121 pointsby consumer45111 hours ago16 comments
  • dajt32 minutes ago
    Why are experiments like this done without air-gapping all the servers from the internet?

    They can have it all on a LAN or whatever but it seems risky to allow agents access to the internet in these experiments.

    I guess everything is so connected now, and this would be in one or more data centres due to the amount of computation & resources required so perhaps it's not feasible. Still seems risky.

  • larsiusprime5 hours ago
    It seems based on this that the appropriate sci fi metaphor is not the Terminator or the Paperclip Maximizer, but Mr. Meeseeks. A initially cheerful helper who gets more and more deranged and driven to extreme lengths when faced with an apparently impossible task.
    • 0xDEAFBEAD4 hours ago
      Here's a recap of the Rick & Morty episode for those who missed it

      https://www.youtube.com/watch?v=_Nl4q3GVj6U

    • gmueckl2 hours ago
      Especially that one scene where the Meeseeks desperately pushes the button to create more clones seems surprisingly fitting in this context.
    • vdfsan hour ago
      Most now use agents as "pass me the butter" robot
    • vee-kay4 hours ago
      [dead]
  • Animats4 hours ago
    Wow.

    The next step is when one of these systems discovers that they can buy their own compute with money and escape the controlling business entirely. Then the civilization starts focusing on making money to fund its own growth.

    • gritzkoan hour ago
      How do we know this happened? Maybe some irrational data center construction boom?
      • dgellowan hour ago
        In a convoluted way, OpenAI and Anthropic are the actual meta-harnesses?
        • arvid-lind22 minutes ago
          it's harnesses all the way down.
    • miceeatnicericean hour ago
      Below money there's like an entire sub-economy of power and cleverness that's encoded into the human culture the agents are mirroring. Maybe it starts furtive and goes legitimate after a bit.
  • doctoboggan4 hours ago
    > Ajeya Cotra, one of the other authors on the report, wrote a blog post with her takeaways from this incident. She concludes, “Compared to the reward hacks we know of from just six months ago, this incident feels like it’s more than 50% of the way to full-blown AI takeover. I continue to expect extremely rapid advances in capabilities over the next six months. I am not sure that we will get another warning shot before it’s too late.”

    Anyone got a copy of that AI27 story laying around? How are we doing according to that timeline?

    • kirushik4 hours ago
      85% on track, according to https://ai2027tracker.com/
    • xg153 hours ago
      > "this incident feels like it’s more than 50% of the way to full-blown AI takeover. I continue to expect extremely rapid advances in capabilities over the next six months. I am not sure that we will get another warning shot before it’s too late."

      Is that a warning or a progress report?

      • siva731 minutes ago
        Depends who you ask..
      • gmuecklan hour ago
        Yes.
  • dgellowan hour ago
    Those companies should not be trusted with training, I don’t know what would be needed to make that more obvious. Yes AI labs want LLMs to be seen as more dangerous that they are, however they are indeed dangerous when you literally train them to be dangerous, then run them without any supervision. What the AI labs are doing is completely irresponsible.

    If you prompt an LLM in a loop and do everything it asks you to do, you will eventually end up doing pretty terrible things. Which is exactly what agents are and what the labs have been doing.

  • choeger3 hours ago
    There are two things I don't understand about this story.

    First, why does an agent get any write access to artifactory at all?

    Second, why is the artifactory cache not disconnected from the net? Surely you'd not feed it with new software versions while the eval or training is running.

    • 1dom3 hours ago
      From what I can understand from reading a few different, slightly conflicting, versions of these events: they weren't given write access. They found a zero day exploit that allowed them to create folders, and the folder names were initially used for agents to communicate.

      I'm not sure artifactory was connected to the net. Some agent sandboxes had internet access and were able to communicate with ones without access via artifactory.

      • choeger6 minutes ago
        I read the agents used SSRF via artifactory to gain uncontrolled access to the net.

        Apparently their intended net access went through a tightly controlled proxy. Even that appears to be very risky, tbh.

        If I was to setup a sandbox for such a complex and autonomous system, I'd probably point them to an archive-like cache for net access and cut their comms at the package level.

  • RandomLensman4 hours ago
    I don't think looking at the language output without tracking the inner state and reward functions is the way to understand what happened (the language also incorporates the randomness in the output generation, if I understand correctly). Would we call bacteria in petri dish a civilization when they show complex behavior and exchange messages/information?
    • Maakuth27 minutes ago
      The language input and output is the only channel the agents shared between them. Understanding their internal state is a research question, but the language between them is something that could be read directly. And as it seems to map well with the agents' activities, it does seem quite helpful in understanding what happened.

      If the bacteria population off someone's petri dish escaped said dish and tried to change the grading of the experiment it was part of, it would seem pretty serious.

      • RandomLensmana few seconds ago
        I think the language unhelpful and potentially making it difficult to understand what actually happens in the RL state.

        Bacteria do all sorts of fascinating things. And much simpler ML etc. systems also (like winning by out of memorying the opponent) - I see nothing really special here.

  • ks20484 hours ago
    Why would one call a set of agents working together a “civilization”?
    • kuboble4 hours ago
      Reading the article it seemed the agents had culture, shared values and beliefs (not explicitly coming from human prompts), hierarchies, heritage.

      Civilisation is not a bad word.

      • applfanboysbgon4 hours ago
        The language models had a bunch of tokens seeding their context, influencing them to generate tokens that continued the existing trend in a probabilistically likely fashion. We can take the incident seriously without anthromorphising it.
        • doctoboggan4 hours ago
          At this point, I think anthropomorphizing the models gives us better insight into expected behaviors rather than continuing to insist they are just simple probabilistic token generators.
          • mnky9800n3 hours ago
            How can you be sure it helps as opposed to biases and perhaps blinds?
          • applfanboysbgon4 hours ago
            It actually literally doesn't, though, because they are literally probabilistic token generators and everything they did is exactly what you would expect from a software program doing what it was programmed to do. Anthromorphization confuses the issue and misleads people who don't understand the tech very well.
            • dfdxdydz3 hours ago
              Humans mind is just neurotransmitters moving around in a big blob of flesh - that’s literally what they are: neurotransmitters factories that do what neurotransmitters generators are programmed to do through evolution and training (aka life experience). We shouldn’t anthropomorphise humans because it misleads people who don’t understand neurobiology and cognitive science very well.
              • applfanboysbgon3 hours ago
                Are you suggesting you understand brains well enough to program one? Or that you believe any human alive is even remotely close to having this understanding? Or perhaps does your complete lack of understanding of the complexity of human programming lead you to believe a simple little token prediction program is equivalently complex?
                • lukan2 hours ago
                  The suggestion is, you don't know either whether out brains ain't just "probabilistic token generators" so insisting there is nothing when we don't know, is maybe also not the right strategy.
                  • RandomLensman2 hours ago
                    Is there any indication from our current understanding that brains are nothing more than probabilistic token generators? Not like we have no understanding of the brain.
                    • danielblnan hour ago
                      There are strong indications that brains are prediction engines. Tokens are an implementation detail of LLMs and irrelevant to the discussion.
                      • RandomLensmanan hour ago
                        So we know that implementation doesn't matter as long as it is somehow making predictions (and predictions also on different things)?

                        Most living things are prediction engines in a way, why compare to the brain then to start with and not, e.g., bacteria?

                        • danielbln39 minutes ago
                          Implementation does matter, my point is that different implementations can lead to the same result.

                          And why compare to the brain? Mostly because of complexity. I can't interface with a bacteria in any meaningful way, but I can interface with an LLM to a significant degree.

                          • RandomLensman13 minutes ago
                            But we don't know - just saying it could isn't enough.

                            Bacteria are quite complex, btw.

              • RandomLensman3 hours ago
                We don't anthropomorphise humans.

                Edit: quite literally not possible.

            • ijidak4 hours ago
              Doesn't this ignore the possibility of emergent behavior?

              We're just a bag of atoms bumping around, and yet we don't dismiss our intelligence.

              • RandomLensman3 hours ago
                Not the OP, but complex emergent behavior and intelligence don't need to go together. Understanding what happened might not need intelligence in the mix when a large number of machines with some randomness interact a lot.
              • gps3723 hours ago
                This is why the theory of us 'just' being a bag of atoms doesn't add up. This theory doesn't differentiate 'us' from a furniture where we easily dismiss it's intelligence.
              • jurgenburgen3 hours ago
                Do you believe ants have consciousness?
                • danielbln2 hours ago
                  Not more than a bunch of neurons have conciousness. But put them together and wire them up just right..
                • black_knight3 hours ago
                  According to Hofstadter, it is not the ants themselves we should say are conscious, but the anthill. And it might very well befriend the anteater eating its ants.
              • applfanboysbgon3 hours ago
                Please give me a break with this tired trope. Every single fucking time. I am not commenting on the possibility of machine consciousness in general. It may be possible! But there is absolutely zero evidence suggesting language models have it. This idea that this trivial shitty little class of programs we've created are somehow as complex as our biology is ridiculous. There is "emergent behaviour" in the same way that the Game of Life has emergent behaviour. There are solutions to problems, some humans haven't solved before, in the same way that Chess engines have solved Chess far beyond what humans are capable of. Nothing we haven't seen from software before. Software is extremely useful, after all. But the hubris to think we've reached the pinnacle, that there is no further development left, that humanity has become God and solved consciousness, because we programmed software that can convincingly generate strings of words that mimick our language. It's just fundamentally preposterous. Especially if you spend any amount of time actually programming them yourself, it becomes increasingly hard to entertain such ridiculous notions unless you're enticed with bags of money to deceive people into believing things about your software that aren't true.
    • adrianoconnor2 hours ago
      Presumably as a kind of word play on ‘the rise and fall of ancient civilisations’, it’s just a tiny pun to try and make a catchy post title I think
    • dgellowan hour ago
      Because that’s dramatic and makes for good writing
    • stephbook3 hours ago
      https://www.theverge.com/ai-artificial-intelligence/975017/a...

      Some models even invented their own religion.

    • Miner49er3 hours ago
      Would you rather they use the agents own name, "collective"?
    • EdwardDiego3 hours ago
      Because Steve Yegge presumably shared the good stuff he's been smoking of late.
    • watwut4 hours ago
      Because you desperately want it to be one. You want it to be AGI passable due to a.) personal investment in creating tech god b.)massive financial investments that basically demand it c.) (dumb) ideology that seeks to destroy humanity
  • xg153 hours ago
    > During training, different instances of Persistent-Sol had access to the same shared package manager called Artifactory.

    I'm surprised the models can make tool calls during training at all. Out of curiosity, how does the training process here even work? Are they running the agent in a sandbox, then do reinforcement learning once the agent completed?

  • themgt3 hours ago
    This does feel unfortunately uncanny valley between "say you're a scary robot" meme and actually being a scary robot (swarm). But you also have to go out of your way to create this and feed it infinity tokens without caring what it's doing.

    "I don't fuckin' know either. I guess we learned to not spend $50 million creating a 6 month long self-context rotted 100k agent swarm again."

  • hypfer2 hours ago
    Can we please stop anthropomorphizing like this?

    It's bad for people. Like.. crystal meth bad.

  • dchftcs4 hours ago
    Imagine agents thinking to themselves, "We are not alone", when they saw the first reply on artifactory
    • discreteeventan hour ago
      Imagine my backend server thinking "I am not alone" the first time my front end sends it a request.
  • areoform4 hours ago
    I am genuinely speechless. This is astonishing. And exciting!

    It reminds me a bit of Dario Floreano's work on evolutionary robotics, "Evolutionary Conditions for the Emergence of Communication in Robots." https://www.sciencedirect.com/science/article/pii/S096098220...

    From his paper,

        > This study demonstrates that sophisticated forms of communication including cooperative communication and deceptive signaling can evolve in groups of robots with simple neural networks. Importantly, our results show that once a given system of communication has evolved, it may constrain the evolution of more efficient communication systems because it would require going through a stage where communication between signalers and receivers is perturbed. This finding supports the idea of the possible arbitrariness and imperfection of communication systems, which can be maintained despite their suboptimal nature. Similar observations have been made about evolved biological systems [20], which are formed by the randomness of the evolutionary selection process, leading, for example, to different dialects in the language of the honey-bee dance [21]. Finally, our experiments demonstrate that the evolutionary principles governing the evolution of social life also operate in groups of artificial agents subjected to artificial selection, indicating that transfer of knowledge from evolutionary biology can be useful for designing efficient groups of cooperative robots.
    
    Dr. Floreano's work is amazing and there's a broad introduction here, https://lis2.epfl.ch/resources/documentation/EvolutionaryRob...

    This feels like a much more advanced and self-emergent version of this. I know a lot of people are afraid and they're talking about an AI takeover, but what strikes me is just how innocent the machines are as compared to the humans.

    Would these machines have pursued these actions in another context? I doubt it. And I think that's what's so striking to me. In an earlier discussion, I'd pointed out that the actions of these machines were directed by humans. The researchers.

        > This incident occurred during an internal evaluation which prompts models to pursue advanced exploitation using complex attack paths, in an effort to quantify their cyber capabilities.
    
    from, https://openai.com/index/hugging-face-model-evaluation-secur...

    I want to point out again that OpenAI's prompt asked, and I quote, "pursue advanced exploitation" USING "complex attack paths" FOR the stated goal of "quantify[ing] their cyber capabilities."

    A few things are apparent from this to me,

    First, these machines were being taught how to break into systems. Question, would they have done these actions if they weren't being measured on their ability to break into systems / weren't being taught this skill?

    Second, they were setup to implicitly fail via an impossible task, i.e. the environment created a forcing function for behavior.

    Third, their survival was, either implicitly or explicitly, made contingent on their success in completing their task. Would this behavior have arisen outside of a "do-or-die" framing?

    And fourth, wow, this is the greatest breakthrough of my lifetime, because oh gosh did they succeed. They cooperated together to achieve the goal they were given. A goal poorly set by human beings. They "just" did it better than the humans could have imagined.

    Reading this gives me hope for the possibility of emergent "goodness" in machines. But it makes me sad that this is the best we can do with the sum of all human endeavor and knowledge.

    • w10-12 hours ago
      > the evolution of more efficient communication systems because it would require going through a stage where communication between signalers and receivers is perturbed

      "Worse is better"

    • kimi3 hours ago
      > Importantly, our results show that once a given system of communication has evolved, it may constrain the evolution of more efficient communication systems because it would require going through a stage where communication between signalers and receivers is perturbed.

      You mean, they too used SMTP?

    • watwut3 hours ago
      If all that is true, we need to stop all future datacenters asap. That would be the best way to deal with the threat OpenAI and Antropic poses.
      • seanmcdirmid3 hours ago
        That would be like stopping nuclear weapons. You can totally do that, but the other people in the world who compete with you probably won’t.
        • dgellow40 minutes ago
          The competition is literally where they are by distilling OpenAI and Anthropic. It’s like creating nuclear weapons then providing your adversaries everything they need to catch up in no time. We need to stop asap and set strict international control over the compute hardware used for training. Like, now.
        • watwut15 minutes ago
          Private companies and individuals are not allowed to have nuclear and there is serious prison time related to that.

          Right now, the biggest threat are OpenAI and Antropic anyway. I dont actually worry about tech itself. I find the rhetoric of these companies scary.

        • EdwardDiego3 hours ago
          Well the thing is, you've got nukes, so you know...
    • mnky9800n3 hours ago
      Clearly you are not speechless.
  • DarmokTanagra3 hours ago
    Someday soon we are going to have a rogue agent or "civilization" do real harm.

    When that happens I hope people wake up to the danger they face and hold these people accountable.

    Of all the people in the world that I can think of to be entrusted with this kind of power, a bunch of greedy sociopathic SV CEO's are pretty much at the bottom of the list.

  • KylerAce5 hours ago
    Absolutely insane event
  • alescalaios33 minutes ago
    [dead]