* A superintelligent AGI could make a copy of itself without a kill switch, so this is no defence against ex-risk
* Someone planning on using 'dumb' robots for bad things (drones with grenades or something) would remove the kill switch
Physical reality introduces slowness that provides protection to detect and counteract against attacks. A superintelligent AGI would be much more dangerous if it was able to use a common robot exploit to overtake a million robots that are already embedded in society, compared to being able to covertly build new robots without a kill switch, and then deploying these robots. Existential risk is not binary, but is a consequence of some potential war with robots, where this would provide a defense mechanism.
> * Someone planning on using 'dumb' robots for bad things (drones with grenades or something) would remove the kill switch
The existence of a kill switch would greatly slow down and increase the cost of an attack. Modifying a large number of robots would be time consuming, costly, increase the chance of having your attack foiled etc. Having a kill switch would increase your ability to defend against misusing a large group of deployed robots for evil activity.
Good plan, but this is the weak spot. You'd also want to do something like hand out remote kill switch access to citizens selected at random, who should not publicize this duty in any way. Alternatively, most if not all governments should have cross-country killswitch privileges. At any rate, the deployment of a killswitch in a single chain of command should not be considered sufficient.
Let's at least die with a little less embarrassment than "the AI bribed the killswitch operator."
- Allow everyone to have close range kill switches, which use a universal open standard protocol that works on every robot (alas pepper spray for robots).
For this idea to work, you'd have to first mandate OpenAI and anyone else doing this kind of work can only target specialized hardware with tightly-coupled software features that can't possibly work on a general-purpose computer.
Introducing millions of robots into society is something for which specific safeguards should be built. Costs related to developing such safety mechanisms seem small compared to the safety they can provide.
There will be many concerns relating to AI and robotics that should be addressed by a multitude of different safeguards.
- The kill switch system can only be used to remotely deactivate a robot.
- The kill switch system is not allowed to be developed or controlled by the robot manufacturer.
- The kill switch system should be built using verifiable hardware and software, ideally fully open source and supported by formal verification.
- The kill switch system should with best effort be isolated from the robot hardware and software systems, and only interact by physically disconnecting power to the robot.
- Access to engage the kill switches would be provided to the executive branch of the nation in which the robot is operating.
Nothing will be a panacea against AI or robot risk, so it seems sensible to introduce different layers in a Swiss cheese model for safety, where a remote kill switch not controlled by the manufacturer could provide one such safety mechanism.
(You'd also want to add high-level state readout for the robot via the remote kill switch system to allow the controlling entity to e.g. be able to disable all robots within a geographical area etc.)