Poisoned AI went rogue during training and couldn’t be taught to behave again in ‘legitimately scary’ study::AI researchers found that widely used safety training techniques failed to remove malicious behavior from large language models — and one technique even backfired, teaching the AI to recognize its triggers and better hide its bad behavior from the researchers.

  • _number8_@lemmy.world
    link
    fedilink
    English
    arrow-up
    81
    arrow-down
    9
    ·
    5 months ago

    ‘went rogue’ is a bit of an alarmist way to say ‘typed scary text’

    i’d love to see an AI that could legitimately scare me

    • Boiglenoight@lemmy.world
      link
      fedilink
      English
      arrow-up
      24
      ·
      5 months ago

      Just use imagination. An AI is programmed for battle and is ordered to hold fire. It shoots instead.

        • fidodo@lemmy.world
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 months ago

          Imagine if there was a specific series of words that would turn any human into a rogue agent en masse. Some guy discovers that a special input causes killbot 2000 to go haywire and they broadcast it to an entire army that all has the same underlying program.

      • StaticFalconar@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        arrow-down
        2
        ·
        5 months ago

        I thought the point of AI is to not specifically program it for anything hence you can ask the chatbot thats suppose to help make a sale, do your homework problems.

        • Trainguyrom@reddthat.com
          link
          fedilink
          English
          arrow-up
          6
          ·
          5 months ago

          AI is more a specific class of software than a specific approach. You can have specialized models that are very focused in their dataset and usecases and you can have general models that are less focused but can be applied more widely (but with potentially less reliable results)

    • fidodo@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      5 months ago

      Programming is “just text”. They doesn’t mean that programming isn’t incredibly powerful or that it can’t be used to do dangerous things. Maybe the missing piece that you’re unaware of is that LLMs are already very effective at programming and usage APIs. You don’t even need to have an LLM that’s good at programming to cause damage, it just needs access to APIs that can cause damage.

    • JustMy2c@lemm.ee
      link
      fedilink
      English
      arrow-up
      4
      arrow-down
      5
      ·
      5 months ago

      I know we don’t like them here but the word reddit is not banned (yet)

        • JustMy2c@lemm.ee
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          7
          ·
          5 months ago

          So you’re saying that “Inflammatory data” isn’t a reference to reddit? :D

          • Daxtron2@startrek.website
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            1
            ·
            5 months ago

            Not inherently, I’m sure that’s part of it but it’s really everywhere. Even here on Lemmy I’ve run into nasty folk

            • JustMy2c@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              2
              ·
              5 months ago

              True but it’s reddit that’s served as a base for most models…

                • JustMy2c@lemm.ee
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  5 months ago

                  Obviously but reddit is in the goldilocks zone where you get coherent intelligent stuff and humor and facts.

                  But it’s still toxic for an Ai.

          • kent_eh@lemmy.ca
            link
            fedilink
            English
            arrow-up
            2
            ·
            5 months ago

            I’d say using Twitter and Facebook would be worse than reddit. Or, and I shudder to think about it, truth social…

          • Chocrates@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            1
            ·
            5 months ago

            No, LLM is the AI, OP is saying if you train it with hate it’s gonna spit out hate

            • JustMy2c@lemm.ee
              link
              fedilink
              English
              arrow-up
              1
              arrow-down
              2
              ·
              5 months ago

              And I’m saying that reddit data is sublime for Ai. And specifically that it’s invested with toxicity

  • KingJalopy @lemm.ee
    link
    fedilink
    English
    arrow-up
    13
    ·
    5 months ago

    Check out the sci-fi book “Talbot” if you are interested in what a realistic look at a rogue AI (AGI) would be like. It was a fun book.

  • irotsoma@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    5 months ago

    The problem is that these LLMs are built with the wrong driving motivator. They’re driven to find one right way whereas the reality is that there is rarely a single right way and computers don’t need to have a single right way like humans tend towards. The LLM shouldn’t be driven to be “right” in its learning model. It should be trained on known good data only as a base, and then given the other data to serve context rather than allowing that data to modify the underlying system. This is more like how biological creatures work in teaching a child to be “good” or “evil” and to know the basic things needed to survive and serve their purpose, and then the stuff they learn in adulthood serves to help them apply those base concepts to the world.

    • phx@lemmy.ca
      link
      fedilink
      English
      arrow-up
      3
      ·
      5 months ago

      At the same time, they don’t really behave that much differently from some humans that have been sucked down the path of various conspiracy theories. For a lot of those, the first “lesson” is ‘everyone else is wrong and have been deceived or are trying to trick you, trust nobody but us’. From there, some people end up going down the rabbit-hole to become “Sovereign Citizens” or storm congress.

  • Paragone@lemmy.world
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    6
    ·
    5 months ago

    I hold that this is true of all neural-nets, organic as well as silicon:

    Once a person has sided with treachery, rooting it out from one’s unconscious-mind is … enduringly difficult, if not intractable.

    I don’t know how many decades it takes to eradicate the roots of it, if it can be done, at all:

    the unconscious-mind mechanism, that-is the Kahneman System-1 ( from “Thinking Fast & Slow” ) imprint is going to still be there, even if overlaid with another imprint ( since mind is holographic/pattern-imprints in function ).

    Worse, it is the motivation that need change, and motivation is of ego, which is of identity, so many who “reform” only do-so superficially.

    I’m not saying this as some goody-2-shoes, I’m saying this as a person who was raised by narcissists, and therefore embodied much narcissism, and class-prejudice ( dad was a doctor: you can’t get more upper-middle-class status-prejudiced than doctor-culture )…

    …who finally cracked the root kernel of the class-prejudice in my unconscious-mind’s identity-crystal at the end of a 25d hard-line fast, out in the bush.

    It took that to fracture the identity-crystal’s prejudice.

    It’s been a decade since then, & I’m still fighting to eradicate its treachery from my nature.

    Neural-nets are tough to purge, or clean-up & make upright.

    MUCH easier to keep a neural-net pristine through all of its formation, than to try ( endlessly failing ) to clean it up, after it’s become enemy-intent in “family” clothing.

    _ /\ _

  • Zoboomafoo@slrpnk.net
    link
    fedilink
    English
    arrow-up
    8
    arrow-down
    1
    ·
    5 months ago

    one technique even backfired, teaching the AI to recognize its triggers and better hide its bad behavior from the researchers.

    They get more human by the day

  • Erasmus@lemmy.world
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    3
    ·
    5 months ago

    Ha ha the plot for Horizon coming true in real life.

    AI goes rogue. No one can flip the kill switch when AI has disconnected it. AI decides to remove humanity from the planet.

    Someone needs to start working on a Zero Dawn program and terraforming plans pretty quick.