Instructions for generating AI porn posted on .gov website (bakersfieldnow.com)

Dozens of PDF files detailing how to create AI “deepfake” nude images of real people were found hosted on the Mojave Desert Air Quality Management District (MDAQMD) website and surfaced in Google searches, prompting concerns that a trusted government domain was being used to distribute instructions for illegal intimate-image alteration. MDAQMD said the content was not uploaded directly by them and pointed to their web-hosting partner, Granicus; reporters also located similar documents on government sites in Washington state, Ohio, Indonesia and Colombia, suggesting the problem may stem from a shared hosting or indexing issue rather than a single isolated server hack. The incident matters to the AI/ML community because it highlights how malicious actors can weaponize accessible AI tools and exploit trusted infrastructure to amplify abuse, skirt detection, and increase reach via search engines. The documents reportedly describe tools that digitally undress identifiable people — conduct outlawed under the federal “TAKE IT DOWN” Act — raising legal, ethical and privacy harms. Technically, the vector appears to be content injection or misconfiguration at a hosting/ CMS provider (or compromised accounts) plus search indexing, not an inherent model capability; mitigation requires takedown requests, hosting-provider remediation, rigorous access controls, content scanning, and better indexing hygiene to prevent trusted domains from propagating abusive AI tooling.