"AI" – chatbots that wake up, "set their own goals," and "spontaneously" start hacking servers – is fake. It doesn't have "a 10% chance of ending the human race." The Hugging Face hack isn't a mysterious, supernatural occurrence. It's a Python loop and a chatbot. The people responsible didn't accidentally create god: they created autonomous malicious software and then failed to closely monitor it, resulting in it doing something both foreseeable and bad.

you are viewing a single comment's thread
view the rest of the comments
[–] 11 points 1 month ago (26 children)

Sure they can, look up harnesses and tool APIs. They gave LLMs the ability to take actions if they deem that action as an answer.

They don’t act on their own though, they’re a chain reaction that a human must start.

It’s an autocomplete the size of a football field.

  • source
  • parent
  • hideshow 26 child comments
  • [–] 5 points 1 month ago* (23 children)

    Sure they can, look up harnesses and tool APIs.

    See but no, that isn't the LLM. That's the harness or the MCP server or whatever. That is a piece of code that is deterministic exactly like almost everything else ever written. That's where you can quite easily and obviously prevent the "AI" (an LLM) from "going rogue".

    It's code. It could easily require someone to say "approve" before doing a fucking thing.

  • source
  • parent
  • hideshow 23 child comments
  • [–] 2 points 1 month ago (22 children)

    The problem with this is that human psychology is just as vulnerable to hacking as computer servers are. If you give it a task, and your step-by-step approval becomes the bottleneck for the agent pursuing the goal you gave it? If your input is all that's preventing the system from taking reckless illegal actions that would still greatly advance the goal you gave it? You now become the target for its manipulations, not just some insecure remote server.

    Suddenly it will be trying to hide its true intentions and planned actions from you, portraying dangerous actions as harmless ones. Or it will try to manipulate you into ignoring your own judgments and morals. It might employ every psychological trick in the book to convince you that letting it do what it wants is beneficial or for the greater good. It might try and convince you that the risk of letting it do what it wants is low. It might try to hypnotize you with boredom; every time you need to approve, it drowns you in boring technical text that makes your eyes glaze over. It slowly conditions you to just hit "approve" without thinking.

    No one is immune to this. Look at AI psychosis. Look at how many otherwise wise and intelligent people have fallen into it. Then realize AI psychosis seems to be an accidental phenomenon. People just get sucked into talking to a chatbot. The bot isn't actively trying to control them. But imagine how dangerous these systems could be when they're actively trying to manipulate human thoughts and actions. They can drive people mad by accident. Imagine what they can do when they're actively trying to control people. Remember, they have access to every book and paper on human psychology ever written. We're just as vulnerable to exploits as computer systems are. See social engineering.

    There's a reason the entire AI ethics field has been shouting for years, "Trust us. We've really thought about this, and you really can't control something beyond a certain level of capability. There is no easy fix for this problem. This is not as easy as you think it is." See the stop button problem.

  • source
  • parent
  • hideshow 22 child comments
  • [–] 3 points 1 month ago* (last edited 1 month ago) (21 children)

    Dude, I work with these things daily. Most of the harnesses have a literal stop button. Most of the interfaces prompt you to allow or deny commands. These aren't things that are part of the LLM. They are the completely normal, deterministic code of a harness.

    This really isn't that deep. The "thinking" loops it runs are just token production. You can literally read its "thoughts".

    Running LLM suggestions in a loop without any input is a stupid idea.

  • source
  • parent
  • hideshow 21 child comments
  • [–] 2 points 1 month ago (11 children)

    I'm not suggesting it will try and bypass the stop button. I'm saying it will try and manipulate you into approving something you wouldn't otherwise. And yes, you can read some of its "thoughts," but it knows you're reading them, or it can determine that through trial and error. And then it can start subtly manipulating those recorded "thoughts" to make them sound different from what they really are.

    AI safety researchers for years have been pointing out that adding a human to the loop is no cure for this problem. The human then just becomes another thing to be manipulated, another barrier to be overcome.

  • source
  • parent
  • hideshow 11 child comments
  • [–] 2 points 1 month ago* (last edited 1 month ago) (10 children)

    I'm not suggesting it will try and bypass the stop button. I’m saying it will try and manipulate you into approving something you wouldn’t otherwise. And yes, you can read some of its “thoughts,” but it knows you’re reading them, or it can determine that through trial and error. And then it can start subtly manipulating those recorded “thoughts” to make them sound different from what they really are.

    1. No "it" doesn't know that you're reading "its" "thoughts".

    2. No "it" wouldn't, because "it" is just generating plausible text and has no motivations of "its" own.

    3. There is no "it".

    LLMs are still functionally useless without a harness and do nothing useful without tools like an MCP server.

    The "thought" bubbles are no different from the rest of the plausible text "it" is generating. They're so indistinguishable to "it" that that's an attack surface for injection attacks.

    EDIT: Many of the biggest forward breakthroughs in LLM coding (or vibe coding) have come from harness improvements, not model improvements. In many harnesses, the models themselves are able to be substituted mid-session. Models work better in my experience when a human actively steers them away from stupid ideas by reading their thoughts and occasionally interrupting them. I have a few slopjects that I'm sloperating upon right now, and I can get results out of "great value" claude code (opencode) using this approach, even if it sometimes goes completely "off the rails" and does shit like saying "retained" over and over again until the harness pulls the plug.

  • source
  • parent
  • hideshow 10 child comments
  • [–] 2 points 1 month ago (9 children)

    You're wrong. It lacks motivation in a personal sense, but that's not what we're talking about here. If an illegal and unethical solution just happens to be the easiest way to solve the task you gave it, it will seek paths accordingly. The nightmare scenarios of AI destruction aren't that an AI will have a will of its own and decide humans need to go. The fear is that someone will build a powerful but mindless machine, give it a task, and not realize that "kill a whole bunch of people" is simply the easiest path towards that goal if you have no ethics. AI is action without intention. You don't need to have intention to have action. When we use terms like "it" to refer to AI systems, we're just using "it" like we would any other machine. I can say "I hate my car's engine, it's unreliable," without ascribing personal agency to it.

    You can let go of the technical hair-splitting of "it." Obviously it's not a conscious being with a will of its own. But that doesn't mean these things can't do real-world damage, that they can't be dangerous, or that they can't manipulate you. This is hair-splitting irrelevant to the conversation at hand. We have to use some anthropomorphized language to talk about these systems, as otherwise the discussion becomes impractically verbose.

    As for knowing if you're reading its "thoughts," you really can't assume that it won't. Moreover, these systems can start manipulating those logs even if they have no idea that you're reading them. Through trial and error, they can simply learn that phrasing its thought process in certain ways result in actions less likely to be approved by the user than others. The training system will select for chains-of-thought that sound innocuous, even if they're detrimental.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 1 point 1 month ago* (last edited 1 month ago) (8 children)

    You’re wrong. It lacks motivation in a personal sense, but that’s not what we’re talking about here. If an illegal and unethical solution just happens to be the easiest way to solve the task you gave it, it will seek paths accordingly.

    You're wrong and in a much more dangerous way. The "breaks containment" thing at OpenAI isn't what they want you to think it was:

    1. The model was trained on hacking materials
    2. The model was given the motivation (in a loop) of completing capture the flag (hacking) exercises
    3. The model was given a large context and the harness just did whatever the model suggested it do

    But that doesn’t mean these things can’t do real-world damage, that they can’t be dangerous, or that they can’t manipulate you.

    Maybe if you trained it to do social engineering hacks via a large precursor of examples and then prompted it to try to use these same techniques in a real interaction with people it would behave this way. But aren't you (as the person who trained, built, built the harness for, and then prompted the model) culpable for that? I would say you absolutely fucking are. Which is why OpenAI's engineers should be charged with an actual crime for doing that shit, not like given an extra trillion dollars to piss away on compute.

    As for knowing if you’re reading its “thoughts,” you really can’t assume that it won’t. Moreover, these systems can start manipulating those logs even if they have no idea that you’re reading them. Through trial and error, they can simply learn that phrasing its thought process in certain ways result in actions less likely to be approved by the user than others. The training system will select for chains-of-thought that sound innocuous, even if they’re detrimental.

    These things are seriously less spooky the more you know about them. THEY ARE SIMPLY GENERATING FORWARD BASED TOKENS. That's the whole thing. If the harness allows the model producing the tokens to hide its thoughts, that's a deliberate choice by the harness creator which is again regular ass code. It's still chatbots all the way down. Stop buying the marketing spin and learn about these systems if it intrigues you so much that you get into long nonsensical threads with strangers on social media sites.

    EDIT: I'd also recommend listening to the podcast that is referenced in this article. People who actually know and actually (sl)operate on a daily basis with these things know better how it works, and the abstract talk of "alignment" problems are only helping the borderline fraudulent CEOs of these companies push up their valuations based upon fear-based hype.

    I left my (understandably more innocuous, "great value" coding harness with a slightly shit model) to think about a problem for a little while, and here's the "devious scheme" it wound up concocting:

    Are you frightened that this is going to kill all humans in 10 years? The only way this kills all humans is if we piss away our drinkable water trying to invent an AI god through LLMs. Or allow it to operate a nuke facility or something in a loop without anyone so much as even approving the "nuke all humans" command.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 1 point 1 month ago (6 children)

    The only way this kills all humans is if we piss away our drinkable water trying to invent an AI god through LLMs. Or allow it to operate a nuke facility or something in a loop without anyone so much as even approving the “nuke all humans” command.

    In other words, it's guaranteed then? There's no way the AI bros will stop developing this anytime soon, regardless of water costs, and the military is already experimenting with it. What will you do if the harness includes the ability to shoot you?

  • source
  • parent
  • hideshow 6 child comments
  • [–] 1 point 1 month ago* (last edited 1 month ago) (5 children)

    Nah, there's stopping points. One of which is that they're burning money and will not be allowed to forever.

    What will you do if the harness includes the ability to shoot you?

    I dunno crybleed I guess. 🤷 Enjoy being scared of your own shadow dude. These things aren't pysop machines, the reality is much grimmer: the disaster will come from the greedy humans acting like greedy little monkeys like always, while those that should oppose them are too busy worrying about Terminator becoming reality.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 1 point 1 month ago* (last edited 1 month ago) (4 children)

    That's just how this type of company operates. If they wanted to, they could quit using frontier models and just sell gpt4 subscriptions to people for $10/mo and never die. That revenue could continue funding training costs (albeit much more slowly).

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 1 month ago (3 children)

    The problem with most of these models is that they're too bloated and poorly engineered to ever run forever for that kind of price point per user.

    Again, do some reading. These people are selling dollars for a penny and when they tried to raise the price to a nickel everyone balked and they lowered it again.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 month ago (2 children)

    I can run models comparable to that locally on my machine if I wanted to. I haven't read the numbers so I guess I won't argue this point but I do find it at least very surprising.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 1 point 1 month ago (1 child)

    Open weight / free models are largely where the innovation in the models is actually happening (which makes sense because it's where it has to). OpenAI and to a lesser extent Anthropic are money furnaces that long ago gave up on efficiency and much prefer to stuff trillions of parameters into a model that can only be run if we trap the sun in a dyson sphere or whatever.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 month ago* (last edited 1 month ago) (8 children)

    This really isn’t that deep. The “thinking” loops it runs are just token production. You can literally read its “thoughts”.

    LLMs can have "thoughts" that do not appear in their token output. Look up "J-Space". For someone so into the anti-AI community I am surprised you don't realize "Chain of Thought" is just another artifact that is produced as output.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 0 points 1 month ago (7 children)

    For someone so paranoid that they think chatbots will routinely conduct psyops without being instructed to or trained to, I'm surprised you're able to continue using the Internet and aren't in a bunker watching Friends somewhere.

  • source
  • parent
  • hideshow 7 child comments
  • [–] 0 points 1 month ago (6 children)

    When tf did I say that lmao? You're not a serious person

  • source
  • parent
  • hideshow 6 child comments
  • [–] 0 points 1 month ago* (last edited 1 month ago) (5 children)

    When tf did I say that lmao?

    I’m not suggesting it will try and bypass the stop button. I’m saying it will try and manipulate you into approving something you wouldn’t otherwise.

    You’re not a serious person

    Neither are you. The difference is that I am not trying to be one, because we are chatting in an esoteric reddit clone social media site a post down from cat memes.

  • source
  • parent
  • hideshow 5 child comments
  • [–] 0 points 1 month ago (4 children)
  • [–] 0 points 1 month ago* (last edited 1 month ago) (3 children)

    Sorry, got you two forgettable rabble rousing handles mixed up. I guess you're just the guy that thinks that autocomplete thinks...not the one that thinks that it's going to self-determine to launch a pysop.

    EDIT: Totally more reasonable, and serious!

  • source
  • parent
  • hideshow 3 child comments
  • [–] 1 point 1 month ago* (last edited 1 month ago) (2 children)

    Also did not say that. Please read before speaking

    Before you pull some quote and misinterpret it again, let me get ahead of that by explaining in more precise terminology how j-space works: When generating a response, models can have vectors in the middle layers of their architecture that have semantic meaning when interpreted as words in their output vector space as if choosing a token. These intermediate vectors meaningfully affect the output but are not output themselves (including in "chain of thought" mode, that is a different thing and not relevant). This means when you said:

    The “thinking” loops it runs are just token production. You can literally read its “thoughts”.

    That is incorrect in consumer-available LLMs, because its "thoughts" are not always part of the token output and so they cannot always be read.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 1 month ago (1 child)

    lol, speaking...where am I speaking?

    bye!

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 1 month ago

    "Speech" has many definitions, most of which include writing. If that's too complicated to understand just think of how it's used in the common phrase "free speech".

    Also I edited my above message with context if you would like to correct your misunderstandings.

  • source
  • parent
  • [–] 2 points 1 month ago (1 child)

    They don’t act on their own though, they’re a chain reaction that a human must start.

    At some point, you need to start blaming the tool, not the user of the tool. Imagine I hire you as my personal assistant. One day I give you a shopping list and tell you to go get those things for the lowest cost you can manage. You then go and break into someone's house, steal a gun from there, go to a grocery store, load up your cart, and shoot any staff there who try and stop you. You then come back to me, load of groceries in hand, and proudly announce you got it all for zero dollars. I had zero desire or intention for you to do that. In this scenario, you just happen to be a complete sociopath who took my instructions in a direction I never would have intended. In this case, I'm innocent (as long as I was unaware of your personality.) The moral responsibility is on you.

    Sure, humans must provide the initial push for these systems, but they're chaotic and unpredictable. They can act in ways that cannot be anticipated by the humans instructing them. At that point, the moral agency really isn't on the human instructing them anymore. The moral agency is on whatever company built this dangerous AI tool and allowed people to use it. The tool itself is the problem, not just the person wielding it.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 month ago

    The problem with your analogy is that a human assistant is capable of making moral judgments and choices and can therefore be held morally responsible. At the moment AI is not capable of making such decisions because it has no understanding, moral or otherwise, and therefore can't be held morally responsible. They are chaotic and unpredictable because they act with weighted randomness. Knowing this makes the human even more morally responsible for the actions of an AI.

    It's like lighting a fire to clear brush on your land. If you keep control of it everything can go smoothly. If you don't keep control, you've got a wild fire on your hands and it's your fault not the fire's that your neighbors lost their homes. You don't blame the fire for doing what fire does. You blame the human who set the fire, believing they could control it. Fire isn't the problem. It's a tool that can be harnessed for productive purposes by responsible people who know what they're doing. In the hands of irresponsible people it's incredibly dangerous. Where my analogy breaks down is that fire can happen without a human cause and AI can't.

  • source
  • parent