定義,對被誤判者的補償都是一種很奇怪的東西。

這些定義基本上是在說:你的補償,就是知道我們也在以同樣的比例,錯誤地拒絕了其他群體裡的人。(邁克爾·卡恩斯)

一個具體的人被錯誤拒貸,他感受到的是自己的損失,不是統計上的均等。群體層面的公平和個體感受到的公平,中間隔著一道鴻溝。卡恩斯說,這個張力目前在技術層面都還沒有很好的答案。

公平的傑利蠑螈

從群體到個體,可以用一個很乾淨的方式理解:一個具體的人是所有屬性的組合。

他屬於某個種族,有性別,有年齡,還有一大堆非生理的、但同樣強烈影響人生軌跡的屬性。所以,如果你要求模型在種族這個維度上公平、在性別這個維度上公平、在年齡這個維度上公平,每一種都單獨滿足,你並不能因此期待這個模型對一個 55 歲以上、年收入低於 5 萬美元、有殘疾的西班牙裔女性也是公平的。

卡恩斯給這個現象起了個名字,叫公平的傑利蠑螈(fairness gerrymandering)。和政治上的選區劃分一樣,你在總量上給出了保證,把鏡頭拉近,你會發現這個總量保證是靠偏袒一部分組合、犧牲另一部分組合換來的。

換個角度說,追求個體公平,等於同時要求所有可能的群體組合都公平。每個人都可以被看成一個大小為 1 的群體,因為總能找到某個屬性把這個人和其他所有人分開。這樣一來,粗糙的群體公平和極端的個體公平,其實落在同一根座標軸的兩端。研究者現在能在這根軸靠群體的一端給出可靠的保證,靠個體的一端還不行,能做的是儘量往中間挪,處理越來越精細的子群體。

這裡還有一個躲不開的問題:要不要給人權。比如性別算 0.6 的權重、種族算 0.4。技術上當然可以把權重塞進目標函式。但卡恩斯指出,公平這個題目特殊就特殊在,你一開口討論它,就自動捲進了那些永遠沒有結論的爭論裡:為什麼要保護這個群體,是補償歷史,還是創造機會,還是別的什麼。

他舉的例子很尖銳。哪怕是刑事司法這種場景,大家討論量刑公平、討論預測被告人會不會按時出庭、討論假釋決定,定義的都是對犯罪者的公平。受害者的公平在哪裡。當你寫下一個約束說“黑人和白人的錯誤監禁率要大致相當”,這句話裡完全沒有提到潛在的受害者。這就是公平和隱私最大的區別:隱私是大家都想要更多的東西,公平則必然要面對“對誰公平、由誰買單”。

差分隱私:你的記錄在不在都一樣

隱私這一邊,卡恩斯的語氣明顯更篤定。他說這個社群已經找到了那個定義。

差分隱私的核心是一個反事實問題。假設有一份病歷資料庫,其中一份是你的。研究者想用它訓練一個疾病預測模型。差分隱私要求你比較兩個世界:一個世界裡,研究者用了包含你病歷的完整資料庫;另一個世界裡,用的是同一份資料庫,只把你的那一條記錄拿掉,剩下 N 減 1 條完全一樣。

這兩個世界產生的結果,應該幾乎無法區分。

它並沒有承諾資料分析不會傷害你。它說的是,那些傷害在你沒有參與的情況下也照樣會發生。(邁克爾·卡恩斯)

書裡那個吸菸與肺癌的例子值得慢慢看。上世紀五十年代那項確立吸菸與肺癌關聯的研究,如果你的資料在裡面,而當時社會上對吸菸還沒有汙名,研究發表之後,保險公司對你的後驗判斷就會改變,你的保費可能上漲,你遭受了實打實的經濟損失。

但同樣的分析只少了你這一條記錄,結論一模一樣。吸菸與肺癌的關聯是關於世界的一個事實,任何足夠大的病歷資料庫都能發現它。你的資料在這件事上並不獨特。

實現機制是加噪聲。每一個有用的差分隱私演算法都是機率演算法,同樣的輸入跑兩次,輸出會不一樣。最常見的做法是先把要公佈的那個數值算到精確,再往上面加一個零均值的高斯噪聲或者指數噪聲。輸出偏離了真實均值,但離得不遠,同時沒人能從這個輸出反推任何一個具體輸入。

卡恩斯提到他第一次看到這個定義時的反應,是覺得它很聰明,但也擔心它太嚴格,嚴格到根本沒什麼能算。後來這個領域最大的成功恰恰證明了相反的事:幾乎所有我們熟悉的計算,都能改造成差分隱私的版本。反向傳播和神經網路、決策樹、支援向量機、提升方法、經典的假設檢驗,原本都不是差分隱私的,但每一個都有加噪聲的改造版本。

這句話的分量在於,它意味著資料科學時代的好處和個體的隱私保證可以同時存在。我們今天這套依賴統計建模和機器學習的科研體系,不必推倒重來。

匿名化是個幻覺

要被差分隱私取代的,是那套用得最廣的做法:匿名化。刪掉姓名那一列,把年齡粗化成十歲一檔,郵編只留前三位,去掉所謂的個人身份資訊(PII)。

卡恩斯說這類做法的根本缺陷在於,它們假裝這份資料集是世界上唯一存在、將來也唯一會存在的資料集。

Netflix Prize 是最早的一個教訓。Netflix 公開了一批使用者評分資料,姓名抹掉了,但保留了你給哪些電影打了什麼分、什麼時候打的。結果研究者把這些資料和 IMDb 上的公開評分一對照,就能重新識別出具體的人。有人因此起訴了 Netflix。

我們在這十年裡都逐漸意識到一件事:只要知道你身上幾件看起來無關緊要的小事,往往就足以構成一枚指紋。(邁克爾·卡恩斯)

你給十部電影打的分,加上打分的日期,在幾千萬 Netflix 使用者裡就幾乎唯一地指向你。

Facebook 點贊那個研究更讓人不舒服。只用你點過讚的內容,不用任何人口統計資訊,不用你的好友關係,就足以在群體層面相當準確地預測性取向、藥物和酒精使用、父母是否離異。這些資訊你從來沒打算公開,甚至你自己都未必意識到它們在洩露什麼。

卡恩斯還提到一項新近的研究,說大約十幾個屬性就足以唯一識別出相當高比例的人口。這個數字是不是精確到 18 並不重要,重要的是量級:識別一個人需要的特徵數遠遠少於直覺。

噪聲救不了所有場景

Lex 提了個略帶玩笑的想法:如果到處放機器人說“卡恩斯喜歡花椰菜”,是不是就能掩護他真正喜歡義大利麵的偏好。

這個思路在現實裡有人做過。紐約大學的 Helen Nissenbaum 團隊做過一個瀏覽器外掛,你往 Google 裡輸入一個查詢,外掛在後臺同時向搜尋引擎傳送大量無關查詢。一千次查詢裡只有一次是你真的想搜的,另外九百九十九次都是噪音。

這是隱私靠混淆(obfuscation)的路子。卡恩斯說它有意思,但它給不了差分隱私的保證。

更重要的是,混淆並不能覆蓋所有場景。

我往 Google 裡輸入山地腳踏車,我要的就是山地腳踏車的結果,我確實希望 Google 知道我在搜山地腳踏車,這種時候我不想要噪聲。(邁克爾·卡恩斯)

有些資料的價值恰恰在於它精確地屬於你。醫療服務、個性化推薦、地圖導航,都是這一類。真正的挑戰是設計出一種適配這種場景的隱私概念,能讓服務精確地使用你的資料,同時你還保留某種保證。這個技術問題至今沒有解。

聊到更宏觀的走向,卡恩斯的態度是樂觀的。他認為社會最終會走到一個比現在更好的妥協狀態:隱私保證比今天更多、更強,個體對資料的控制也更多。但他強調,光有演算法方案不夠,還必須有監管和法律程式去推動公司採用這些方案。

他還提到一個正在萌芽的想法:給資料定價。如果要訓練一個罕見病的預測模型,負樣本很容易找,正樣本極其稀缺。那麼患病者的資料在這個應用上就比普通人值錢得多,也許應該得到更多補償。順著這個思路往下,今天網際網路的經濟模型是雙邊的,一邊是內容方,一邊是廣告主,谷歌和 Facebook 在中間撮合,使用者不在場。三方市場,讓代理來代表使用者的利益,技術上不難想,經濟後果會很劇烈。

我們是產品,不是客戶。客戶是廣告主。這件事如果真的做成,會顛覆掉支撐網際網路至今的整個經濟模型。(邁克爾·卡恩斯)

導航 App 正在把我們推向同一個均衡

博弈論給了卡恩斯另一個觀察世界的鏡頭。他給的定義很平實:一套用來推理多個互動個體所產生集體結果的數學框架。

最少兩個人就能開始。囚徒困境是最著名的例子,每個人都為自己打算,最後得到的集體結果比合作能達成的結果更糟。而合作在囚徒困境裡不是均衡。

他最喜歡的博弈論結論是納什的工作:在非常一般的條件下,競爭均衡一定存在。這個存在性定理的意義在於,如果連均衡都沒有,你根本沒法推理接下來會發生什麼,因為沒有穩定狀態可談。當然,存在性不保證現實裡的迭代行為會走到那裡去。

演算法博弈論這二十年裡最重要的技術貢獻,可能是發現了機器學習和博弈論之間的緊密聯絡,具體說是和無遺憾學習(no-regret learning)的聯絡。一群各自追求自身利益的玩家反覆互動,每個人用無遺憾演算法更新策略,整個過程會收斂到均衡,所需步數還相當少。

這套理論落到日常,最乾淨的案例是導航 App。

你開啟 Google Maps 或 Waze,輸入起點終點,它給你的路線,本質上是在針對其他所有人此刻的行為,為你計算一個自私的最優反應。這些 App 正在把我們所有人推向這個博弈的納什均衡。(邁克爾·卡恩斯)

聽起來挺好。問題是,理論和有限的真實交通資料都顯示,所有人都處在競爭均衡的時候,集體的通行時間可能顯著高於其他方案。每個人都做出了對自己最優的選擇,加總起來是一場集體虧損。

社交媒體是同一套邏輯。平臺用機器學習預測你會喜歡什麼,為你最佳化,把你推向某種均衡。博弈論最重要的教訓之一就是:處在均衡,不意味著不存在讓一些人、甚至所有人同時過得更好的方案。

卡恩斯在這裡的表述很剋制。均衡本身既不善也不惡。但他補充說,社交平臺不孤立運作,它們是社會系統,使用者的行為本身在驅動系統的技術演化。極化、迴音室、對異見的容忍度下降,是我們所有人一起走到的那個均衡。

從 500 毫秒到 20 年

聊到金融,卡恩斯給出一條清晰的分層。演算法接手的第一批工作,是那些計算機明顯比人強的事。金融交易所電子化之後,演算法透過 API 下單和人在螢幕前敲鍵盤已經沒有區別,這時候演算法交易才有可能。

最先被吃掉的是執行問題。一家券商替大型機構客戶買蘋果,量太大,如果不聰明地在時間上拆單、在不同電子交易所之間分散,價格就會被自己推上去,傷害執行成本。這是純粹的最佳化和控制問題,機器肯定比人做得好。

高頻交易緊挨著這一層,盯著交易所之間、或者同一資產內部的瞬時錯價,賺取微小的價差。

再往上一層是統計套利。預測資產價格的方向性變動,這個預測的有效期從幾秒到幾天。這是目前量化交易的甜點區,而且已經持續了相當一段時間。

再往上,是巴菲特那個時間尺度。卡恩斯說他對巴菲特的漫畫式想象是:坐在那裡思考蘋果的長期價值應該是多少,不看今天蘋果的股價,判斷出它離那個價值還很遠,然後買入或者做空,接著坐上十年二十年。

到了那個時間尺度,你要扛過衰退,扛過經濟週期,中間可能爆發戰爭。你的資料來源跨度極大,靠從交易所資料裡最佳化,根本不夠。(邁克爾·卡恩斯)

高頻交易的模型只需要保證未來 500 毫秒內不出大事。長期投資者需要對政治格局、經濟週期、社會情緒有判斷。卡恩斯一年多以前和費城聯儲合辦過一場關於機器學習用於宏觀經濟預測的研討會,他的結論是這條路還很長。所以如果問華爾街哪些崗位暫時安全,他的答案是那些坐在長時間尺度上、並且有承受長期風險的胃口的人。

帕累託曲線該由誰來看

回到公平的技術檯面。如果你選定了公平定義,比如擔心性別歧視,也選定了傷害的定義,比如錯誤拒貸,那麼第一件能做的事是審計:從資料出發,直接算出女性被錯誤拒貸的比例比男性高多少。

再往下,就能畫出那條曲線。橫軸是誤差,縱軸是不公平度,模型的公平約束強度是一個旋鈕。理想點是原點,零誤差、零不公平,但任何做過機器學習的人都知道,不施加任何公平約束也到不了零誤差。所以現實裡得到的是一條凸曲線,它精確地告訴你,從 17% 誤差降到 16% 誤差,要多付出多少不公平度。曲線之外的點,在其中一個維度或兩個維度上都能被嚴格改進,所以它們是沒有意義的選項。真正需要決定的,是沿著這條前沿停在哪裡。

卡恩斯認為這條曲線本身就該是研究者與決策者之間的介面。設想一個刑事司法轄區,既擔心種族公平,又擔心準確性:既不想放走會再犯暴力罪行的人,也不想關著不會再犯的人。這兩件事會打架。你可以把這條曲線擺到他們面前,讓他們看,如果要把兩個種族群體的假陽性率差距壓到某個水平,釋放決策的整體準確率要付出多少。

這不該由電腦科學家替社會決定。做決定的是政策制定者、監管者,是那些真正身處這個領域的人。但我希望他們能理解,這種取捨一般總是存在的,而且你必須選一個點。你不去選,其實也已經選了,只是你不知道,也不肯承認。(邁克爾·卡恩斯)

成本不會消失,只會換個地方出現

偏見怎麼進入演算法,人臉識別是個乾淨的例子。訓練集主要是白人男性,模型目標是最大化整體準確率,那麼模型降低誤差最省力的路徑就是把佔多數的白人男性認對,代價是其他群體的準確率更差。這無關演算法的惡意,它就是目標函式在資料分佈上的自然結果。

常見的反駁是:這個取捨是假的,你可以去收集更多少數群體的資料,或者給每個子群體單獨訓一個模型。

卡恩斯的回應是,這些做法也有成本,只是成本從準確率挪到了別處。收集稀有群體的資料要花錢,訓練、部署、維護多個模型也要花錢。哪怕你在技術上消解了誤差與公平之間的張力,成本也會轉移到研發時間和預算上。這一點在討論裡經常被跳過,因為談錢不如談原則舒服。

他還專門澄清了書名的誤解。有人看到《倫理演算法》這幾個字,第一反應是這本書在主張讓演算法自己去決定社會規範,自己去發展一套公平和隱私的觀念。

我們絕對沒有這個意思。尤其是在大家擔心機器人變成主宰的年代,機器人順帶發展出自己的社會規範,離那一步只差一格。(邁克爾·卡恩斯)

書裡的立場是:如果社會或者某個領域裡的相關方能夠就這些事達成一致,很多情況下存在把它們編碼進演算法的辦法。達成一致這件事,演算法幫不上忙。

“每個人都該學計算機”這句話,他不同意

訪談裡有一段真實的分歧,值得單獨拎出來。

Lex 的觀點是,電腦科學正在變成一種基礎能力,學哲學的人應該去學程式設計,這樣才能抓到資料、分析人們在 Twitter 上想什麼,然後得出關於人生意義的結論。二十、三十年後,電腦科學家會回到高德納(Donald Knuth)那種純理論的位置,而所有其他領域的人都在做今天屬於電腦科學的事。

卡恩斯不完全反對這個趨勢,但他把責任的方向調轉了。

電腦科學對社會的影響在過去十到二十年裡是指數級放大的。以前我們自己在小圈子裡折騰,影響沒那麼大,電腦科學家不需要做世界公民。那個時代需要非常快地結束。我不是說每個人都要做,但正確的方式,是電腦科學家更多地走進世界,而不是指望全世界都變成電腦科學家。(邁克爾·卡恩斯)

他順帶提了一個更大膽的猜想:五十年後可能不再有計算機系,因為這門學科會像電一樣瀰漫在所有領域裡,那時候“計算機系”聽起來會像“電力系”一樣奇怪。當然高德納式的理論核心會一直存在,但一個學科因為過於成功而被邊緣化,這個路徑並不荒謬。

這場分歧背後還有一個共識:這本書能在 2019 年寫出來,本身就說明時代變了。十年前他不會動這個念頭,因為公眾對演算法和機器學習的認知度太低,你得先寫一本給普通人解釋這些東西的書,才輪得到談倫理。現在很多人完全沒有技術訓練,但對演算法已經知道得足夠多,可以直接進入這些細微的地方。

沒有人問過普通人怎麼想

訪談裡有一段是卡恩斯主動提到的,很關鍵,因為它指出了整個領域的一個盲點。

目前演算法公平文獻裡的定義,全部是“接收下來的智慧”。某個像他這樣的研究者坐在那裡想:我認為這裡有一個公平的技術定義,人們應該會想要它。也許它不是唯一的,不是最好的,也不是最終的。

但我們其實不知道,從主觀的角度看,普通人真正認為什麼算公平。就我所知,幾乎沒有大規模的文獻去把普通人關於公平的直覺系統地收集起來。(邁克爾·卡恩斯)

他的團隊剛開始做一點這方面的工作,用人類受試者實驗的方式。給被試看刑事累犯預測場景裡的一對個體,問他們:從公平的角度看,這兩個人應該被同樣對待嗎。

他順手把這個盲點推到了另一個熱門話題上。所有人都在說深度學習不可解釋,稀疏的整數係數線性模型更可解釋。但幾乎沒有人真的把模型擺到普通人面前,問他們:你看得懂這個模型在幹什麼嗎。

這裡有個反差。電腦科學在解釋世界這件事上一向自信,甚至有點帝國主義:物理學家在上一代是這個樣子,電腦科學家則不認為有任何科學題目是自己不能碰的,會大搖大擺走進別人耕耘了幾十年的地盤。

我們通常會在最初那段時間裡把自己搞得很尷尬。強化學習就是好例子,控制理論家看著我們說,你們在重新發明我們四十年代就知道的東西,我完全同情他們。但最終電腦科學家在這個領域做出了實質貢獻,儘管頭十年確實尷尬。所以要去做心理學和人類受試者研究,就該預期先尷尬十年,然後希望結局能像其他幾個領域一樣好。(邁克爾·卡恩斯)

如果把 Facebook 交給他六個月

Lex 問他,扎克伯格打電話來說要休假,請你代管 Facebook 半年,你會怎麼做。

他的第一反應是謝謝不用。理由很乾脆:要植入他設想的那些有限改動,並不需要坐上 CEO 的位置。

他給出的具體方案是滑塊。既然這些平臺已經用機器學習把你和每一塊內容放進了同一個度量空間,它們就同時知道什麼會讓你最開心,也知道什麼會讓你最不舒服,兩者用的是同一個模型。

那就給願意用的人一個滑塊,說清楚:有多少內容你希望是離你的興趣遠一點的、你可能不同意的。這幾乎就是一個探索按鈕。(邁克爾·卡恩斯)

他沒有把話說得太滿。最佳化參與度把行業帶到了今天這一步,改做別的事情,短期內在收入和利潤上確實會有代價。他也承認,如果自己在這些公司工作,最佳化參與度大概也會顯得是世界上最自然的選擇,因為讓使用者沉浸在平臺裡、覺得有用有趣,本身也是為使用者好。

但“這事不歸我們管”這個說法,在他這裡站不住。這些公司由機器學習驅動,參與度最佳化也是機器學習驅動的,加上極大規模的 A/B 實驗,調一點介面、調一點點選率模型的特徵。既然你知道怎麼最佳化一個目標,這個解幾乎定義上也告訴你怎麼不最佳化它。

真正的困難在於目標的可測量性。參與度可以測。減少對立、或者提升一個人一生的智識成長,很難測。他承認這一點,但還是認為值得試。

我們有點像處在一個壞的均衡裡。這些系統在幫我們每個人短視地、自私地最佳化自己。任何一個人憑什麼要在一個此刻看到令我反感的內容的資訊流裡待著。但也許正因為所有人都讓平臺短視地為自己最佳化,我們作為一個社會抵達了一個大家都不滿意的集體結果。(邁克爾·卡恩斯)

他還替這些公司說了句公道話。Facebook 和它的前身 Friendster 剛出來的時候,很多人覺得莫名其妙,問這玩意有什麼用、誰會想玩。十年前沒人預見到這類平臺會影響選舉結果、會極化政治討論。現在這些公司受到的審視完全正當,但回頭指責他們當初就該預見到,有點過於苛刻。這些結果是我們所有人一起學到的,公司也在其中。

波士頓公園的那個下午

訪談最後,Lex 問有沒有哪一天讓他真正快樂、被深刻改變。

卡恩斯換了個問法來回答,講了他人生裡的一個分水嶺。

他從本科直接讀博,這在學術家庭裡不算特別,他父親是教授,叔叔是教授,兩個祖父都是教授,專業遍佈各處,其中就有哲學。他在哈佛跟萊斯·瓦利安特,那段經歷很好。但第一年他過得很不開心。

原因說起來有點樸素。伯克利是個巨大的學校,他本科雖然學了不少數學和計算機,但也修歷史、修藝術史,從英語專業起步,朋友幹什麼的都有。哈佛小得多,當時的計算機系比現在更小,他忽然發現自己從一個很大的世界掉進了一個高度專業化的世界,所有課都是計算機課,身邊的人全是學數學和計算機的。

那一年他反覆想,要不要讀下去。他盤算過拿個碩士就撤,回灣區,那個年代在當時的幾家大科技公司找份收入不錯的工作並不難。

然後是一個晚春的日子,他坐在波士頓公園裡,認真想自己到底要幹什麼。

我意識到,你現在確實過得不怎麼樣,確實感覺路越走越窄。但你到這裡來是為了做研究,是為了做出原創的東西,是為了給自己掙出一條能自己決定想什麼、有很大獨立性的職業道路。而那時候我根本還沒有真正做過研究,試過一些題目,沒什麼成功。但我知道,我還沒有真正去試那件我明明是為了它才來的事。(邁克爾·卡恩斯)

他決定撐過那個夏天。一年之後,他開始做出研究了,做得順利,也有意思,事情徹底變了。他把這個轉變描述成每個博士生某個時刻都要經歷的那道坎:從一個學習前人做過什麼的學生,變成做自己東西的研究者,並且摸清自己的強項和弱項在哪裡。

Lex 補了一句:也是接受這段旅程本身的痛苦。卡恩斯說,對,就是這樣。那個下午他對自己說的是,我要撐下去,我要在這兒多待一陣。

可以直接用起來的幾件事

這期訪談資訊密度很高,但落到行動上,有幾條是可以馬上做的。

  • 如果你在做任何涉及人的預測模型,先做一次審計,別急著最佳化。把假陽性率、假陰性率按你能想到的每一個敏感屬性分組算一遍,再按兩兩組合、三三組合算一遍。卡恩斯說的公平傑利蠑螈,幾乎一定會在某個你沒看過的交叉子群體裡出現。
  • 在專案文件裡畫一條帕累託曲線,橫軸誤差,縱軸不公平度,把公平約束強度作為引數掃一遍。這張圖比任何一段文字論述都更適合拿給非技術的決策者看,因為它把“選哪個點”這個責任清晰地交回給了應該負責的人。
  • 檢查你對匿名化的依賴。刪掉姓名列、粗化年齡、截斷郵編,這些操作在資料集可以被聯結的世界裡提供不了任何保證。如果隱私是硬需求,去查差分隱私的現成實現,主流機器學習演算法基本都有對應版本。
  • 不要替使用者決定他們想要什麼樣的資訊流。如果你的系統有能力計算使用者喜歡什麼,它同時就有能力計算使用者不喜歡什麼,把它做成一個使用者可見的開關,成本遠低於你想象。
  • 如果你是研究者,去做一點行為學實驗。把模型、把公平場景擺到普通人面前,問他們怎麼想。這個領域最缺的不是新定義,是普通人直覺的經驗資料。
  • 如果你是計算機背景出身,把一部分精力花在走出圈子這件事上。這個學科對社會的影響力已經大到不允許從業者只做技術公民,而這個責任主要在這一邊,不在指望所有人來學程式設計的那一邊。
文稿來自公開 Kaggle 資料集(rajneesh231/lex-fridman-podcast-transcript),為早期自動轉錄存檔,可能存在識別錯誤。
The following is a conversation with Michael Kearns. He's a professor at the University of Pennsylvania and a coauthor of the new book, Ethical Algorithm, that is the focus of much of this conversation. It includes algorithmic fairness, bias, privacy, and ethics in general. But that is just one of many fields that Michael is a world class researcher in, some of which we touch on quickly, including learning theory or the theoretical foundation of machine learning, game theory, quantitative finance, computational social science, and much more. But on a personal note, when I was an undergrad, early on, I worked with Michael on an algorithmic trading project and competition that he led. That's when I first fell in love with algorithmic game theory. While most of my research life has been in machine learning and human robot interaction, the systematic way that game theory reveals the beautiful structure in our competitive and cooperating world of humans has been a continued inspiration to me. So for that and other things, I'm deeply thankful to Michael and really enjoyed having this conversation again in person after so many years. This is the Artificial Intelligence Podcast. If you enjoy it, subscribe on YouTube, give it five stars on Apple Podcast, support on Patreon, or simply connect with me on Twitter at Lex Friedman, spelled F R I D M A N. This episode is supported by an amazing podcast called Pessimists Archive. Jason, the host of the show, reached out to me looking to support this podcast, and so I listened to it, to check it out. And by listened, I mean I went through it, Netflix binge style, at least five episodes in a row. It's not one of my favorite podcasts, and I think it should be one of the top podcasts in the world, frankly. It's a history show about why people resist new things. Each episode looks at a moment in history when something new was introduced, something that today we think of as commonplace, like recorded music, umbrellas, bicycles, cars, chess, coffee, the elevator, and the show explores why it freaked everyone out. The latest episode on mirrors and vanity still stays with me as I think about vanity in the modern day of the Twitter world. That's the fascinating thing about the show, is that stuff that happened long ago, especially in terms of our fear of new things, repeats itself in the modern day, and so has many lessons for us to think about in terms of human psychology and the role of technology in our society. Anyway, you should subscribe and listen to Pessimist Archive. I highly recommend it. And now, here's my conversation with Michael Kearns. You mentioned reading Fear and Loathing in Las Vegas in high school, and having a more, or a bit more of a literary mind. So, what books, non technical, non computer science, would you say had the biggest impact on your life, either intellectually or emotionally? You've dug deep into my history, I see. Went deep. Yeah, I think, well, my favorite novel is Infinite Jest by David Foster Wallace, which actually, coincidentally, much of it takes place in the halls of buildings right around us here at MIT. So that certainly had a big influence on me. And as you noticed, like, when I was in high school, I actually even started college as an English major. So, I was very influenced by sort of that genre of journalism at the time, and thought I wanted to be a writer, and then realized that an English major teaches you to read, but it doesn't teach you how to write, and then I became interested in math and computer science instead. Well, in your new book, Ethical Algorithm, you kind of sneak up from an algorithmic perspective on these deep, profound philosophical questions of fairness, of privacy. In thinking about these topics, how often do you return to that literary mind that you had? Yeah, I'd like to claim there was a deeper connection, but, you know, I think both Aaron and I kind of came at these topics first and foremost from a technical angle. I mean, you know, I kind of consider myself primarily and originally a machine learning researcher, and I think as we just watched, like the rest of the society, the field technically advance, and then quickly on the heels of that kind of the buzzkill of all of the antisocial behavior by algorithms, just kind of realized there was an opportunity for us to do something about it from a research perspective. You know, more to the point in your question, I mean, I do have an uncle who is literally a moral philosopher, and so in the early days of my life, he was a philosopher, and so in the early days of our technical work on fairness topics, I would occasionally, you know, run ideas behind him. So, I mean, I remember an early email I sent to him in which I said, like, oh, you know, here's a specific definition of algorithmic fairness that we think is some sort of variant of Rawlsian fairness. What do you think? And I thought I was asking a yes or no question, and I got back your kind of classical philosopher's response saying, well, it depends. Hey, then you might conclude this, and that's when I realized that there was a real kind of rift between the ways philosophers and others had thought about things like fairness, you know, from sort of a humanitarian perspective and the way that you needed to think about it as a computer scientist if you were going to kind of implement actual algorithmic solutions. But I would say the algorithmic solutions take care of some of the low hanging fruit. Sort of the problem is a lot of algorithms, when they don't consider fairness, they are just terribly unfair. And when they don't consider privacy, they're terribly, they violate privacy. Sort of the algorithmic approach fixes big problems. But there's still, when you start pushing into the gray area, that's when you start getting into this philosophy of what it means to be fair, starting from Plato, what is justice kind of questions? Yeah, I think that's right. And I mean, I would even not go as far as you want to say that sort of the algorithmic work in these areas is solving like the biggest problems. And, you know, we discuss in the book, the fact that really we are, there's a sense in which we're kind of looking where the light is in that, you know, for example, if police are racist in who they decide to stop and frisk, and that goes into the data, there's sort of no undoing that downstream by kind of clever algorithmic methods. And I think, especially in fairness, I mean, I think less so in privacy, where we feel like the community kind of really has settled on the right definition, which is differential privacy. If you just look at the algorithmic fairness literature already, you can see it's going to be much more of a mess. And, you know, you've got these theorems saying, here are three entirely reasonable, desirable notions of fairness. And, you know, here's a proof that you cannot simultaneously have all three of them. So I think we know that algorithmic fairness compared to algorithmic privacy is going to be kind of a harder problem. And it will have to revisit, I think, things that have been thought about by, you know, many generations of scholars before us. So it's very early days for fairness, I think. TK So before we get into the details of differential privacy, and on the fairness side, let me linger on the philosophy a bit. Do you think most people are fundamentally good? Or do most of us have both the capacity for good and evil within us? SB I mean, I'm an optimist. I tend to think that most people are good and want to do right. And that deviations from that are, you know, kind of usually due to circumstance, not due to people being bad at heart. TK With people with power, are people at the heads of governments, people at the heads of companies, people at the heads of, maybe, so financial power markets, do you think the distribution there is also, most people are good and have good intent? SB Yeah, I do. I mean, my statement wasn't qualified to people not in positions of power. I mean, I think what happens in a lot of the, you know, the cliche about absolute power corrupts absolutely. I mean, you know, I think even short of that, you know, having spent a lot of time on Wall Street, and also in arenas very, very different from Wall Street, like academia, you know, one of the things I think I've benefited from by moving between two very different worlds is you become aware that, you know, these worlds kind of develop their own social norms, and they develop their own rationales for, you know, behavior, for instance, that might look unusual to outsiders. But when you're in that world, it doesn't feel unusual at all. And I think this is true of a lot of, you know, professional cultures, for instance. And, you know, so then your maybe slippery slope is too strong of a word. But, you know, you're in some world where you're mainly around other people with the same kind of viewpoints and training and worldview as you. And I think that's more of a source of, of, you know, kind of abuses of power than sort of, you know, there being good people and evil people, and that somehow the evil people are the ones that somehow rise to power. Oh, that's really interesting. So it's the, within the social norms constructed by that particular group of people, you're all trying to do good. But because as a group, you might be, you might drift into something that for the broader population, it does not align with the values of society. That kind of, that's the word. Yeah, I mean, or not that you drift, but even the things that don't make sense to the outside world don't seem unusual to you. So it's not sort of like a good or a bad thing, but, you know, like, so for instance, you know, on, in the world of finance, right? There's a lot of complicated types of activity that if you are not immersed in that world, you cannot see why the purpose of that, you know, that activity exists at all. It just seems like, you know, completely useless and people just like, you know, pushing money around. And when you're in that world, right, you're, and you learn more, your view does become more nuanced, right? You realize, okay, there is actually a function to this activity. And in some cases, you would conclude that actually, if magically we could eradicate this activity tomorrow, it would come back because it actually is like serving some useful purpose. It's just a useful purpose that's very difficult for outsiders to see. And so I think, you know, lots of professional work environments or cultures, as I might put it, kind of have these social norms that, you know, don't make sense to the outside world. Academia is the same, right? I mean, lots of people look at academia and say, you know, what the hell are all of you people doing? Why are you paid so much in some cases at taxpayer expenses to do, you know, to publish papers that nobody reads? You know, but when you're in that world, you come to see the value for it. And, but even though you might not be able to explain it to, you know, the person in the street. Right. And in the case of the financial sector, tools like credit might not make sense to people. Like, it's a good example of something that does seem to pop up and be useful or just the power of markets and just in general capitalism. Yeah. In finance, I think the primary example I would give is leverage, right? So being allowed to borrow, to sort of use ten times as much money as you've actually borrowed, right? So that's an example of something that before I had any experience in financial markets, I might have looked at and said, well, what is the purpose of that? That just seems very dangerous and it is dangerous and it has proven dangerous. But, you know, if the fact of the matter is that, you know, sort of on some particular time scale, you are holding positions that are, you know, very unlikely to, you know, lose, you know, your value at risk or variance is like one or five percent, then it kind of makes sense that you would be allowed to use a little bit more than you have because you have, you know, some confidence that you're not going to lose it all in a single day. Now, of course, when that happens, we've seen what happens, you know, not too long ago. But, you know, but the idea that it serves no useful economic purpose under any circumstances is definitely not true. We'll return to the other side of the coast, Silicon Valley, and the problems there as we talk about privacy, as we talk about fairness. At the high level, and I'll ask some sort of basic questions with the hope to get at the fundamental nature of reality. But from a very high level, what is an ethical algorithm? So I can say that an algorithm has a running time of using big O notation n log n. I can say that a machine learning algorithm classified cat versus dog with 97 percent accuracy. Do you think there will one day be a way to measure sort of in the same compelling way as the big O notation of this algorithm is 97 percent ethical? First of all, let me riff for a second on your specific n log n example. So because early in the book when we're just kind of trying to describe algorithms period, we say like, okay, you know, what's an example of an algorithm or an algorithmic problem? First of all, like it's sorting, right? You have a bunch of index cards with numbers on them and you want to sort them. And we describe, you know, an algorithm that sweeps all the way through, finds the smallest number, puts it at the front, then sweeps through again, finds the second smallest number. So we make the point that this is an algorithm and it's also a bad algorithm in the sense that, you know, it's quadratic rather than n log n, which we know is kind of optimal for sorting. And we make the point that sort of like, you know, so even within the confines of a very precisely specified problem, there, you know, there might be many, many different algorithms for the same problem with different properties. Like some might be faster in terms of running time, some might use less memory, some might have, you know, better distributed implementations. And so the point is that already we're used to, you know, in computer science thinking about trade offs between different types of quantities and resources and there being, you know, better and worse algorithms. And our book is about that part of algorithmic ethics that we know how to kind of put on that same kind of quantitative footing right now. So, you know, just to say something that our book is not about, our book is not about kind of broad, fuzzy notions of fairness. It's about very specific notions of fairness. There's more than one of them. There are tensions between them, right? But if you pick one of them, you can do something akin to saying that this algorithm is 97% ethical. You can say, for instance, the, you know, for this lending model, the false rejection rate on black people and white people is within 3%, right? So we might call that a 97% ethical algorithm and a 100% ethical algorithm would mean that that difference is 0%. In that case, fairness is specified when two groups, however, they're defined are given to you. That's right. So the, and then you can sort of mathematically start describing the algorithm. But nevertheless, the part where the two groups are given to you, I mean, unlike running time, you know, we don't in computer science talk about how fast an algorithm feels like when it runs. True. We measure it and ethical starts getting into feelings. So, for example, an algorithm runs, you know, if it runs in the background, it doesn't disturb the performance of my system. It'll feel nice. I'll be okay with it. But if it overloads the system, it'll feel unpleasant. So in that same way, ethics, there's a feeling of how socially acceptable it is. How does it represent the moral standards of our society today? So in that sense, and sorry to linger on that first of high, low philosophical questions. Do you have a sense we'll be able to measure how ethical an algorithm is? First of all, I didn't, certainly didn't mean to give the impression that you can kind of measure, you know, memory speed trade offs, you know, and that there's a complete mapping from that onto kind of fairness, for instance, or ethics and accuracy, for example. In the type of fairness definitions that are largely the objects of study today and starting to be deployed, you as the user of the definitions, you need to make some hard decisions before you even get to the point of designing fair algorithms. One of them, for instance, is deciding who it is that you're worried about protecting, who you're worried about being harmed by, for instance, some notion of discrimination or unfairness. And then you need to also decide what constitutes harm. So, for instance, in a lending application, maybe you decide that, you know, falsely rejecting a creditworthy individual, you know, sort of a false negative, is the real harm and that false positives, i.e. people that are not creditworthy or are not gonna repay your loan, that get a loan, you might think of them as lucky. And so that's not a harm, although it's not clear that if you don't have the means to repay a loan, that being given a loan is not also a harm. So, you know, the literature is sort of so far quite limited in that you sort of need to say, who do you want to protect and what would constitute harm to that group? And when you ask questions like, will algorithms feel ethical? One way in which they won't, under the definitions that I'm describing, is if, you know, if you are an individual who is falsely denied a loan, incorrectly denied a loan, all of these definitions basically say like, well, you know, your compensation is the knowledge that we are also falsely denying loans to other people, you know, in other groups at the same rate that we're doing it to you. And, you know, and so there is actually this interesting even technical tension in the field right now between these sort of group notions of fairness and notions of fairness that might actually feel like real fairness to individuals, right? They might really feel like their particular interests are being protected or thought about by the algorithm rather than just, you know, the groups that they happen to be members of. Is there parallels to the big O notation of worst case analysis? So, is it important to looking at the worst violation of fairness for an individual? Is it important to minimize that one individual? So like worst case analysis, is that something you think about or? I mean, I think we're not even at the point where we can sensibly think about that. So first of all, you know, we're talking here both about fairness applied at the group level, I definitely think, you know, this is a much narrower statement. I definitely think that kind of algorithmic auditing for different types of unfairness, right? So like in this gerrymandering example where I might want to prevent not just discrimination against very broad categories, but against combinations of broad categories. You know, you quickly get to a point where there's a lot of, a lot of categories. There's a lot of combinations of end features and, you know, you can use algorithmic techniques to sort of try to find the subgroups on which you're discriminating the most and try to fix that. That's actually kind of the form of one of the algorithms we developed for this fairness gerrymandering problem. But I'm, I'm, you know, partly because of our technological, you know, our sort of our scientific ignorance on these topics right now. And also partly just because these topics are so loaded emotionally for people that I just don't see the value. I mean, again, never say never, but I just don't think we're at a moment where it's a great time for computer scientists to be rolling out the idea like, hey, you know, you know, not only have we kind of figured fairness out, but, you know, we think the algorithm should start deciding what's fair or giving input on that decision. I just don't, it's like the cost benefit analysis to the field of kind of going there right now just doesn't seem worth it to me. That said, I should say that I think computer scientists should be more philosophically, like should enrich their thinking about these kinds of things. I think it's been too often used as an excuse for roboticists working on autonomous vehicles, for example, to not think about the human factor or psychology or safety in the same way like computer science design algorithms that have been sort of using it as an excuse. And I think it's time for basically everybody to become a computer scientist. I was about to agree with everything you said except that last point. I think that the other way of looking at it is that I think computer scientists, you know, and many of us are, but we need to weigh it out into the world more, right? I mean, just the influence that computer science and therefore computer scientists have had on society at large just like has exponentially magnified in the last 10 or 20 years or so. And you know, before when we were just tinkering around amongst ourselves and it didn't matter that much, there was no need for sort of computer scientists to be citizens of the world more broadly. And I think those days need to be over very, very fast. And I'm not saying everybody needs to do it, but to me, like the right way of doing it is to not to sort of think that everybody else is going to become a computer scientist. But you know, I think people are becoming more sophisticated about computer science, even lay people. You know, I think one of the reasons we decided to write this book is we thought 10 years ago I wouldn't have tried this just because I just didn't think that sort of people's awareness of algorithms and machine learning, you know, the general population would have been high. I mean, you would have had to first, you know, write one of the many books kind of just explicating that topic to a lay audience first. Now I think we're at the point where like lots of people without any technical training at all know enough about algorithms and machine learning that you can start getting to these nuances of things like ethical algorithms. I think we agree that there needs to be much more mixing, but I think a lot of the onus of that mixing needs to be on the computer science community. Yeah. So just to linger on the disagreement, because I do disagree with you on the point that I think if you're a biologist, if you're a chemist, if you're an MBA business person, all of those things you can, like if you learned a program, and not only program, if you learned to do machine learning, if you learned to do data science, you immediately become much more powerful in the kinds of things you can do. And therefore literature, like library sciences, like, so you were speaking, I think, I think it holds true what you're saying for the next few years. But long term, if you're interested to me, if you're interested in philosophy, you should learn a program, because then you can scrape data and study what people are thinking about on Twitter, and then start making philosophical conclusions about the meaning of life. I just feel like the access to data, the digitization of whatever problem you're trying to solve, will fundamentally change what it means to be a computer scientist. I mean, a computer scientist in 20, 30 years will go back to being Donald Knuth style theoretical computer science, and everybody would be doing basically, exploring the kinds of ideas that you explore in your book. It won't be a computer science major. Yeah, I mean, I don't think I disagree enough, but I think that that trend of more and more people in more and more disciplines adopting ideas from computer science, learning how to code, I think that that trend seems firmly underway. I mean, you know, like an interesting digressive question along these lines is maybe in 50 years, there won't be computer science departments anymore, because the field will just sort of be ambient in all of the different disciplines. And people will look back and having a computer science department will look like having an electricity department or something that's like, you know, everybody uses this, it's just out there. I mean, I do think there will always be that kind of Knuth style core to it, but it's not an implausible path that we kind of get to the point where the academic discipline of computer science becomes somewhat marginalized because of its very success in kind of infiltrating all of science and society and the humanities, etcetera. What is differential privacy, or more broadly, algorithmic privacy? Algorithmic privacy more broadly is just the study or the notion of privacy definitions or norms being encoded inside of algorithms. And so, you know, I think we count among this body of work just, you know, the literature and practice of things like data anonymization, which we kind of at the beginning of our discussion of privacy say like, okay, this is sort of a notion of algorithmic privacy. It kind of tells you, you know, something to go do with data, but, you know, our view is that it's, and I think this is now, you know, quite widespread, that it's, you know, despite the fact that those notions of anonymization kind of redacting and coarsening are the most widely adopted technical solutions for data privacy, they are like deeply fundamentally flawed. And so, you know, to your first question, what is differential privacy? Differential privacy seems to be a much, much better notion of privacy that kind of avoids a lot of the weaknesses of anonymization notions while still letting us do useful stuff with data. What is anonymization of data? So by anonymization, I'm, you know, kind of referring to techniques like I have a database. The rows of that database are, let's say, individual people's medical records, okay? And I want to let people use that data. Maybe I want to let researchers access that data to build predictive models for some disease, but I'm worried that that will leak, you know, sensitive information about specific people's medical records. So anonymization broadly refers to the set of techniques where I say like, okay, I'm first going to like, I'm going to delete the column with people's names. I'm going to not put, you know, so that would be like a redaction, right? I'm just redacting that information. I am going to take ages and I'm not going to like say your exact age. I'm going to say whether you're, you know, zero to 10, 10 to 20, 20 to 30, I might put the first three digits of your zip code, but not the last two, et cetera, et cetera. And so the idea is that through some series of operations like this on the data, I anonymize it. You know, another term of art that's used is removing personally identifiable information. And you know, this is basically the most common way of providing data privacy, but that it's in a way that still lets people access the, some variant form of the data. So at a slightly broader picture, as you talk about what does anonymization mean when you have multiple database, like with a Netflix prize, when you can start combining stuff together. So this is exactly the problem with these notions, right? Is that notions of a anonymization, removing personally identifiable information, the kind of fundamental conceptual flaw is that, you know, these definitions kind of pretend as if the data set in question is the only data set that exists in the world or that ever will exist in the future. And of course, things like the Netflix prize and many, many other examples since the Netflix prize, I think that was one of the earliest ones though, you know, you can reidentify people that were, you know, that were anonymized in the data set by taking that anonymized data set and combining it with other allegedly anonymized data sets and maybe publicly available information about you. You know, for people who don't know the Netflix prize was, was being publicly released this data. So the names from those rows were removed, but what was released is the preference or the ratings of what movies you like and you don't like. And from that combined with other things, I think forum posts and so on, you can start to figure out I guess it was specifically the internet movie database where, where lots of Netflix users publicly rate their movie, you know, their movie preferences. And so the anonymized data and Netflix, when it's just this phenomenon, I think that we've all come to realize in the last decade or so is that just knowing a few apparently irrelevant innocuous things about you can often act as a fingerprint. Like if I know, you know, what, what rating you gave to these 10 movies and the date on which you entered these movies, this is almost like a fingerprint for you in the sea of all Netflix users. There were just another paper on this in science or nature of about a month ago that, you know, kind of 18 attributes. I mean, my favorite example of this is, was actually a paper from several years ago now where it was shown that just from your likes on Facebook, just from the time, you know, the things on which you clicked on the thumbs up button on the platform, not using any information, demographic information, nothing about who your friends are, just knowing the content that you had liked was enough to, you know, in the aggregate accurately predict things like sexual orientation, drug and alcohol use, whether you were the child of divorced parents. So we live in this era where, you know, even the apparently irrelevant data that we offer about ourselves on public platforms and forums often unbeknownst to us, more or less acts as signature or, you know, fingerprint. And that if you can kind of, you know, do a join between that kind of data and allegedly anonymized data, you have real trouble. So is there hope for any kind of privacy in a world where a few likes can identify you? So there is differential privacy, right? What is differential privacy? Yeah, so differential privacy basically is a kind of alternate, much stronger notion of privacy than these anonymization ideas. And, you know, it's a technical definition, but like the spirit of it is we compare two alternate worlds, okay? So let's suppose I'm a researcher and I want to do, you know, there's a database of medical records and one of them is yours, and I want to use that database of medical records to build a predictive model for some disease. So based on people's symptoms and test results and the like, I want to, you know, build a probably model predicting the probability that people have disease. So, you know, this is the type of scientific research that we would like to be allowed to continue. And in differential privacy, you ask a very particular counterfactual question. We basically compare two alternatives. One is when I do this, I build this model on the database of medical records, including your medical record. And the other one is where I do the same exercise with the same database with just your medical record removed. So basically, you know, it's two databases, one with N records in it and one with N minus one records in it. The N minus one records are the same, and the only one that's missing in the second case is your medical record. So differential privacy basically says that any harms that might come to you from the analysis in which your data was included are essentially nearly identical to the harms that would have come to you if the same analysis had been done without your medical record included. So in other words, this doesn't say that bad things cannot happen to you as a result of data analysis. It just says that these bad things were going to happen to you already, even if your data wasn't included. And to give a very concrete example, right, you know, like we discussed at some length, the study that, you know, in the 50s that was done that established the link between smoking and lung cancer. And we make the point that, like, well, if your data was used in that analysis and, you know, the world kind of knew that you were a smoker because, you know, there was no stigma associated with smoking before those findings, real harm might have come to you as a result of that study that your data was included in. In particular, your insurer now might have a higher posterior belief that you might have lung cancer and raise your premium. So you've suffered economic damage. But the point is, is that if the same analysis has been done with all the other N minus one medical records and just yours missing, the outcome would have been the same. Or your data wasn't idiosyncratically crucial to establishing the link between smoking and lung cancer because the link between smoking and lung cancer is like a fact about the world that can be discovered with any sufficiently large database of medical records. But that's a very low value of harm. Yeah. So that's showing that very little harm is done. Great. But how what is the mechanism of differential privacy? So that's the kind of beautiful statement of it. It's the mechanism by which privacy is preserved. Yeah. So it's basically by adding noise to computations, right? So the basic idea is that every differentially private algorithm, first of all, or every good differentially private algorithm, every useful one, is a probabilistic algorithm. So it doesn't, on a given input, if you gave the algorithm the same input multiple times, it would give different outputs each time from some distribution. And the way you achieve differential privacy algorithmically is by kind of carefully and tastefully adding noise to a computation in the right places. And to give a very concrete example, if I wanna compute the average of a set of numbers, the non private way of doing that is to take those numbers and average them and release like a numerically precise value for the average. In differential privacy, you wouldn't do that. You would first compute that average to numerical precisions, and then you'd add some noise to it, right? You'd add some kind of zero mean, Gaussian or exponential noise to it so that the actual value you output is not the exact mean, but it'll be close to the mean, but it'll be close... The noise that you add will sort of prove that nobody can kind of reverse engineer any particular value that went into the average. So noise is a savior. How many algorithms can be aided by adding noise? Yeah, so I'm a relatively recent member of the differential privacy community. My co author, Aaron Roth is really one of the founders of the field and has done a great deal of work and I've learned a tremendous amount working with him on it. It's a pretty grown up field already. Yeah, but now it's pretty mature. But I must admit, the first time I saw the definition of differential privacy, my reaction was like, wow, that is a clever definition and it's really making very strong promises. And I first saw the definition in much earlier days and my first reaction was like, well, my worry about this definition would be that it's a great definition of privacy, but that it'll be so restrictive that we won't really be able to use it. We won't be able to compute many things in a differentially private way. So that's one of the great successes of the field, I think, is in showing that the opposite is true and that most things that we know how to compute, absent any privacy considerations, can be computed in a differentially private way. So for example, pretty much all of statistics and machine learning can be done differentially privately. So pick your favorite machine learning algorithm, back propagation and neural networks, cart for decision trees, support vector machines, boosting, you name it, as well as classic hypothesis testing and the like in statistics. None of those algorithms are differentially private in their original form. All of them have modifications that add noise to the computation in different places in different ways that achieve differential privacy. So this really means that to the extent that we've become a scientific community very dependent on the use of machine learning and statistical modeling and data analysis, we really do have a path to provide privacy guarantees to those methods and so we can still enjoy the benefits of the data science era while providing rather robust privacy guarantees to individuals. So perhaps a slightly crazy question, but if we take the ideas of differential privacy and take it to the nature of truth that's being explored currently. So what's your most favorite and least favorite food? Hmm. I'm not a real foodie, so I'm a big fan of spaghetti. Spaghetti? Yeah. What do you really don't like? I really don't like cauliflower. Wow, I love cauliflower. Okay. Is there one way to protect your preference for spaghetti by having an information campaign bloggers and so on of bots saying that you like cauliflower? So like this kind of the same kind of noise ideas, I mean if you think of in our politics today there's this idea of Russia hacking our elections. What's meant there I believe is bots spreading different kinds of information. Is that a kind of privacy or is that too much of a stretch? No it's not a stretch. I've not seen those ideas, you know, that is not a technique that to my knowledge will provide differential privacy, but to give an example like one very specific example about what you're discussing is there was a very interesting project at NYU I think led by Helen Nissenbaum there in which they basically built a browser plugin that tried to essentially obfuscate your Google searches. So to the extent that you're worried that Google is using your searches to build, you know, predictive models about you to decide what ads to show you which they might very reasonably want to do, but if you object to that they built this widget you could plug in and basically whenever you put in a query into Google it would send that query to Google, but in the background all of the time from your browser it would just be sending this torrent of irrelevant queries to the search engine. So you know it's like a weed and chaff thing so you know out of every thousand queries let's say that Google was receiving from your browser one of them was one that you put in but the other 999 were not okay so it's the same kind of idea kind of you know privacy by obfuscation. So I think that's an interesting idea, doesn't give you differential privacy. It's also I was actually talking to somebody at one of the large tech companies recently about the fact that you know just this kind of thing that there are some times when the response to my data needs to be very specific to my data right like I type mountain biking into Google, I want results on mountain biking and I really want Google to know that I typed in mountain biking, I don't want noise added to that. And so I think there's sort of maybe even interesting technical questions around notions of privacy that are appropriate where you know it's not that my data is part of some aggregate like medical records and that we're trying to discover important correlations and facts about the world at large but rather you know there's a service that I really want to you know pay attention to my specific data yet I still want some kind of privacy guarantee and I think these kind of obfuscation ideas are sort of one way of getting at that but maybe there are others as well. So where do you think we'll land in this algorithm driven society in terms of privacy? So sort of China like Kai Fuli describes you know it's collecting a lot of data on its citizens but in the best form it's actually able to provide a lot of sort of protect human rights and provide a lot of amazing services and it's worst forms that can violate those human rights and limit services. So where do you think we'll land because algorithms are powerful when they use data. So as a society do you think we'll give over more data? Is it possible to protect the privacy of that data? So I'm optimistic about the possibility of you know balancing the desire for individual privacy and individual control of privacy with kind of societally and commercially beneficial uses of data not unrelated to differential privacy or suggestions that say like well individuals should have control of their data. They should be able to limit the uses of that data. They should even you know there's you know fledgling discussions going on in research circles about allowing people selective use of their data and being compensated for it. And then you get to sort of very interesting economic questions like pricing right. And one interesting idea is that maybe differential privacy would also you know be a conceptual framework in which you could talk about the relative value of different people's data like you know to demystify this a little bit. If I'm trying to build a predictive model for some rare disease and I'm trying to use machine learning to do it, it's easy to get negative examples because the disease is rare right. But I really want to have lots of people with the disease in my data set okay. And so somehow those people's data with respect to this application is much more valuable to me than just like the background population. And so maybe they should be compensated more for it. And so you know I think these are kind of very, very fledgling conceptual questions that maybe we'll have kind of technical thought on them sometime in the coming years. But I do think we'll you know to kind of get more directly answer your question. I think I'm optimistic at this point from what I've seen that we will land at some you know better compromise than we're at right now where again you know privacy guarantees are few far between and weak and users have very, very little control. And I'm optimistic that we'll land in something that you know provides better privacy overall and more individual control of data and privacy. But you know I think to get there it's again just like fairness it's not going to be enough to propose algorithmic solutions. There's going to have to be a whole kind of regulatory legal process that prods companies and other parties to kind of adopt solutions. And I think you've mentioned the word control a lot and I think giving people control that's something that people don't quite have in a lot of these algorithms and that's a really interesting idea of giving them control. Some of that is actually literally an interface design question sort of just enabling because I think it's good for everybody to give users control. It's almost not a trade off except that you have to hire people that are good at interface design. Yeah. I mean the other thing that has to be said right is that you know it's a cliche but you know we as the users of many systems platforms and apps you know we are the product. We are not the customer. The customer are advertisers and our data is the product. Okay. So it's one thing to kind of suggest more individual control of data and privacy and uses but this you know if this happens in sufficient degree it will upend the entire economic model that has supported the internet to date. And so some other economic model will have to be you know we'll have to replace it. So the idea of markets you mentioned by exposing the economic model to the people they will then become a market. They could be participants in it. And you know this isn't you know this is not a weird idea right because there are markets for data already. It's just that consumers are not participants and there's like you know there's sort of you know publishers and content providers on one side that have inventory and then their advertisers on the others and you know you know Google and Facebook are running you know they're pretty much their entire revenue stream is by running two sided markets between those parties right. And so it's not a crazy idea that there would be like a three sided market or that you know that on one side of the market or the other we would have proxies representing our interest. It's not you know it's not a crazy idea but it would it's not a crazy technical idea but it would have pretty extreme economic consequences. Speaking of markets a lot of fascinating aspects of this world arise not from individual human beings but from the interaction of human beings. You've done a lot of work in game theory. First can you say what is game theory and how does it help us model and study? Yeah game theory of course let us give credit where it's due. You know it comes from the economist first and foremost but as I've mentioned before like you know computer scientists never hesitate to wander into other people's turf and so there is now this 20 year old field called algorithmic game theory. But you know game theory first and foremost is a mathematical framework for reasoning about collective outcomes in systems of interacting individuals. You know so you need at least two people to get started in game theory and many people are probably familiar with Prisoner's Dilemma as kind of a classic example of game theory and a classic example where everybody looking out for their own individual interests leads to a collective outcome that's kind of worse for everybody than what might be possible if they cooperated for example. But cooperation is not an equilibrium in Prisoner's Dilemma. And so my work in the field of algorithmic game theory more generally in these areas kind of looks at settings in which the number of actors is potentially extraordinarily large and their incentives might be quite complicated and kind of hard to model directly but you still want kind of algorithmic ways of kind of predicting what will happen or influencing what will happen in the design of platforms. So what to you is the most beautiful idea that you've encountered in game theory? There's a lot of them. I'm a big fan of the field. I mean you know I mean technical answers to that of course would include Nash's work just establishing that you know there is a competitive equilibrium under very very general circumstances which in many ways kind of put the field on a firm conceptual footing because if you don't have equilibrium it's kind of hard to ever reason about what might happen since you know there's just no stability. So just the idea that stability can emerge when there's multiple. Not that it will necessarily emerge just that it's possible right. Like the existence of equilibrium doesn't mean that sort of natural iterative behavior will necessarily lead to it. In the real world. Yeah. Maybe answering a slightly less personally than you asked the question I think within the field of algorithmic game theory perhaps the single most important kind of technical contribution that's been made is the realization between close connections between machine learning and game theory and in particular between game theory and the branch of machine learning that's known as no regret learning and this sort of provides a very general framework in which a bunch of players interacting in a game or a system each one kind of doing something that's in their self interest will actually kind of reach an equilibrium and actually reach an equilibrium in a you know a pretty you know a rather you know short amount of steps. So you kind of mentioned acting greedily can somehow end up pretty good for everybody. Or pretty bad. Or pretty bad. Yeah. It will end up stable. Yeah. Right. And and you know stability or equilibrium by itself is neither is not necessarily either a good thing or a bad thing. So what's the connection between machine learning and the ideas. Well I think we kind of talked about these ideas already in kind of a non technical way which is maybe the more interesting way of understanding them first which is you know we have many systems platforms and apps these days that work really hard to use our data and the data of everybody else on the platform to selfishly optimize on behalf of each user. OK. So you know let me let me give I think the cleanest example which is just driving apps navigation apps like you know Google Maps and Waze where you know miraculously compared to when I was growing up at least you know the objective would be the same when you wanted to drive from point A to point B spend the least time driving not necessarily minimize the distance but minimize the time. Right. And when I was growing up like the only resources you had to do that were like maps in the car which literally just told you what roads were available and then you might have like half hourly traffic reports just about the major freeways but not about side roads. So you were pretty much on your own. And now we've got these apps you pull it out and you say I want to go from point A to point B and in response kind of to what everybody else is doing if you like what all the other players in this game are doing right now here's the you know the route that minimizes your driving time. So it is really kind of computing a selfish best response for each of us in response to what all of the rest of us are doing at any given moment. And so you know I think it's quite fair to think of these apps as driving or nudging us all towards the competitive or Nash equilibrium of that game. Now you might ask like well that sounds great why is that a bad thing. Well you know it's known both in theory and with some limited studies from actual like traffic data that all of us being in this competitive equilibrium might cause our collective driving time to be higher maybe significantly higher than it would be under other solutions. And then you have to talk about what those other solutions might be and what the algorithms to implement them are which we do discuss in the kind of game theory chapter of the book. But similarly you know on social media platforms or on Amazon you know all these algorithms that are essentially trying to optimize our behalf they're driving us in a colloquial sense towards some kind of competitive equilibrium and you know one of the most important lessons of game theory is that just because we're at equilibrium doesn't mean that there's not a solution in which some or maybe even all of us might be better off. And then the connection to machine learning of course is that in all these platforms I've mentioned the optimization that they're doing on our behalf is driven by machine learning you know like predicting where the traffic will be predicting what products I'm going to like predicting what would make me happy in my newsfeed. Now in terms of the stability and the promise of that I have to ask just out of curiosity how stable are these mechanisms that you game theory is just the economist came up with and we all know that economists don't live in the real world just kidding sort of what's do you think when we look at the fact that we haven't blown ourselves up from the from a game theoretic concept of mutually shared destruction what are the odds that we destroy ourselves with nuclear weapons as one example of a stable game theoretic system? Just to prime your viewers a little bit I mean I think you're referring to the fact that game theory was taken quite seriously back in the 60s as a tool for reasoning about kind of Soviet US nuclear armament disarmament detente things like that. I'll be honest as huge of a fan as I am of game theory and its kind of rich history it still surprises me that you know you had people at the RAND Corporation back in those days kind of drawing up you know two by two tables and one the row player is you know the US and the column player is Russia and that they were taking seriously you know I'm sure if I was there maybe it wouldn't have seemed as naive as it does at the time you know. Seems to have worked which is why it seems naive. Well we're still here. We're still here in that sense. Yeah even though I kind of laugh at those efforts they were more sensible then than they would be now right because there were sort of only two nuclear powers at the time and you didn't have to worry about deterring new entrants and who was developing the capacity and so we have many you know it's definitely a game with more players now and more potential entrants. I'm not in general somebody who advocates using kind of simple mathematical models when the stakes are as high as things like that and the complexities are very political and social but we are still here. So you've worn many hats one of which the one that first caused me to become a big fan of your work many years ago is algorithmic trading. So I have to just ask a question about this because you have so much fascinating work there in the 21st century what role do you think algorithms have in space of trading investment in the financial sector? Yeah it's a good question I mean in the time I've spent on Wall Street and in finance you know I've seen a clear progression and I think it's a progression that kind of models the use of algorithms and automation more generally in society which is you know the things that kind of get taken over by the algos first are sort of the things that computers are obviously better at than people right so you know so first of all there needed to be this era of automation right where just you know financial exchanges became largely electronic which then enabled the possibility of you know trading becoming more algorithmic because once you know that exchanges are electronic an algorithm can submit an order through an API just as well as a human can do at a monitor quickly can read all the data so yeah and so you know I think the places where algorithmic trading have had the greatest inroads and had the first inroads were in kind of execution problems kind of optimized execution problems so what I mean by that is at a large brokerage firm for example one of the lines of business might be on behalf of large institutional clients taking you know what we might consider difficult trade so it's not like a mom and pop investor saying I want to buy a hundred shares of Microsoft it's a large hedge fund saying you know I want to buy a very very large stake in Apple and I want to do it over the span of a day and it's such a large volume that if you're not clever about how you break that trade up not just over time but over perhaps multiple different electronic exchanges that all let you trade Apple on their platform you know you will you will move you'll push prices around in a way that hurts your your execution so you know this is the kind of you know this is an optimization problem this is a control problem right and so machines are better we we know how to design algorithms you know that are better at that kind of thing than a person is going to be able to do because we can take volumes of historical and real time data to kind of optimize the schedule with which we trade and you know similarly high frequency trading you know which is closely related but not the same as optimized execution where you're just trying to spot very very temporary you know mispricings between exchanges or within an asset itself or just predict directional movement of a stock because of the kind of very very low level granular buying and selling data in the in the exchange machines are good at this kind of stuff it's kind of like the mechanics of trading what about the can machines do long terms of prediction yeah so I think we are in an era where you know clearly there have been some very successful you know quant hedge funds that are you know in what we would traditionally call you know still in this the stat arb regime like so you know what's that stat arb referring to statistical arbitrage but but for the purposes of this conversation what it really means is making directional predictions in asset price movement or returns your prediction about that directional movement is good for you know you you have a view that it's valid for some period of time between a few seconds and a few days and that's the amount of time that you're going to kind of get into the position hold it and then hopefully be right about the directional movement and you know buy low and sell high as the cliche goes. So that is a you know kind of a sweet spot I think for quant trading and investing right now and has been for some time when you really get to kind of more Warren Buffett style timescales right like you know my cartoon of Warren Buffett is that you know Warren Buffett sits and thinks what the long term value of Apple really should be and he doesn't even look at what Apple is doing today he just decides you know you know I think that this is what its long term value is and it's far from that right now and so I'm going to buy some Apple or you know short some Apple and I'm going to I'm going to sit on that for 10 or 20 years okay. So when you're at that kind of timescale or even more than just a few days all kinds of other sources of risk and information you know so now you're talking about holding things through recessions and economic cycles, wars can break out. So there you have to understand human nature at a level that. Yeah and you need to just be able to ingest many many more sources of data that are on wildly different timescales right. So if I'm an HFT I'm a high frequency trader like I don't I don't I really my main source of data is just the data from the exchanges themselves about the activity in the exchanges right and maybe I need to pay you know I need to keep an eye on the news right because you know that can cause sudden you know the CEO gets caught in a scandal or you know gets run over by a bus or something that can cause very sudden changes but you know I don't need to understand economic cycles I don't need to understand recessions I don't need to worry about the political situation or war breaking out in this part of the world because you know all I need to know is as long as that's not going to happen in the next 500 milliseconds then you know my model is good. When you get to these longer timescales you really have to worry about that kind of stuff and people in the machine learning community are starting to think about this. We held a we jointly sponsored a workshop at Penn with the Federal Reserve Bank of Philadelphia a little more than a year ago on you know I think the title is something like machine learning for macroeconomic prediction. You know macroeconomic referring specifically to these longer timescales and you know it was an interesting conference but it you know my it left me with greater confidence that we have a long way to go to you know and so I think that people that you know in the grand scheme of things you know if somebody asked me like well whose job on Wall Street is safe from the bots I think people that are at that longer you know timescale and have that appetite for all the risks involved in long term investing and that really need kind of not just algorithms that can optimize from data but they need views on stuff they need views on the political landscape economic cycles and the like and I think you know they're they're they're pretty safe for a while as far as I can tell. So Warren Buffett's job is not seeing you know a robo Warren Buffett anytime soon. Give him comfort. Last question. If you could go back to if there's a day in your life you could relive because it made you truly happy. Maybe you outside family what otherwise you know what what what day would it be. But can you look back you remember just being profoundly transformed in some way or blissful. I'll answer a slightly different question which is like what's a day in my my life or my career that was kind of a watershed moment. I went straight from undergrad to doctoral studies and you know that's not at all atypical and I'm also from an academic family like my my dad was a professor my uncle on his side as a professor both my grandfathers were professors. All kinds of majors to philosophy. Yeah they're kind of all over the map yeah and I was a grad student here just up the river at Harvard and came to study with Les Valiant which was a wonderful experience. But you know I remember my first year of graduate school I was generally pretty unhappy and I was unhappy because you know at Berkeley as an undergraduate you know yeah I studied a lot of math and computer science but it was a huge school first of all and I took a lot of other courses as we've discussed I started as an English major and took history courses and art history classes and had friends you know that did all kinds of different things. And you know Harvard's a much smaller institution than Berkeley and its computer science department especially at that time was was a much smaller place than it is now. And I suddenly just felt very you know like I'd gone from this very big world to this highly specialized world and now all of the classes I was taking were computer science classes and I was only in classes with math and computer science people. And so I was you know I thought often in that first year of grad school about whether I really wanted to stick with it or not and you know I thought like oh I could you know stop with a master's I could go back to the Bay Area and to California and you know this was in one of the early periods where there was you know like you could definitely get a relatively good job paying job at one of the one of the tech companies back you know that were the big tech companies back then. And so I distinctly remember like kind of a late spring day when I was kind of you know sitting in Boston Common and kind of really just kind of chewing over what I wanted to do with my life and I realized like okay and I think this is where my academic background helped me a great deal. I sort of realized you know yeah you're not having a great time right now this feels really narrowing but you know that you're here for research eventually and to do something original and to try to you know carve out a career where you kind of you know choose what you want to think about you know and have a great deal of independence. And so you know at that point I really didn't have any real research experience yet I mean it was trying to think about some problems with very little success but I knew that like I hadn't really tried to do the thing that I knew I'd come to do and so I thought you know I'm going to stick through it for the summer and you know and that was very formative because I went from kind of contemplating quitting to you know a year later it being very clear to me I was going to finish because I still had a ways to go but I kind of started doing research it was going well it was really interesting and it was sort of a complete transformation you know it's just that transition that I think every doctoral student makes at some point which is to sort of go from being like a student of what's been done before to doing you know your own thing and figure out what makes you interested in what your strengths and weaknesses are as a researcher and once you know I kind of made that decision on that particular day at that particular moment in Boston Common you know I'm glad I made that decision. And also just accepting the painful nature of that journey. Yeah exactly exactly. In that moment said I'm gonna I'm gonna stick it out yeah I'm gonna stick around for a while. Well Michael I've looked off do you work for a long time it's really nice to talk to you thank you so much. It's great to get back in touch with you too and see how great you're doing as well. Thanks a lot. Thank you. which is a relatively weak thing, but it's better than nothing. And also the more ambitious thing of trying to give some individual promises, but even that doesn't incorporate, I think something that you're hinting at here is what I might call subjective fairness, right? So a lot of the definitions, I mean, all of the definitions in the algorithmic fairness literature are what I would kind of call received wisdom definitions. It's sort of, you know, somebody like me sits around and things like, okay, you know, I think here's a technical definition of fairness that I think people should want or that they should, you know, think of as some notion of fairness, maybe not the only one, maybe not the best one, maybe not the last one. But we really actually don't know from a subjective standpoint, like what people really think is fair. You know, we just started doing a little bit of work in our group at actually doing kind of human subject experiments in which we, you know, ask people about, you know, we ask them questions about fairness, we survey them, we, you know, we show them pairs of individuals in, let's say, a criminal recidivism prediction setting, and we ask them, do you think these two individuals should be treated the same as a matter of fairness? And to my knowledge, there's not a large literature in which ordinary people are asked about, you know, they have sort of notions of their subjective fairness elicited from them. It's mainly, you know, kind of scholars who think about fairness kind of making up their own definitions. And I think this needs to change actually for many social norms, not just for fairness, right? So there's a lot of discussion these days in the AI community about interpretable AI or understandable AI. And as far as I can tell, everybody agrees that deep learning or at least the outputs of deep learning are not very understandable, and people might agree that sparse linear models with integer coefficients are more understandable. But nobody's really asked people. You know, there's very little literature on, you know, sort of showing people models and asking them, do they understand what the model is doing? And I think that in all these topics, as these fields mature, we need to start doing more behavioral work. Yeah, which is one of my deep passions is psychology. And I always thought computer scientists will be the best future psychologists in a sense that data is, especially in this modern world, the data is a really powerful way to understand and study human behavior. And you've explored that with your game theory side of work as well. Yeah, I'd like to think that what you say is true about computer scientists and psychology from my own limited wandering into human subject experiments. We have a great deal to learn, not just computer science, but AI and machine learning more specifically, I kind of think of as imperialist research communities in that, you know, kind of like physicists in an earlier generation, computer scientists kind of don't think of any scientific topic that's off limits to them. They will like freely wander into areas that others have been thinking about for decades or longer. And, you know, we usually tend to embarrass ourselves in those efforts for some amount of time. Like, you know, I think reinforcement learning is a good example, right? So a lot of the early work in reinforcement learning, I have complete sympathy for the control theorists that looked at this and said like, okay, you are reinventing stuff that we've known since like the forties, right? But, you know, in my view, eventually this sort of, you know, computer scientists have made significant contributions to that field, even though we kind of embarrassed ourselves for the first decade. So I think if computer scientists are gonna start engaging in kind of psychology, human subjects type of research, we should expect to be embarrassing ourselves for a good 10 years or so, and then hope that it turns out as well as, you know, some other areas that we've waded into. So you kind of mentioned this, just to linger on the idea of an ethical algorithm, of idea of groups, sort of group thinking and individual thinking. And we're struggling that. One of the amazing things about algorithms and your book and just this field of study is it gets us to ask, like forcing machines, converting these ideas into algorithms is forcing us to ask questions of ourselves as a human civilization. So there's a lot of people now in public discourse doing sort of group thinking, thinking like there's particular sets of groups that we don't wanna discriminate against and so on. And then there is individuals, sort of in the individual life stories, the struggles they went through and so on. Now, like in philosophy, it's easier to do group thinking because you don't, it's very hard to think about individuals. There's so much variability, but with data, you can start to actually say, you know what group thinking is too crude. You're actually doing more discrimination by thinking in terms of groups and individuals. Can you linger on that kind of idea of group versus individual and ethics? And is it good to continue thinking in terms of groups in algorithms? So let me start by answering a very good high level question with a slightly narrow technical response, which is these group definitions of fairness, like here's a few groups, like different racial groups, maybe gender groups, maybe age, what have you. And let's make sure that for none of these groups, do we have a false negative rate, which is much higher than any other one of these groups. Okay, so these are kind of classic group aggregate notions of fairness. And you know, but at the end of the day, an individual you can think of as a combination of all of their attributes, right? They're a member of a racial group, they have a gender, they have an age, and many other demographic properties that are not biological, but that are still very strong determinants of outcome and personality and the like. So one, I think, useful spectrum is to sort of think about that array between the group and the specific individual, and to realize that in some ways, asking for fairness at the individual level is to sort of ask for group fairness simultaneously for all possible combinations of groups. So in particular, you know, if I build a predictive model that meets some definition of fairness, definition of fairness by race, by gender, by age, by what have you, marginally, to get it slightly technical, sort of independently, I shouldn't expect that model to not discriminate against disabled Hispanic women over age 55, making less than $50,000 a year annually, even though I might have protected each one of those attributes marginally. So the optimization, actually, that's a fascinating way to put it. So you're just optimizing, the one way to achieve the optimizing fairness for individuals is just to add more and more definitions of groups that each individual belongs to. That's right. So, you know, at the end of the day, we could think of all of ourselves as groups of size one because eventually there's some attribute that separates you from me and everybody else in the world, okay? And so it is possible to put, you know, these incredibly coarse ways of thinking about fairness and these very, very individualistic specific ways on a common scale. And you know, one of the things we've worked on from a research perspective is, you know, so we sort of know how to, you know, in relative terms, we know how to provide fairness guarantees at the core system of the scale. We don't know how to provide kind of sensible, tractable, realistic fairness guarantees at the individual level, but maybe we could start creeping towards that by dealing with more refined subgroups. I mean, we gave a name to this phenomenon where, you know, you protect, you enforce some definition of fairness for a bunch of marginal attributes or features, but then you find yourself discriminating against a combination of them. We call that fairness gerrymandering because like political gerrymandering, you know, you're giving some guarantee at the aggregate level, but when you kind of look in a more granular way at what's going on, you realize that you're achieving that aggregate guarantee by sort of favoring some groups and discriminating against other ones. And so there are, you know, it's early days, but there are algorithmic approaches that let you start creeping towards that, you know, individual end of the spectrum. Does there need to be human input in the form of weighing the value of the importance of each kind of group? So for example, is it like, so gender, say crudely speaking, male and female, and then different races, are we as humans supposed to put value on saying gender is 0.6 and race is 0.4 in terms of in the big optimization of achieving fairness? Is that kind of what humans are supposed to do here? I mean, of course, you know, I don't need to tell you that, of course, technically one could incorporate such weights if you wanted to into a definition of fairness. You know, fairness is an interesting topic in that having worked in the book being about both fairness, privacy, and many other social norms, fairness, of course, is a much, much more loaded topic. So privacy, I mean, people want privacy, people don't like violations of privacy, violations of privacy cause damage, angst, and bad publicity for the companies that are victims of them. But sort of everybody agrees more data privacy would be better than less data privacy. And you don't have these, somehow the discussions of fairness don't become politicized along other dimensions like race and about gender and, you know, whether we, and, you know, you quickly find yourselves kind of revisiting topics that have been kind of unresolved forever, like affirmative action, right? Sort of, you know, like, why are you protecting, and some people will say, why are you protecting this particular racial group? And others will say, well, we need to do that as a matter of retribution. Other people will say, it's a matter of economic opportunity. And I don't know which of, you know, whether any of these are the right answers, but you sort of, fairness is sort of special in that as soon as you start talking about it, you inevitably have to participate in debates about fair to whom, at what expense to who else. I mean, even in criminal justice, right, you know, where people talk about fairness in criminal sentencing or, you know, predicting failures to appear or making parole decisions or the like, they will, you know, they'll point out that, well, these definitions of fairness are all about fairness for the criminals. And what about fairness for the victims, right? So when I basically say something like, well, the false incarceration rate for black people and white people needs to be roughly the same, you know, there's no mention of potential victims of criminals in such a fairness definition. And that's the realm of public discourse. I should actually recommend, I just listened to people listening, Intelligence Squares debates, US edition just had a debate. They have this structure where you have old Oxford style or whatever they're called, debates, you know, it's two versus two and they talked about affirmative action and it was incredibly interesting that there's really good points on every side of this issue, which is fascinating to listen to. Yeah, yeah, I agree. And so it's interesting to be a researcher trying to do, for the most part, technical algorithmic work, but Aaron and I both quickly learned you cannot do that and then go out and talk about it and expect people to take it seriously if you're unwilling to engage in these broader debates that are entirely extra algorithmic, right? They're not about, you know, algorithms and making algorithms better. They're sort of, you know, as you said, sort of like, what should society be protecting in the first place? When you discuss the fairness, an algorithm that achieves fairness, whether in the constraints and the objective function, there's an immediate kind of analysis you can perform, which is saying, if you care about fairness in gender, this is the amount that you have to pay for it in terms of the performance of the system. Like do you, is there a role for statements like that in a table, in a paper, or do you want to really not touch that? No, no, we want to touch that and we do touch it. So I mean, just again, to make sure I'm not promising your viewers more than we know how to provide, but if you pick a definition of fairness, like I'm worried about gender discrimination and you pick a notion of harm, like false rejection for a loan, for example, and you give me a model, I can definitely, first of all, go audit that model. It's easy for me to go, you know, from data to kind of say like, okay, your false rejection rate on women is this much higher than it is on men, okay? But once you also put the fairness into your objective function, I mean, I think the table that you're talking about is what we would call the Pareto curve, right? You can literally trace out, and we give examples of such plots on real data sets in the book, you have two axes. On the X axis is your error, on the Y axis is unfairness by whatever, you know, if it's like the disparity between false rejection rates between two groups. And you know, your algorithm now has a knob that basically says, how strongly do I want to enforce fairness? And the less unfair, you know, if the two axes are error and unfairness, we'd like to be at zero, zero. We'd like zero error and zero unfairness simultaneously. Anybody who works in machine learning knows that you're generally not going to get to zero error period without any fairness constraint whatsoever. So that's not going to happen. But in general, you know, you'll get this, you'll get some kind of convex curve that specifies the numerical trade off you face. You know, if I want to go from 17% error down to 16% error, what will be the increase in unfairness that I experienced as a result of that? And so this curve kind of specifies the, you know, kind of undominated models. Models that are off that curve are, you know, can be strictly improved in one or both dimensions. You can, you know, either make the error better or the unfairness better or both. And I think our view is that not only are these objects, these Pareto curves, you know, with efficient frontiers as you might call them, not only are they valuable scientific objects, I actually think that they in the near term might need to be the interface between researchers working in the field and stakeholders in given problems. So you know, you could really imagine telling a criminal jurisdiction, look, if you're concerned about racial fairness, but you're also concerned about accuracy. You want to, you know, you want to release on parole people that are not going to recommit a violent crime and you don't want to release the ones who are. So you know, that's accuracy. But if you also care about those, you know, the mistakes you make not being disproportionately on one racial group or another, you can show this curve. I'm hoping that in the near future, it'll be possible to explain these curves to non technical people that are the ones that have to make the decision, where do we want to be on this curve? Like, what are the relative merits or value of having lower error versus lower unfairness? You know, that's not something computer scientists should be deciding for society, right? That, you know, the people in the field, so to speak, the policymakers, the regulators, that's who should be making these decisions. But I think and hope that they can be made to understand that these trade offs generally exist and that you need to pick a point and like, and ignoring the trade off, you know, you're implicitly picking a point anyway, right? You just don't know it and you're not admitting it. Just to linger on the point of trade offs, I think that's a really important thing to sort of think about. So you think when we start to optimize for fairness, there's almost always in most system going to be trade offs. Can you like, what's the trade off between just to clarify, there have been some sort of technical terms thrown around, but sort of a perfectly fair world. Why is that? Why will somebody be upset about that? The specific trade off I talked about just in order to make things very concrete was between numerical error and some numerical measure of unfairness. What is numerical error in the case of... Just like say predictive error, like, you know, the probability or frequency with which you release somebody on parole who then goes on to recommit a violent crime or keep incarcerated somebody who would not have recommitted a violent crime. So in the case of awarding somebody parole or giving somebody parole or letting them out on parole, you don't want them to recommit a crime. So it's your system failed in prediction if they happen to do a crime. Okay, so that's one axis. And what's the fairness axis? So then the fairness axis might be the difference between racial groups in the kind of false positive predictions, namely people that I kept incarcerated predicting that they would recommit a violent crime when in fact they wouldn't have. Right. And the unfairness of that, just to linger it and allow me to in eloquently to try to sort of describe why that's unfair, why unfairness is there. The unfairness you want to get rid of is that in the judge's mind, the bias of having being brought up to society, the slight racial bias, the racism that exists in the society, you want to remove that from the system. Another way that's been debated is sort of equality of opportunity versus equality of outcome. And there's a weird dance there that's really difficult to get right. And we don't, affirmative action is exploring that space. Right. And then this also quickly bleeds into questions like, well, maybe if one group really does recommit crimes at a higher rate, the reason for that is that at some earlier point in the pipeline or earlier in their lives, they didn't receive the same resources that the other group did. And so there's always in kind of fairness discussions, the possibility that the real injustice came earlier, right? Earlier in this individual's life, earlier in this group's history, et cetera, et cetera. And so a lot of the fairness discussion is almost, the goal is for it to be a corrective mechanism to account for the injustice earlier in life. By some definitions of fairness or some theories of fairness, yeah. Others would say like, look, it's not to correct that injustice, it's just to kind of level the playing field right now and not falsely incarcerate more people of one group than another group. But I mean, I think just it might be helpful just to demystify a little bit about the many ways in which bias or unfairness can come into algorithms, especially in the machine learning era, right? I think many of your viewers have probably heard these examples before, but let's say I'm building a face recognition system, right? And so I'm kind of gathering lots of images of faces and trying to train the system to recognize new faces of those individuals from training on a training set of those faces of individuals. And it shouldn't surprise anybody or certainly not anybody in the field of machine learning if my training data set was primarily white males and I'm training the model to maximize the overall accuracy on my training data set, that the model can reduce its error most by getting things right on the white males that constitute the majority of the data set, even if that means that on other groups, they will be less accurate, okay? Now, there's a bunch of ways you could think about addressing this. One is to deliberately put into the objective of the algorithm not to optimize the error at the expense of this discrimination, and then you're kind of back in the land of these kind of two dimensional numerical trade offs. A valid counter argument is to say like, well, no, you don't have to, there's no, you know, the notion of the tension between error and accuracy here is a false one. You could instead just go out and get much more data on these other groups that are in the minority and, you know, equalize your data set, or you could train a separate model on those subgroups and, you know, have multiple models. The point I think we would, you know, we tried to make in the book is that those things have cost too, right? Going out and gathering more data on groups that are relatively rare compared to your plurality or more majority group that, you know, it may not cost you in the accuracy of the model, but it's going to cost, you know, it's going to cost the company developing this model more money to develop that, and it also costs more money to build separate predictive models and to implement and deploy them. So even if you can find a way to avoid the tension between error and accuracy in training a model, you might push the cost somewhere else, like money, like development time, research time and the like. There are fundamentally difficult philosophical questions, in fairness, and we live in a very divisive political climate, outraged culture. There is alt right folks on 4chan, trolls. There is social justice warriors on Twitter. There's very divisive, outraged folks on all sides of every kind of system. How do you, how do we as engineers build ethical algorithms in such divisive culture? Do you think they could be disjoint? The human has to inject your values, and then you can optimize over those values. But in our times, when you start actually applying these systems, things get a little bit challenging for the public discourse. How do you think we can proceed? Yeah, I mean, for the most part in the book, a point that we try to take some pains to make is that we don't view ourselves or people like us as being in the position of deciding for society what the right social norms are, what the right definitions of fairness are. Our main point is to just show that if society or the relevant stakeholders in a particular domain can come to agreement on those sorts of things, there's a way of encoding that into algorithms in many cases, not in all cases. One other misconception that hopefully we definitely dispel is sometimes people read the title of the book and I think not unnaturally fear that what we're suggesting is that the algorithms themselves should decide what those social norms are and develop their own notions of fairness and privacy or ethics, and we're definitely not suggesting that. The title of the book is Ethical Algorithm, by the way, and I didn't think of that interpretation of the title. That's interesting. Yeah, yeah. I mean, especially these days where people are concerned about the robots becoming our overlords, the idea that the robots would also sort of develop their own social norms is just one step away from that. But I do think, obviously, despite disclaimer that people like us shouldn't be making those decisions for society, we are kind of living in a world where in many ways computer scientists have made some decisions that have fundamentally changed the nature of our society and democracy and sort of civil discourse and deliberation in ways that I think most people generally feel are bad these days, right? But they had to make, so if we look at people at the heads of companies and so on, they had to make those decisions, right? There has to be decisions, so there's two options, either you kind of put your head in the sand and don't think about these things and just let the algorithm do what it does, or you make decisions about what you value, you know, of injecting moral values into the algorithm. Look, I never mean to be an apologist for the tech industry, but I think it's a little bit too far to sort of say that explicit decisions were made about these things. So let's, for instance, take social media platforms, right? So like many inventions in technology and computer science, a lot of these platforms that we now use regularly kind of started as curiosities, right? I remember when things like Facebook came out and its predecessors like Friendster, which nobody even remembers now, people really wonder, like, why would anybody want to spend time doing that? I mean, even the web when it first came out, when it wasn't populated with much content and it was largely kind of hobbyists building their own kind of ramshackle websites, a lot of people looked at this and said, well, what is the purpose of this thing? Why is this interesting? Who would want to do this? And so even things like Facebook and Twitter, yes, technical decisions were made by engineers, by scientists, by executives in the design of those platforms, but, you know, I don't think 10 years ago anyone anticipated that those platforms, for instance, might kind of acquire undue, you know, influence on political discourse or on the outcomes of elections. And I think the scrutiny that these companies are getting now is entirely appropriate, but I think it's a little too harsh to kind of look at history and sort of say like, oh, you should have been able to anticipate that this would happen with your platform. And in this sort of gaming chapter of the book, one of the points we're making is that, you know, these platforms, right, they don't operate in isolation. So unlike the other topics we're discussing, like fairness and privacy, like those are really cases where algorithms can operate on your data and make decisions about you and you're not even aware of it, okay? Things like Facebook and Twitter, these are, you know, these are systems, right? These are social systems and their evolution, even their technical evolution because machine learning is involved, is driven in no small part by the behavior of the users themselves and how the users decide to adopt them and how to use them. And so, you know, I'm kind of like who really knew that, you know, until we saw it happen, who knew that these things might be able to influence the outcome of elections? Who knew that, you know, they might polarize political discourse because of the ability to, you know, decide who you interact with on the platform and also with the platform naturally using machine learning to optimize for your own interest that they would further isolate us from each other and, you know, like feed us all basically just the stuff that we already agreed with. So I think, you know, we've come to that outcome, I think, largely, but I think it's something that we all learned together, including the companies as these things happen. You asked like, well, are there algorithmic remedies to these kinds of things? And again, these are big problems that are not going to be solved with, you know, somebody going in and changing a few lines of code somewhere in a social media platform. But I do think in many ways, there are definitely ways of making things better. I mean, like an obvious recommendation that we make at some point in the book is like, look, you know, to the extent that we think that machine learning applied for personalization purposes in things like newsfeed, you know, or other platforms has led to polarization and intolerance of opposing viewpoints. As you know, right, these algorithms have models, right, and they kind of place people in some kind of metric space, and they place content in that space, and they sort of know the extent to which I have an affinity for a particular type of content. And by the same token, they also probably have that same model probably gives you a good idea of the stuff I'm likely to violently disagree with or be offended by, okay? So you know, in this case, there really is some knob you could tune that says like, instead of showing people only what they like and what they want, let's show them some stuff that we think that they don't like, or that's a little bit further away. And you could even imagine users being able to control this, you know, just like everybody gets a slider, and that slider says like, you know, how much stuff do you want to see that's kind of, you know, you might disagree with, or is at least further from your interest. It's almost like an exploration button. So just get your intuition. Do you think engagement, so like you staying on the platform, you're staying engaged. Do you think fairness, ideas of fairness won't emerge? Like how bad is it to just optimize for engagement? Do you think we'll run into big trouble if we're just optimizing for how much you love the platform? Well, I mean, optimizing for engagement kind of got us where we are. So do you, one, have faith that it's possible to do better? And two, if it is, how do we do better? I mean, it's definitely possible to do different, right? And again, you know, it's not as if I think that doing something different than optimizing for engagement won't cost these companies in real ways, including revenue and profitability potentially. In the short term at least. Yeah. In the short term. Right. And again, you know, if I worked at these companies, I'm sure that it would have seemed like the most natural thing in the world also to want to optimize engagement, right? And that's good for users in some sense. You want them to be, you know, vested in the platform and enjoying it and finding it useful, interesting, and or productive. But you know, my point is, is that the idea that there is, that it's sort of out of their hands as you said, or that there's nothing to do about it, never say never, but that strikes me as implausible as a machine learning person, right? I mean, these companies are driven by machine learning and this optimization of engagement is essentially driven by machine learning, right? It's driven by not just machine learning, but you know, very, very large scale A, B experimentation where you kind of tweak some element of the user interface or tweak some component of an algorithm or tweak some component or feature of your click through prediction model. And my point is, is that anytime you know how to optimize for something, you, you know, by def, almost by definition, that solution tells you how not to optimize for it or to do something different. Engagement can be measured. So sort of optimizing for sort of minimizing divisiveness or maximizing intellectual growth over the lifetime of a human being are very difficult to measure. That's right. And I'm not claiming that doing something different will immediately make it apparent that this is a good thing for society and in particular, I mean, I think one way of thinking about where we are on some of these social media platforms is that, you know, it kind of feels a bit like we're in a bad equilibrium, right? That these systems are helping us all kind of optimize something myopically and selfishly for ourselves and of course, from an individual standpoint at any given moment, like why would I want to see things in my newsfeed that I found irrelevant, offensive or, you know, or the like, okay? But you know, maybe by all of us, you know, having these platforms myopically optimized in our interests, we have reached a collective outcome as a society that we're unhappy with in different ways. Let's say with respect to things like, you know, political discourse and tolerance of opposing viewpoints. And if Mark Zuckerberg gave you a call and said, I'm thinking of taking a sabbatical, could you run Facebook for me for six months? What would you, how? I think no thanks would be my first response, but there are many aspects of being the head of the entire company that are kind of entirely exogenous to many of the things that we're discussing here. Yes. And so I don't really think I would need to be CEO of Facebook to kind of implement the, you know, more limited set of solutions that I might imagine. But I think one concrete thing they could do is they could experiment with letting people who chose to, to see more stuff in their newsfeed that is not entirely kind of chosen to optimize for their particular interests, beliefs, et cetera. So the, the kind of thing, so I could speak to YouTube, but I think Facebook probably does something similar is they're quite effective at automatically finding what sorts of groups you belong to, not based on race or gender or so on, but based on the kind of stuff you enjoy watching in the case of YouTube. Sort of, it's a, it's a difficult thing for Facebook or YouTube to then say, well, you know what? We're going to show you something from a very different cluster. Even though we believe algorithmically, you're unlikely to enjoy that thing sort of that's a weird jump to make. There has to be a human, like at the very top of that system that says, well, that will be longterm healthy for you. That's more than an algorithmic decision. Or that same person could say that'll be longterm healthy for the platform or for the platform's influence on society outside of the platform, right? And it, you know, it's easy for me to sit here and say these things, but conceptually I do not think that these are kind of totally or should, they shouldn't be kind of completely alien ideas, right? That, you know, you could try things like this and it wouldn't be, you know, we wouldn't have to invent entirely new science to do it because if we're all already embedded in some metric space and there's a notion of distance between you and me and every other, every piece of content, then, you know, we know exactly, you know, the same model that tells, you know, dictates how to make me really happy also tells how to make me as unhappy as possible as well. Right. The focus in your book and algorithmic fairness research today in general is on machine learning, like we said, is data, but, and just even the entire AI field right now is captivated with machine learning, with deep learning. Do you think ideas in symbolic AI or totally other kinds of approaches are interesting, useful in the space, have some promising ideas in terms of fairness? I haven't thought about that question specifically in the context of fairness. I definitely would agree with that statement in the large, right? I mean, I am, you know, one of many machine learning researchers who do believe that the great successes that have been shown in machine learning recently are great successes, but they're on a pretty narrow set of tasks. I mean, I don't, I don't think we're kind of notably closer to general artificial intelligence now than we were when I started my career. I mean, there's been progress and I do think that we are kind of as a community, maybe looking a bit where the light is, but the light is shining pretty bright there right now and we're finding a lot of stuff. So I don't want to like argue with the progress that's been made in areas like deep learning, for example. This touches another sort of related thing that you mentioned and that people might misinterpret from the title of your book, ethical algorithm. Is it possible for the algorithm to automate some of those decisions? Sort of a higher level decisions of what kind of, like what, what should be fair, what should be fair. The more you know about a field, the more aware you are of its limitations. And so I'm a, I'm pretty leery of sort of trying, you know, there's, there's so much we don't all, we already don't know in fairness, even when we're the ones picking the fairness definitions and, you know, comparing alternatives and thinking about the tensions between different definitions that the idea of kind of letting the algorithm start exploring as well.

本集資源與出處