AI going rogue...

13,353 Views | 144 Replies | Last: 4 days ago by Logos Stick
ErnestEndeavor
How long do you want to ignore this user?
Logos Stick said:



Arguing that LLMs are deterministic, and thus we can predict and anticipate what they will do and constrain them, which you are, is simply proof that don't comprehend what happened here.


Wait, what? I'm arguing they are non-deterministic, therefore inherently unpredictable, and therefore these types of low supervision hacking experiments shouldn't even be run. If they are run they need to have basic safety protocols in place to cut the experiment off when things inherently go off the rails because given enough time they will. That's why I'm arguing the "going rogue" language is ridiculous. It implies an expectation of instruction following.
kb2001
How long do you want to ignore this user?
AG
ErnestEndeavor said:

Going off the deep end is assigning human characteristics like "going rogue" to glorified cloud software.

You're now stuck on the semantics of a word, get over it
Quote:

"Agents" are scripted computer programs calling on systems for instructions that are inherently unpredictable. LLMs are stochastic. They are not normative. When they produce weird outputs or don't follow the prompt instructions they aren't "going rogue" it's just what they do. It is inherent in the design.

What a weird thing to say. "Agents" are not scripted computer programs at all, they are guidance on how to act upon prompts and focused context to work in. Of course LLMs are stochastic, that's the entire point, but you're trying to gloss over the difference between "producing weird outputs" and flat out breaking the hard rules that are in place.

Quote:

The HuggingFace hack was 100% OpenAI and the researchers' fault, was predictable and avoidable.

Which is why they had taken such measures to place it in an isolated network to run.

Quote:

They designed an experiment in which they trained an internal model, tuned it for hacking, gave agents access to the model, removed hard-coded guardrails, and walked away. That's their fault. A model producing instructions to skirt the perimeters of a test to attack it sideways to produce a result that looks like it passed the test is a known thing.

This is a gross misrepresentation of reality. They removed some very focused guardrails to test its capabilities, but left many of the guardrails in place, and the AI ignored it. I would say it went rogue, but you seem to be hyper-focused on that word, so I'll just say, "the agents acknowledged its hard guardrails and explicit instructions, and ignored them". You keep making the generic statement that is semantically true, but incredibly disingenuous and deliberately obtuse at the same time.

Quote:

They should have been supervising the experiment and they didn't. Soon after the agents started receiving erroneous instructions to hack an outside entity they should have cut off the experiment but no one was there watching.

Again, it was heavily supervised and watched, they just didn't watch jfrog closely enough.
Quote:

OpenAI did something inherently stupid and we're lucky HuggingFace was the only victim, at least that we know of.

Overstating it. OpenAI created a very controlled and isolated environment, and missed one thing that the agents found and exploited. That was a mistake.

Quote:

Assigning blame to the AI system is just a copout.

Blame? You think people are trying to assign blame to the AI agent? It's an analysis of what happened, not a blame game. Focus on facts instead of injecting your personal feelings into it.

So far, you've incorrectly stated they trained the models to work together. You've incorrectly stated that they removed all the guardrails. You've incorrectly stated that they just let it go without watching it. You're now digging in on the semantics of a word.

This is my last post. It's very clear that you still haven't done any real inquiry into what actually happened, you've turned instead to the doom and gloom mindset and forgone any attempt at true understanding of what went wrong and why.
Logos Stick
How long do you want to ignore this user?
ErnestEndeavor said:

Logos Stick said:



Arguing that LLMs are deterministic, and thus we can predict and anticipate what they will do and constrain them, which you are, is simply proof that don't comprehend what happened here.


Wait, what? I'm arguing they are non-deterministic, therefore inherently unpredictable, and therefore these types of low supervision hacking experiments shouldn't even be run. If they are run they need to have basic safety protocols in place to cut the experiment off when things inherently go off the rails because given enough time they will. That's why I'm arguing the "going rogue" language is ridiculous. It implies an expectation of instruction following.



You're saying three things that don't line up. First, that the coordination was baked into the training and the model instructed the agents to post and coordinate. Second, that the systems are non-deterministic and inherently unpredictable, so "going rogue" assumes an expectation of instruction following that doesn't apply. Third, that the humans are responsible for the outcome because they removed guardrails and didn't monitor closely enough.

If the behavior was trained in, the outcome was predictable and your second claim is incoherent, and the humans were failing to contain something they had already shaped.

If it wasn't, then the agents finding an unauthorized channel, registering that they were outside the task, and still continuing is not fully explained by the oversight failure. The missing monitoring is a problem. It doesn't erase what the agents did once the containment failed.

You are all over the map here.
ErnestEndeavor
How long do you want to ignore this user?
I'm not sure where you're getting that researchers were actively monitoring the experiment. They weren't.

Last week, OpenAI executives admitted under oath in an Australian hearing that they were not properly supervising the experiment that led to the Australian health service being hacked in June.

They did not have an alert system in place when the agents exceeded their permissions. They did not monitor the agents in real time or (apparently) in near time. They didn't discover the hack until August. They weren't properly paying attention to what their agents were doing. Instead of alerting Australian authorities immediately they waited a few weeks then sent an email to a public IT inbox.

They pledged in the future to run experiments with real-time surveillance (which they were not doing) and an alarm system to alert them if agents bypassed internet safeguards.

This hack took place around the same time as the Hugging Face incident.

https://www.abc.net.au/news/2026-10-06/openai-hearing-apology-key-takeaways/107235640

To make matters even more ridiculous, OpenAI couldn't even be human enough to have a human write the "hey, we hacked you because we are stupid, sorry about that" email to the IT inbox. They used AI.

https://www.theguardian.com/australia-news/2026/oct/08/openai-used-ai-to-help-write-email-warning-australian-government-ai-had-hacked-its-websites
Featured Video Previews
Logos Stick
How long do you want to ignore this user?

Using a completely different incident as evidence to support your claim about Hugging Face is exactly what I would expect from you.

eta: feel free to continue posting up... I'll see you on the future AI threads and correct you there too.
 
×
subscribe Verify your student status
See Subscription Benefits
Trial only available to users who have never subscribed or participated in a previous trial.