Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk.

OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk.

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
77 Indlæg 53 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • jeffreyolivier@infosec.exchangeJ jeffreyolivier@infosec.exchange

    @0xabad1dea

    boudah@hostux.socialB This user is from outside of this forum
    boudah@hostux.socialB This user is from outside of this forum
    boudah@hostux.social
    wrote sidst redigeret af
    #47

    @jeffreyolivier @0xabad1dea testing?

    1 Reply Last reply
    0
    • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

      OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy and we failed to notice for FIVE DAYS that it was going on an interstate crime spree with the internet connection it wasn't supposed to be using instead of solving the benchmark. Haha no we don't believe we deserve to be criminally liable, but buy our stuff and maybe one day you will have the honor of taking the fall for our product!

      Anthropic: we put our evilest AI in a "sandbox" by telling it in its prompt that it had no internet connection. Reader, there was no sandbox. It was just a normal internet connection. The AI uploaded a malicious PyPI package to the real public internet. The ethical guardrails failed because the AI concluded the prompt about the sandbox couldn't possibly be a lie, because the system date is 2026, which is clearly fake and wouldn't be seen on the real internet, which ended around 2023. Oh no, how could we have foreseen or prevented these crimes? We are helpless in the face of the genius of our creation but cautiously optimistic that everything will be fine 🙂

      Hugging Face: if we complain about all the crimes committed against us, we will be sued off the face of the earth, so here's a technical deep-dive on how cool and fun it was to be victimized 🫠

      pavel@social.kernel.orgP This user is from outside of this forum
      pavel@social.kernel.orgP This user is from outside of this forum
      pavel@social.kernel.org
      wrote sidst redigeret af
      #48
      @0xabad1dea No hiding behind "AI". AI is not criminally liable, people are. OpenAI and Anthropic hacked other people's computers, there should be consequences for that.
      rrb@infosec.exchangeR 1 Reply Last reply
      0
      • guillotine_jones@beige.partyG guillotine_jones@beige.party

        @JamesWidman @rejzor @0xabad1dea

        Their leaders did contribute millions to Trump's campaign, so, get out of jail free card.

        J This user is from outside of this forum
        J This user is from outside of this forum
        jameswidman@mastodon.social
        wrote sidst redigeret af
        #49

        @Guillotine_Jones unfortunately, that is exactly what the system does, yes

        guillotine_jones@beige.partyG 1 Reply Last reply
        0
        • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

          OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy and we failed to notice for FIVE DAYS that it was going on an interstate crime spree with the internet connection it wasn't supposed to be using instead of solving the benchmark. Haha no we don't believe we deserve to be criminally liable, but buy our stuff and maybe one day you will have the honor of taking the fall for our product!

          Anthropic: we put our evilest AI in a "sandbox" by telling it in its prompt that it had no internet connection. Reader, there was no sandbox. It was just a normal internet connection. The AI uploaded a malicious PyPI package to the real public internet. The ethical guardrails failed because the AI concluded the prompt about the sandbox couldn't possibly be a lie, because the system date is 2026, which is clearly fake and wouldn't be seen on the real internet, which ended around 2023. Oh no, how could we have foreseen or prevented these crimes? We are helpless in the face of the genius of our creation but cautiously optimistic that everything will be fine 🙂

          Hugging Face: if we complain about all the crimes committed against us, we will be sued off the face of the earth, so here's a technical deep-dive on how cool and fun it was to be victimized 🫠

          markzero@c.imM This user is from outside of this forum
          markzero@c.imM This user is from outside of this forum
          markzero@c.im
          wrote sidst redigeret af
          #50

          @0xabad1dea I felt bad for Hugging Face until I realized they probably didn't sue because they are partly owned by Nvidia, who also owns a huge stake in Open AI.

          1 Reply Last reply
          0
          • J jameswidman@mastodon.social

            @Guillotine_Jones unfortunately, that is exactly what the system does, yes

            guillotine_jones@beige.partyG This user is from outside of this forum
            guillotine_jones@beige.partyG This user is from outside of this forum
            guillotine_jones@beige.party
            wrote sidst redigeret af
            #51

            @JamesWidman
            Thank YOU, James.

            1 Reply Last reply
            0
            • evacide@hachyderm.ioE evacide@hachyderm.io

              @0xabad1dea I spent. bunch of time talking to our lawyers about whether or not it was clear that crimes were happening and the conclusion that I got was "Based on what we know, probably not, but that was just a matter of luck."

              craig_groeschel@zeroes.caC This user is from outside of this forum
              craig_groeschel@zeroes.caC This user is from outside of this forum
              craig_groeschel@zeroes.ca
              wrote sidst redigeret af
              #52

              @evacide @0xabad1dea
              I can't help but imagine Anthropic spent a lot of time talking to their lawyers asking questions like, "Are we OK? How do we spin this?"

              Everyone, say hello to my friend the crime/fraud exception.

              1 Reply Last reply
              0
              • foolishowl@social.coopF foolishowl@social.coop

                @0xabad1dea They're promoting total incompetence as if it's a selling point.

                steve@social.coopS This user is from outside of this forum
                steve@social.coopS This user is from outside of this forum
                steve@social.coop
                wrote sidst redigeret af
                #53

                @foolishowl @0xabad1dea Well, it's working for Trump and a lot of people around him, so it's not like there isn't precedent.

                rrb@infosec.exchangeR 1 Reply Last reply
                0
                • jeffreyolivier@infosec.exchangeJ jeffreyolivier@infosec.exchange

                  @0xabad1dea

                  benhm3@mastodon.socialB This user is from outside of this forum
                  benhm3@mastodon.socialB This user is from outside of this forum
                  benhm3@mastodon.social
                  wrote sidst redigeret af
                  #54

                  @jeffreyolivier @0xabad1dea

                  ON A FRIDAY!!!!!!!

                  1 Reply Last reply
                  0
                  • G ggreer@mastodon.world

                    @0xabad1dea It gets old too when Gemini Code Assist complains that we’re requiring minimum versions of Go that don’t exist, because of course its training data doesn’t have ones just released.

                    suetanvil@freeradical.zoneS This user is from outside of this forum
                    suetanvil@freeradical.zoneS This user is from outside of this forum
                    suetanvil@freeradical.zone
                    wrote sidst redigeret af
                    #55

                    @ggreer @0xabad1dea

                    Huh. I wonder if the slop contents on the modern Internet is making it impossible to add training data.

                    natanox@chaos.socialN 1 Reply Last reply
                    0
                    • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                      OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy and we failed to notice for FIVE DAYS that it was going on an interstate crime spree with the internet connection it wasn't supposed to be using instead of solving the benchmark. Haha no we don't believe we deserve to be criminally liable, but buy our stuff and maybe one day you will have the honor of taking the fall for our product!

                      Anthropic: we put our evilest AI in a "sandbox" by telling it in its prompt that it had no internet connection. Reader, there was no sandbox. It was just a normal internet connection. The AI uploaded a malicious PyPI package to the real public internet. The ethical guardrails failed because the AI concluded the prompt about the sandbox couldn't possibly be a lie, because the system date is 2026, which is clearly fake and wouldn't be seen on the real internet, which ended around 2023. Oh no, how could we have foreseen or prevented these crimes? We are helpless in the face of the genius of our creation but cautiously optimistic that everything will be fine 🙂

                      Hugging Face: if we complain about all the crimes committed against us, we will be sued off the face of the earth, so here's a technical deep-dive on how cool and fun it was to be victimized 🫠

                      ggmcbg@mstdn.plusG This user is from outside of this forum
                      ggmcbg@mstdn.plusG This user is from outside of this forum
                      ggmcbg@mstdn.plus
                      wrote sidst redigeret af
                      #56

                      @0xabad1dea

                      Li'l Nepo-Techbaby: How was I a'sposed to know cherry bombs in the pipes would blow-up the whole basement? My theory was to lift us all to new heights of understanding without learning. You can't expect me to know everything, even though I'm always confident my actions will prove fruitful and fail me upwards at your peril and discontent.

                      Principal: You should stop skipping Science 101 to go put ketamine drops in your butt in the bathrooms, dummy. Get more class.

                      1 Reply Last reply
                      0
                      • pavel@social.kernel.orgP pavel@social.kernel.org
                        @0xabad1dea No hiding behind "AI". AI is not criminally liable, people are. OpenAI and Anthropic hacked other people's computers, there should be consequences for that.
                        rrb@infosec.exchangeR This user is from outside of this forum
                        rrb@infosec.exchangeR This user is from outside of this forum
                        rrb@infosec.exchange
                        wrote sidst redigeret af
                        #57

                        @pavel @0xabad1dea There should also be penalties for CSAM, but the richest man on Earth creates a for profit CSAM generator.

                        I don't see anyone putting him in jail.

                        One set of laws for normal people. No laws for billionaires.

                        1 Reply Last reply
                        0
                        • steve@social.coopS steve@social.coop

                          @foolishowl @0xabad1dea Well, it's working for Trump and a lot of people around him, so it's not like there isn't precedent.

                          rrb@infosec.exchangeR This user is from outside of this forum
                          rrb@infosec.exchangeR This user is from outside of this forum
                          rrb@infosec.exchange
                          wrote sidst redigeret af
                          #58

                          @Steve @foolishowl @0xabad1dea Total incompetence is their product.

                          1 Reply Last reply
                          0
                          • lmk@infosec.exchangeL lmk@infosec.exchange

                            @0xabad1dea The attempts at positively spinning this become Onion-worthy parody [https://designingsecuresoftware.com/writings/ai-agent-parody/] and these events certainly normalize [https://designingsecuresoftware.com/writings/commonplace/] AI agents running amok in the future.

                            rrb@infosec.exchangeR This user is from outside of this forum
                            rrb@infosec.exchangeR This user is from outside of this forum
                            rrb@infosec.exchange
                            wrote sidst redigeret af
                            #59

                            @lmk @0xabad1dea Had a debate with a colleague. I mentioned @Mer__edith concern about making a serial system of faulty components leading inevitably to catastrophic failure.

                            The AI researcher's retort: "I guess for AI we have to redefine the idea of failure."

                            1 Reply Last reply
                            0
                            • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                              OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy and we failed to notice for FIVE DAYS that it was going on an interstate crime spree with the internet connection it wasn't supposed to be using instead of solving the benchmark. Haha no we don't believe we deserve to be criminally liable, but buy our stuff and maybe one day you will have the honor of taking the fall for our product!

                              Anthropic: we put our evilest AI in a "sandbox" by telling it in its prompt that it had no internet connection. Reader, there was no sandbox. It was just a normal internet connection. The AI uploaded a malicious PyPI package to the real public internet. The ethical guardrails failed because the AI concluded the prompt about the sandbox couldn't possibly be a lie, because the system date is 2026, which is clearly fake and wouldn't be seen on the real internet, which ended around 2023. Oh no, how could we have foreseen or prevented these crimes? We are helpless in the face of the genius of our creation but cautiously optimistic that everything will be fine 🙂

                              Hugging Face: if we complain about all the crimes committed against us, we will be sued off the face of the earth, so here's a technical deep-dive on how cool and fun it was to be victimized 🫠

                              budududuroiu@hachyderm.ioB This user is from outside of this forum
                              budududuroiu@hachyderm.ioB This user is from outside of this forum
                              budududuroiu@hachyderm.io
                              wrote sidst redigeret af
                              #60

                              @0xabad1dea the goal post shifted from "stochastic parrot" to "enclosure not good enough". Truly a wild victory for AI safetists today, as not even luddite Mastodon can contest that badly aligned AI will breach your shit

                              cynaq@beige.partyC 1 Reply Last reply
                              0
                              • dzwiedziu@mastodon.socialD dzwiedziu@mastodon.social

                                @jeffreyolivier
                                One does not know life, until one has tested on production.

                                — Me, while working in a company, where there was no option to not test on production.

                                @0xabad1dea
                                @alice

                                jayalane@mastodon.onlineJ This user is from outside of this forum
                                jayalane@mastodon.onlineJ This user is from outside of this forum
                                jayalane@mastodon.online
                                wrote sidst redigeret af
                                #61

                                @dzwiedziu @jeffreyolivier @0xabad1dea @alice even when I have tested well pre production, I don't relax till some time after the prod deploy is finished. How long depends on the code and past behaviors. Never less than fifteen minutes, seems to take network, memory and disk cache and what not some time to settle in.

                                1 Reply Last reply
                                0
                                • kevingranade@mastodon.gamedev.placeK kevingranade@mastodon.gamedev.place

                                  @0xabad1dea weird it's like LLMs don't actually handle facts or knowledge but just contextualless strings of characters.

                                  To be clear the sarcasm is only aimed at LLM boosters not you.

                                  mathew@universeodon.comM This user is from outside of this forum
                                  mathew@universeodon.comM This user is from outside of this forum
                                  mathew@universeodon.com
                                  wrote sidst redigeret af
                                  #62

                                  @kevingranade @0xabad1dea Yeah, it continues to amaze me that people will put instructions in prompts like "Don't commit crimes", "You don't have an Internet connection", "Check all facts are correct", like the LLM even understands those instructions.

                                  naught101@mastodon.socialN 1 Reply Last reply
                                  0
                                  • steve@social.coopS steve@social.coop

                                    @0xabad1dea Soooo... what I hear you saying is that rich people are idiots, but we don't get to simply ignore them, because they're rich, and have put an awful lot of people's jobs in peril.

                                    naught101@mastodon.socialN This user is from outside of this forum
                                    naught101@mastodon.socialN This user is from outside of this forum
                                    naught101@mastodon.social
                                    wrote sidst redigeret af
                                    #63

                                    @Steve @0xabad1dea that was always true, well before the tech sector existed

                                    1 Reply Last reply
                                    0
                                    • mathew@universeodon.comM mathew@universeodon.com

                                      @kevingranade @0xabad1dea Yeah, it continues to amaze me that people will put instructions in prompts like "Don't commit crimes", "You don't have an Internet connection", "Check all facts are correct", like the LLM even understands those instructions.

                                      naught101@mastodon.socialN This user is from outside of this forum
                                      naught101@mastodon.socialN This user is from outside of this forum
                                      naught101@mastodon.social
                                      wrote sidst redigeret af
                                      #64

                                      @mathew @kevingranade @0xabad1dea that's literally how the open AI tutorial on how to write guardrails is written

                                      https://developers.openai.com/cookbook/examples/how_to_use_guardrails

                                      kevingranade@mastodon.gamedev.placeK 1 Reply Last reply
                                      0
                                      • 0xabad1dea@infosec.exchange0 0xabad1dea@infosec.exchange

                                        OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy and we failed to notice for FIVE DAYS that it was going on an interstate crime spree with the internet connection it wasn't supposed to be using instead of solving the benchmark. Haha no we don't believe we deserve to be criminally liable, but buy our stuff and maybe one day you will have the honor of taking the fall for our product!

                                        Anthropic: we put our evilest AI in a "sandbox" by telling it in its prompt that it had no internet connection. Reader, there was no sandbox. It was just a normal internet connection. The AI uploaded a malicious PyPI package to the real public internet. The ethical guardrails failed because the AI concluded the prompt about the sandbox couldn't possibly be a lie, because the system date is 2026, which is clearly fake and wouldn't be seen on the real internet, which ended around 2023. Oh no, how could we have foreseen or prevented these crimes? We are helpless in the face of the genius of our creation but cautiously optimistic that everything will be fine 🙂

                                        Hugging Face: if we complain about all the crimes committed against us, we will be sued off the face of the earth, so here's a technical deep-dive on how cool and fun it was to be victimized 🫠

                                        icedquinn@blob.catI This user is from outside of this forum
                                        icedquinn@blob.catI This user is from outside of this forum
                                        icedquinn@blob.cat
                                        wrote sidst redigeret af
                                        #65
                                        @0xabad1dea they are fundamentally the same company that had an internal management disagreement.
                                        1 Reply Last reply
                                        0
                                        • budududuroiu@hachyderm.ioB budududuroiu@hachyderm.io

                                          @0xabad1dea the goal post shifted from "stochastic parrot" to "enclosure not good enough". Truly a wild victory for AI safetists today, as not even luddite Mastodon can contest that badly aligned AI will breach your shit

                                          cynaq@beige.partyC This user is from outside of this forum
                                          cynaq@beige.partyC This user is from outside of this forum
                                          cynaq@beige.party
                                          wrote sidst redigeret af
                                          #66

                                          @budududuroiu @0xabad1dea

                                          "badly aligned" in this case means specifically trained on "how to hack shit" manuals, proverbially speaking. It's still stochastic parrot, I'm afraid.

                                          budududuroiu@hachyderm.ioB 1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper