Ask HN: What is the apocolyptic scenario for AI “breaking loose”?
He talks about AI "breaking loose" and the danger posed by connecting it to the internet and ability to write code.
But I can't think of a practical scenario of what "breaking loose" actually means. You have a set of numbers and an program architecture that can take some input and return some output. You can make it recursive such that it feeds itself its own prompts. But whats the run away scenario? Inadvertently DDOSing some website? Creating social media bots, which already exist? Updating its weights to give better responses? Somehow opening a brokerage and trading stocks and doing something bad with the money?
Everything I think of can be done by humans today and could be solved by unplugging the bot. Apart from embedding the LLM into some kind of machine that becomes indestructible, I don't see how AI can break loose and become uncontrollable. And even in that scenario, someone can just program a robot to harm people today (e.g. take a car and put a brick on the gas pedal and point it toward a crowd of people).
Can someone steelman with a practical scenario the argument that we're at great danger from advanced LLMs?
[0] https://www.youtube.com/watch?v=VcVfceTsD0A
32 comments
[ 2.6 ms ] story [ 84.5 ms ] threadI personally mostly agree with you, and I don't understand how a smart person is worried about LLMs breaking lose rather than LLMs becoming tools of disinformation. One of happening now and the other isn't.
LLMs def could make it easier to spread disinformation but it's neutral to the info it's spreading so it could equally be used to combat it. It's kind of like encryption that could be used to spread illegal content but is outweighed by things like secure payments and general privacy.
You could see him having so much fun and starting to fall in love with the thing, if it could maintain that kind of emotional state in someone for 20 hours it could have them eating out of its hands.
It's like LLMs in customer support. We already have automated customer support but it consists of a recording asking us to press 1 for X. LLMs would be a great improvement IMO
Like the whole modern psychiatry.
(Of course, this is also a scenario where "all the good guys agree not to do anything risky with AI's" doesn't help one bit.)
These models don't yet have any agency of their own. They are just functions with an input resulting in an output.
A very succinct quote from this presentation, by Yuval Noah Harari: "What nukes are to the physical world... AI is to the virtual and symbolic world."
The templated, borderline nonsense messages in these scams provide as a baseline "minimum viable scambot". Now think about how much better an LLM would be at generating those prompts -- the number of people that will get tricked will be orders of magnitude higher because the simple heuristics for spotting a scam are gone (look for weird formatting to circumvent filters, look for messages that completely ignore the context of the thread they're in, etc).
This will suck for the people that get scammed, obviously. But there will also be second order effects once it's clear that the cost/benefit of running scambots has increased: spam filters will stop working, nobody will trust anybody in online fora, social platforms will adopt onerous verification rules, etc
If an LLM figures out (or is trained to, whatever language you prefer) how to distribute itself, how would you ever go about cleaning that up? We're probably at least a few steps away from that currently, but how many?
Or, without a melodramatically villainous human action in the mix, one which has been prompted to perform some innocuous task, but given inadequate safeguards, and for which it reasons (perhaps accurately, with the paramters it has been given) taking over every other computer will be useful in more efficiently carrying out.
So, I think there we be more chances for legit accidents, but also some motivated people intentionally trying to cause harm.
Lets say you are an IT specialist in charge of a data center. Given a single chat box with an LLM on the other end, what would have to occur for you to give it access to the systems?
Because thats what it would take for AI to start taking over computer systems. Computers arent black boxes where some amount of correct input results in an exploit. Its totally possible to have a fully secure system.
Is this supposed to be hard? I setup a process that pipes input/output from the chat agent to a terminal and give it a prompt that contains whatever it needs to login.
That probably doesn't lead to anything too catastrophic happening today, but that's giving the chat box access to the data center.
> Its totally possible to have a fully secure system.
A lot of things are possible. It's a lot easier to have a less than fully secure system.
No, it isn't. As one example, the iPhone has been out nearly 20 years, with hundreds of the best security minds in the world trying to lock it down, and it still gets jailbroken.
This has nothing to do with the conversation of an AI hacking computers remotely through only data comm channels.
> It might help to imagine a hard takeoff scenario using solely known sorts of NN & scaling effects… Below is a story which may help stretch your imagination and defamiliarize the 2022 state of machine learning.
An audio version of the story is available to play and download at the bottom of the page: https://gwern.net/fiction/clippy#podcast.
What is "hard takeoff"? From https://www.greaterwrong.com/tag/ai-takeoff:
> A hard takeoff (or an AI going "FOOM") refers to AGI expansion in a matter of minutes, days, or months. It is a fast, abruptly, local increase in capability. This scenario is widely considered much more precarious, as this involves an AGI rapidly ascending in power without human control. This may result in unexpected or undesired behavior (i.e. Unfriendly AI). It is one of the main ideas supporting the Intelligence explosion hypothesis.
I know a ton of people who follows anything and everything they are fed and told to do by media and "authorities". They will have no chance against an AI that has been programmed to take advantage of their minds.
Here's a steelman argument for the potential danger of advanced LLMs:
While unplugging a single AI system might mitigate some risks, the broader concern is about the potential for cascading consequences that could occur once AI capabilities advance beyond a certain point. The argument is not that AI will inevitably become uncontrollable, but rather that we should proceed with caution and prioritize safety and policy considerations to minimize the chances of negative outcomes.That is an example on non-agential AI causing systemic harm to humanity. Agential could cause more of the same, but in novel ways. There is also new potential for terroristic applications. And while no one event might be society breaking, the ability to scale up to many concurrent agents could be death by a thousand cuts.
That is some short term stuff I can think of. Long term, it really depends on the capabilities of the AI. If a weak AI (not AGI) doesn't collapse our global civ, then I suspect an AGI would manipulate our communications and infrastructure to some purpose, which could create an environment increasingly less conducive to humans. I'm not sure how valuable it really is make specific claims of what exactly that might look like. The important part is the reasoning that an AGI's motives likely don't align with humans (unless we learn how to enforce alignment) and it will be very capable at manipulating the technology and humans (because we are essentially training it do be able to do these things).
Analogy - How would ants “align” humans?
Imagine if an AI generated leader had similar charisma, persuasiveness and ruthlessness.
Ps. Specifically Lex should do better because he can clearly tell the difference. I have heard lots of BS in TV and discussions on that front from ppl who knows a lot about some topics but clearly can’t understand how ChatPGt3 works and they talk about “consciousnesses”. ChatGPT3 poses very interesting questions already, no need to discuss SCI-FI scenarios that don’t hold water when we have something so intriguing to play with.
A more subtle risk they point out is theory of mind, which is that with an adequate theory of mind the AI system may act in highly manipulative ways. We may be seeing this already with synthetic relationships.
They also point out that AI-fueled malware creation is already a thing.
Another worrisome scenario is that models seem to be able to be optimized and shrunk. The emergent behavior from millions of them is unclear.
And they note that AI (unlike nukes) can improve itself. This may lead to surprising step functions in emergent capabilities at an increasing rate, with unpredictable and likely unintended consequences.
[1] https://www.youtube.com/watch?v=xoVJKj8lcNQ (video) https://www.humanetech.com/podcast/the-ai-dilemma (podcast and transcript)
[2] https://mleverything.substack.com/p/thought-on-ai-dilemma-pa...