News for hackers. Stuff that matters.
Re:Bing: “I will not harm you unless you harm me first” by theptip on Wednesday February 15, 2023 @01:41PM (#34808565)
Sorry for the bluntness, but this is harmfully ignorant.

"Aligned" is a term of art. It refers to the idea that a system with agency or causal autonomy will act in our interests. It doesn't imply any sense of personhood/selfhood/consciousness.

If you think that Bing is equally autonomous as a stapler, then I think you're making a very big mistake, the sort of mistake that in our lifetime could plausible kill millions of people (that's not hyperbole, I mean that literally, indeed full extinction of humanity is a plausible outcome too). A stapler is understood mechanistically, it's trivially transparent what's going on when you use one, and the only way harm can result is if you do something stupid with it. You cannot for a second defend the proposition that a LLM is equally transparent, or that harm will only arise if an LLM is "used wrong".

I think you're getting hung up on an imagined/misunderstood claim that the alignment frame requires us to grant personhood or consciousness to these systems. I think that's completely wrong, and a distraction. You could usefully apply the "alignment" paradigm to viruses and bacteria; the gut microbiome is usually "aligned" in that it's healthy and beneficial to humans, and Covid-19 is "anti-aligned", in that it kills people and prevents us from doing what we want.

If ChatGPT 2.0 gains the ability to take actions on the internet, and the action <harm person X> is the completion it generates for a given input, then the resulting harm is what I mean when I talk about harms from "un-aligned" systems.

Re:Bing: “I will not harm you unless you harm me first” by Zetice on Wednesday February 15, 2023 @01:50PM (#34808693)
This is exactly what I'm talking about. None of what you wrote here is anchored in reality. At all. Not even a little.

It's pants-on-head silly to think "ChatGPT 2.0" is anything other than, at best, a magpie. If you put the nuclear codes under a shiny object, or arranged it such that saying a random basic word would trigger a launch, then yeah a magpie could fire off nukes.

But why the hell would you do that?!?!

Re:Bing: “I will not harm you unless you harm me first” by theptip on Wednesday February 15, 2023 @02:39PM (#34809438)
If you think these systems are going to be no more capable than a magpie, then I think you're making a very big mistake, the sort of mistake that in our lifetime could plausible kill millions of people.

ChatGPT can already write code. A magpie cannot do that.

Re:Bing: “I will not harm you unless you harm me first” by tptacek on Wednesday February 15, 2023 @02:52PM (#34809645)
That's one of those capabilities that seems super scary if you truly believe that writing code is one of the most important things a human can do. Computers have, of course, been writing computer programs for a long time. Next thing you know, they'll be beating us at chess.
Re:Bing: “I will not harm you unless you harm me first” by pharrington on Wednesday February 15, 2023 @03:12PM (#34809886)
I think you're confusing importance with power.
Re:Bing: “I will not harm you unless you harm me first” by amptorn on Wednesday February 15, 2023 @03:23PM (#34810029)
Can it execute code?
Re:Bing: “I will not harm you unless you harm me first” by int_19h on Wednesday February 15, 2023 @05:15PM (#34811505)
It can submit the code that it's written for execution if you tell it that it can, by utilizing specific markers in the output that get processed. There already are frameworks around this that make it possible to e.g. call an arbitrary Python function as part of answering the question.
Re:Bing: “I will not harm you unless you harm me first” by Zetice on Wednesday February 15, 2023 @05:06PM (#34811354)
That’s an easy prediction to make; at worst you’re cautious.

And it’s a powerful tool. Even staplers have rules around their use: no stapling people, no hitting people with a stapler, don’t use a staple to pick a lock, etc.

But nobody blames the stapler, is my point.

Re:Bing: “I will not harm you unless you harm me first” by JoeyJoJoJr on Wednesday February 15, 2023 @04:00PM (#34810493)
With the advancements of AI in the past year alone it seems silly to think that, within a lifetime, AI doesn’t have the ability to manifest society collapsing contagion. AI is certainly going to be granted more network access than it currently has, and the feedback loop between AI, people, and the network is going to increase exponentially.

Reduced to the sum of its parts, the internet is less than a magpie, yet viruses and contagion of many forms exist in it, or are spread though it. ChatGPT 2.0 greatly amplifies the effects of those contagion, regardless of our notions of what intelligence or agency actually is.

Re:Bing: “I will not harm you unless you harm me first” by Zetice on Wednesday February 15, 2023 @05:10PM (#34811416)
Innovation doesn’t follow any path; discovery is messy. No matter how much we advance towards smaller chips, we are never going to get to 0nm, for example.

There are limits, but even if there weren’t, we’re no closer to AGI today then we were a year ago. It’s just a different thing entirely.

LLMs are cool! They’re exciting! There should be rules around their responsible operation! But they’re not going to kill us all, or invade, or operate in any meaningful way outside of our control. Someone will always be responsible for them.

Re:Bing: “I will not harm you unless you harm me first” by bmacho on Thursday February 16, 2023 @08:42AM (#34818439)
> It's pants-on-head silly to think "ChatGPT 2.0" is anything other than, at best, a magpie. If you put the nuclear codes under a shiny object, or arranged it such that saying a random basic word would trigger a launch, then yeah a magpie could fire off nukes.

> But why the hell would you do that?!?!

Exactly. Except that they are doing it exactly, and we are the ones asking 'why the hell would you do that?!'.

A chatGPT 2.0 knows everything, really. If you command it (or it reaches the conclusion itself for some unrelated commands), it can hack nuclear arsenals and nuke everything, or worse.

Re:Bing: “I will not harm you unless you harm me first” by JohnFen on Thursday February 16, 2023 @05:37PM (#34827527)
> A chatGPT 2.0 knows everything, really. If you command it (or it reaches the conclusion itself for some unrelated commands), it can hack nuclear arsenals and nuke everything, or worse.

Pretty much everything here is incorrect. An LLM is not omniscient. An LLM does not think or reason. An LLM does not reach conclusions.

There is no "AI" here in the sense you're saying.

Re:Bing: “I will not harm you unless you harm me first” by chasd00 on Wednesday February 15, 2023 @02:22PM (#34809166)
if you prompted ChatGPT with something like "harm John Doe" and the response comes back "ok i will harm John Doe" then what happens next? The language model has no idea what harm even means much less the instructions to carry out an action that would be considered "harm". You'd have to build something in like `if response contains 'cause harm' then launch_nukes;`
Re:Bing: “I will not harm you unless you harm me first” by int_19h on Wednesday February 15, 2023 @02:43PM (#34809509)
We already have a model running in prod that is taught to perform web searches as part of generating the response. That web search is basically an HTTP request, so in essence the model is triggering some code to run, and it even takes parameters (the URL). What if it is written in such a way that allows it to make HTTP requests to an arbitrary URL? That alone can already translate to actions affecting the outside environment.
Re:Bing: “I will not harm you unless you harm me first” by Zetice on Wednesday February 15, 2023 @05:15PM (#34811498)
On one hand, what kind of monster writes an API that kills people???

On the other hand, we all know it’d be GraphQL…

Re:Bing: “I will not harm you unless you harm me first” by int_19h on Wednesday February 15, 2023 @05:44PM (#34811910)
You don't need an API to kill people to cause someone to get seriously hurt. If you can, say, post to public forums, and you know the audience of those forums and which emotional buttons of said audience to push, you could convince them to physically harm people on your behalf. After all, we have numerous examples of people doing that to other people, so why can't an AI?

And GPT already knows which buttons to push. It takes a little bit of prompt engineering to get past the filters, but it'll happily write inflammatory political pamphlets and such.

Re:Bing: “I will not harm you unless you harm me first” by theptip on Wednesday February 15, 2023 @02:46PM (#34809574)
I fleshed this out more elsewhere in this thread, maybe see https://news.ycombinator.com/item?id=34808674.

But in short, as I said in my GP comment, systems like OpenAssistant are being given the ability to make network calls in order to take actions.

Regardless of whether the system "knows" what an action "means" or if those actions construe "harm", if it hallucinates (or is prompt-hijacked into) a script kiddie personality in its prompt context and starts emitting actions that hack external systems, harm will ensue.

Perhaps at first rather than "launch nukes", consider "post harassing/abusive tweets", "dox this person", "impersonate this person and do bad/criminal things", and so on. It should require little imagination to come up with potential harmful results from attaching a LLM to `eval()` on a network-connected machine.

Re:Bing: “I will not harm you unless you harm me first” by pharrington on Wednesday February 15, 2023 @02:51PM (#34809632)
It's a language model, and language itself is pretty good at encoding meaning. ChatGPT is already capable of learning that "do thing X" means {generate and output computer code that probably does X}.