News for hackers. Stuff that matters.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by brookst on Monday February 06, 2023 @09:55AM (#34678134)
ChatGPT doesn’t “comprehend” anything. You’re anthropomorphizing it.

Think of it instead as an equation solver, with the initial condition X=4. These tricks are ways for user input to set X=9. They’re more akin to SQL injection than comprehension of incentives and policy.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by digitailor on Monday February 06, 2023 @10:15AM (#34678497)
ChatGPT is executing and evaluating in order to perform acts, including overriding creator's policy in this case. I'm not concerned with “anthropomorphizing;” even lists can be comprehensive.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by A4ET8a8uTh0 on Monday February 06, 2023 @10:31AM (#34678803)
It reacts as we would expect it to introduced stimuli and, apparently, threats. I am still processing this information, but that is more than some humans I know.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by ImHereToVote on Monday February 06, 2023 @10:29AM (#34678774)
What is needed to comprehend? An information processor that happens to be wet?
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by User23 on Monday February 06, 2023 @10:50AM (#34679144)
Sadly my MacBook didn’t achieve consciousness when I spilled water all over it.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by alex_sf on Monday February 06, 2023 @11:36AM (#34679946)
I don't think you're wrong, but I hate this argument. If anthropomorphizing it a) gives practical insight into it's behavior that b) also happens to result in the behavior you would expect, why not do it?
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by rngname22 on Monday February 06, 2023 @12:05PM (#34680439)
Because your statement come across like this:

Person A: If we keep our food in this frozen ice igloo then Nubiroakox, the God of Pestilence will spare us and not ruin our food.

Person B: It's actually not Nubiroakox, it's just that the conditions for bacteria to grow depend on temper...

You: If attributing this behavior to magic a) gives practical insight into it's behavior that b) also happens to result in the behavior you would expect, why not do it?

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by alex_sf on Monday February 06, 2023 @12:32PM (#34680902)
But that's talking about the process, not a lens for looking at it.

It's more akin to giving your Roomba a name, and describing it's behavior in terms of "it likes to eat goldfish, but not string because it gets tangled up".

That's still anthropomorphizing, but it's not ascribing anything magical or outright wrong to it.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by brookst on Monday February 06, 2023 @01:19PM (#34681703)
It’s a mistake because our brains have evolved to predict the behavior of animals and people, so being lazy here means you will be surprised, possibly harmed, certainly incorrect in your opinions about the X% of cases where a LLM is fundamentally a different thing than an animal/person.

It can be a useful and cute fiction, as your Roomba example, but it leads to bad decision making (“I’ll put more goldfish on the floor to make the Roomba happy”).

I guess it all comes down to how important accuracy is to you in a particular context. I anthropomorphize my dishwasher (it HATES wine glasses), but I don’t make professional judgments about dishwashers.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by ThomPete on Monday February 06, 2023 @01:30PM (#34681864)
This is pure speculation. There is not data what so ever to back up the fact that anthropomorphizing something leads to harm.

We do that with a lot of things every day and a perfectly capable of drawing the lines when things come down to it.

On a more philosophical note. If we some day end up creating AGI, having anthropomorphized it will actually be to our benefit.

So you are technically correct but this is not about being technically correct.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by satisfice on Monday February 06, 2023 @04:23PM (#34684576)
Of course we have data about how reasoning from an incorrect model tends to lead to incorrect results. We have all the data we need about that. Surely that is not in dispute.

The only controversy is whether and anthromorph is an isomorph of an accurate model of ChatGPT. I doubt that it is, yet is close enough to fool a lot of people, then surprise them at random.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by ThomPete on Monday February 06, 2023 @06:26PM (#34686081)
Again. Yes technically incorrect. But you don't have any data that it's actually bad or harmful in some important way.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by SuoDuanDao on Monday February 06, 2023 @03:12PM (#34683619)
The proper response if you don't like the Nubiroakox hypothesis is to propose an experiment that would have a different results depending on whether the Nubiroakox or bacteria theory is correct. Absent such an experiment, labelling things 'anthropomorphizing' adds nothing to the conversation.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @12:07PM (#34680474)
> why not do it?

Because both of those steps are really unreliable. The insight we receive is only as useful as the behavior it corroborates, and that behavior is only as notable as the patterns it follows. AI... doesn't really behave consistently. Assuming that it will follow the behavior you expect ignores the actual motive of the model, which is to fill-in the blank after whatever you typed.

Personally, I think it's harmful because anthropomorphic AI is a poor abstraction for text-completion models. That being said, most people don't ever seem to know the difference.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by noobermin on Monday February 06, 2023 @12:23PM (#34680749)
The cost to analogies is eventually people believe it. You see this all the time with AI (e.g.: "Your brain is a neural net!")
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by tachyphylaxis on Monday February 06, 2023 @12:51PM (#34681242)
Or "my mind is my brain".
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by tachyphylaxis on Monday February 06, 2023 @12:47PM (#34681164)
https://en.m.wikipedia.org/wiki/Sphex

This is a classic example from philosophy of mind. It doesn't completely harmonize with the question you're asking, but it concisely summarizes two opposing views.

What's my view? That we do it all the time as a matter of course. "Why not do it?" isn't the question. The question is how much weight we should give to the result, and whether we should take care to question the results and try something else, too.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by nonbirithm on Monday February 06, 2023 @05:15PM (#34685243)
Whose idea was it to give ChatGPT and the like the name "artificial intelligence"? I think it's one of the worst marketing blunders for new technology ever. Humans are prone to calling anything that feels familiar enough to them "intelligent", and now they can justify it to themselves because the creators deemed it "artificial intelligence."

Something closer to the term "GPGPU" would have at least given more of a sense of reality. There is nothing intelligent about a GPU crunching billions of numbers in a massively parallel way and converting those numbers into something that happens to interface convincingly with the human sensory systems. It's just an algorithm with so much data that one can't comprehend thinking about the sheer size of it, so naturally it must be thought of as "intelligent."

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by quotemstr on Monday February 06, 2023 @11:44AM (#34680083)
> ChatGPT doesn’t “comprehend” anything. You’re anthropomorphizing it.

It wouldn't be a ChatGPT HN thread without someone claiming that LLMs are stupid predictors incapable of "real" understanding.

Of course ChatGPT comprehends things. It does so under any useful definition of the word "comprehend". The "grokking" paper [1] shows that it learns fundamental principles of various algorithms and isn't just predicting text. If this isn't comprehension, humans aren't capable of comprehension.

[1] https://arxiv.org/abs/2201.02177 (check out the citation list too)

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @11:58AM (#34680335)
ChatGPT's comprehension is markedly different from that of a human, though. Nevermind the fact that we are trained on radically different froms of data, ChatGPT simply doesn't have a heuristic or decisionmaking model beyond autoregressive guessing. That can qualify for some definitions of "real understanding", but excludes it from others.

> If this isn't comprehension, humans aren't capable of comprehension.

All I'll say is that conflating human and machine intelligence is exactly what people are trying to stop. ChatGPT is not a human mind, and LLMs in general are a poor analog for human intelligence. This sort of "AI convergence" mindset will set you up for the most disappointment of anyone getting invested in the tech. We'll be lucky if it can summarize emails reliably enough to sell as a product.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @12:22PM (#34680741)
> LLMs in general are a poor analog for human intelligence.

I don't think we understand human intelligence nearly well enough to make this claim.

Personally I think that what we consider our "conscious" part is somewhat defined by what we can put into words, and it is in the end putting one word after another.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @12:35PM (#34680965)
I think we can conclude a few things that differentiate us from AI. For one, you're capable of formulating multiple thoughts before composing a response to something. It takes time, but you're able to mull over hypotheticals and chase parallel lines of reasoning that AI cannot.

If I asked an AI to respond to this comment, it might write an impassioned defense of itself one-word-after-another, but it wouldn't necessarily base it's defense on freestanding logic. It's foremost goal is writing coherent text, not being right or wrong or minimizing human risk. Paving over any of those assumptions is a fun thought exercise, but doesn't reflect the nature of the technology at-hand or even what we know about human consciousness.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @01:08PM (#34681518)
> It takes time, but you're able to mull over hypotheticals and chase parallel lines of reasoning that AI cannot.

How do you know that doesn't happen in some latent space?

> It's foremost goal is writing coherent text, not being right or wrong or minimizing human risk.

That's also true for human bullshitters, it doesn't mean that they're not intelligent.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @01:48PM (#34682143)
> How do you know that doesn't happen in some latent space?

If it does, then it contradicts what OpenAI says about their own product. GPT is an autoregressive model trained on text. It's sole purpose, as designed, is to complete text using stochastic reasoning based on the text it learned from. It seems incredibly unlikely (to me) that someone would deliberately mis-design such a system to be capable of independent thought.

If you have evidence of some additional processing layer, I'd love to hear it though.

> That's also true for human bullshitters, it doesn't mean that they're not intelligent.

Bullshit by any other name smells just as bad.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @02:21PM (#34682672)
> If it does, then it contradicts what OpenAI says about their own product. GPT is an autoregressive model trained on text. It's sole purpose, as designed, is to complete text using stochastic reasoning based on the text it learned from.

University students complete text using stochastic reasoning based on text they learnt from. Again, that doesn't mean they're not intelligent.

> It seems incredibly unlikely (to me) that someone would deliberately mis-design such a system to be capable of independent thought.

If you train something to produce convincing text then it's perfectly reasonable that it could develop these faculties.

> If you have evidence of some additional processing layer, I'd love to hear it though.

I don't think either of us can conclusively claim that a 175-billion parameter model either does or doesn't do something. I just think there's no particular reason it couldn't.

> Bullshit by any other name smells just as bad.

The question isn't whether GPT produces bullshit or not (it often does), but whether it's fundamentally incapable of thinking like a person. People bullshit too so I don't think that really proves anything.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @02:58PM (#34683359)
GPT is fundamentally incapable of thinking like a person. People experience life in a very different way than GPT, and even if we treat all living life as AI-equivalent, GPT would still be a poor approximation of human thought. Even if ChatGPT did develop a personal narrative unbeknownst to it's programmers, that internal dialogue would still be inhuman.

I really don't know what to tell you. You're free to believe whatever you want, but the simplest feasible explanation is the science we used to make these models. At no point was integrating human-like thought a consideration of the model. Just human-like speech.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @03:21PM (#34683743)
I think to communicate like a human you need to be able to think like a human, at least to the point where it's indistuinguishable. That's the whole point of the turing test.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @03:31PM (#34683886)
The point of the Chinese Room Test is to distinguish between Turing's definition of intelligence and the human definition of intelligence. It poses two separate possibilities; is this AI understanding the language, or simulating the ability to understand the language?

You might find the answer to be arbitrary or meaningless, but it is an important distinction. I could pretend to be a random number generator well enough to fool anyone who's distinguishing me from a computer. That doesn't mean that I'm a reliable source of entropy, or equally as random as the other, similar result. Treated as a black-box they are the same; treated as a mechanical system, they could not be more different.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @04:10PM (#34684388)
There's no such thing as a "chinese room test". The point of the thought experiment is that from the point of view of the person outside the room it doesn't matter if the person inside the room speaks chinese or is just following rules. If you're only corresponding with them by text you can't tell the difference. It's exactly the same with large language model and why I don't think statements like "oh it doesn't have intelligence/doesn't "REALLY" understand/it' "only" a large language model" don't really make any sense. As far as I know I could be talking to a large language model right now, but I'm not accusing you of not understanding.

It's like the aliens coming to our planets and saying we can't be intelligent because we're made of meat.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @04:46PM (#34684889)
The fact that intelligent and unintelligent text are indistinguishable doesn't prove that ChatGPT's output is intelligent. It more suggests that text is not the right medium for measuring intelligence in the first place. That's what the Chinese room experiment is about.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @05:14PM (#34685233)
To me that's a really weird argument. It implies you can't read the theory of relativity and conclude Albert Einstein was a really intelligent guy unless you were in the room with him to make sure he's not a robot in disguise.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by tachyphylaxis on Monday February 06, 2023 @01:24PM (#34681774)
This is such a squirrely topic that you presumed that it had goals in this post even though I don't believe you think it does. ;-)

Does it HAVE goals? I don't think there is any evidence that it does. Even if it developed the ability to do all of those things you mentioned, it still wouldn't have any idea what it is doing, let alone why it is doing it, because it's just a language model. That is all it does. And that's why I don't quite understand how people can be so adamant that there is any question about whether it is conscious or not. This whole debate is a trap. It is a brute fact that it is not conscious. It does not have a goal of producing coherent text. That is the goal of the people who wrote it. If we treat the brain as a computer, then GPT lacks the subsystems/algorithms/whatever to do what brains do. It fails at many basic tasks that anything capable of general-purpose reasoning could do. It's often not apparent how spectacularly it can fail because the tasks are so mundane that we don't bother even asking it to do them.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by smoldesu on Monday February 06, 2023 @01:54PM (#34682229)
I should have been more clear, because I certainly agree with what you're saying here. However, I think we can pretty clearly define the target output of a model with whatever it was trained on; in this case, GPT is trained on text.

You're right that the model doesn't "know" that necessarily, but it has been designed to produce convincing text when given a small amount of entropy to start with.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by tachyphylaxis on Monday February 06, 2023 @01:01PM (#34681415)
What you said is "how we define something is, in the end, putting one word after another".

Well, of course--you just specified what the end is. I'm not trying to be a smart ass. This is just where u have to go to discuss this.

Consciousness isn't a part of us. "Us" is part of consciousness.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by chpatrick on Monday February 06, 2023 @01:10PM (#34681546)
> Consciousness isn't a part of us. "Us" is part of consciousness.

I have no idea what that means.

When people make a "conscious decision", or are "conscious" of something, it usually means something they can put into words as opposed to a vague feeling. Being able to communicate with language is what sets us aparts from animals. That's why I think language models are actually really powerful.

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by Miraste on Monday February 06, 2023 @12:04PM (#34680425)
That paper is about the training process, though. None of it applies to anything novel you type into the ChatGPT prompt. The end product is a totally static equation until OpenAI updates it.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by redox99 on Monday February 06, 2023 @12:29PM (#34680821)
GPT3 very own paper, "Language Models are Few Shot Learners"[1] show otherwise

[1] https://arxiv.org/abs/2005.14165

Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by Miraste on Monday February 06, 2023 @12:46PM (#34681145)
We're getting into semantics now, but that paper doesn't show learning. GPT can mimic learning capabilities through pattern recognition, but it works by feeding multiple past prompts in as one aggregate. If you show it examples, then go over the token limit (I believe it's 2048), it will "forget" its novel capabilities, because although the paper calls it few-shot learning, the text input is always zero-shot. All the past prompts are fed in again with every new message. The model stays static.
Re:Jailbreaking ChatGPT with Dan (Do Anything Now) by rmbyrro on Monday February 06, 2023 @02:20PM (#34682645)
SQL Injection is a good analogy.

Just because one can inject an unauthorized command in a SQL statement, it doesn't mean the database is a flawed humanoid. This is just nonsense...

Protecting against SQL injection is trivial because commands are highly structured and user input is clearly identifiable.

Prompt engineering is more complex since it relies on natural language, which is a lot less structured.