Although there are a few ways to mitigate the risk, the only way to block it is to get AI to differentiate instructions from data, which is impossible today.
It’s a text completion model/glorified Markov chain. Of course it can’t input sanitise, it was never meant to do this to begin with.
The tool calling integrations that let it do more are basically making it add a markdown code block in JSON format into the user message, where the middleware intercepts it.
The input and “instructions” are the same thing from its perspective. There’s nothing special that differentiates the two. The user input text, so it will output text, following the most likely sequence from its training.
if the instruction is messy fuzzy human language to a system that was not coded instruction by instruction but got generated and trained then there never is a way to differentiate instructions from data if i’m not mistaken
We know that some humans can be trained to do that just fine. Humans are natural neuronal networks. That implies, neuronal networks can in principle do it. We just don’t have any human-capability artificial neuronal networks yet.
LLMs might never get there. But humans aren’t LLMs. If we ever manage to properly model a human brain, that probably will be able to do that task with human-level accuracy (which actually is pretty good if you only look at professionals of the filed).
Hopefully, it doesn’t actually need a human brain for the task - because modeling that might still be a century off.
A human brain model would never get us to a super computer, which is their intended goal.
Our brains have about one exaflop of processing. The NVidia B300 has 15 petaflops of processing. Corresponding to 0.015 exa, you’d need 66 of the strongest GPUs on the market to match the processing power of one human brain.
That’s before considering context, current estimations would put the human brain at 2.5 petabytes of storage. The former B300 has 288 gigabytes of VRAM. Corresponding to 0.000288 of one human brain, the earlier expectation of 66 landing flat at 0.019 the storage of a human brain.
Can arguments be made not all brain capacity is at VRAM at all times? Most likely. But context windows is the primary bottleneck, not compute
Our brains are absolute monsters, we’d gain more from understanding how we can have this powerful of a machine on so little space. The bigger breakthrough would be brainbased processing of software, but I’ve not heard of anyone going that route - Probably because it’s not feasible
I have heard in the past that it’s not possible to fully control AI. Like literally, the people developing and running the AI cannot fully control its behavior. I did a quick search to see if I could find more info and found this link on the first page of results: https://www.eurekalert.org/news-releases/1032090
I think that we’re going to continue seeing unwanted behavior from AI.
Distinguished credentials, but at the same time I am not buying it. You can control AI. You can turn it off. You can have it not interact with systems you don’t want.
Remember this guy is saying “you cant control AI, we are all doomed” while also saying that we live in a simulation and he is very close to being able to hack us out of it.
Grain of salt and all.
By the way his belief is thus “AI can’t be contained, therefore the simulation can be escaped; by contraposition, if the simulation can’t be escaped, AI can be contained” Since AI cant be contained, he reasons, we can escape the simulation, quite possibly by using a super AI!
There might be a reason he has a podcasts and visits Joe Rogan
It is - and tons of bugs are just about fucking it up or just not doing it at all. Incomplete or faulty parsing and validation of untrusted input is absurdly common. It got better in the past decades, but most software developers write worse code than AI by now (not me though; obviously, I am still better than the best AI).
Input sanitation, basically security 101. And it can’t currently do it…
It’s a text completion model/glorified Markov chain. Of course it can’t input sanitise, it was never meant to do this to begin with.
The tool calling integrations that let it do more are basically making it add a markdown code block in JSON format into the user message, where the middleware intercepts it.
The input and “instructions” are the same thing from its perspective. There’s nothing special that differentiates the two. The user input text, so it will output text, following the most likely sequence from its training.
That’s also not the only way. Basic governance also works. Why does copilot have so many permissions?
if the instruction is messy fuzzy human language to a system that was not coded instruction by instruction but got generated and trained then there never is a way to differentiate instructions from data if i’m not mistaken
Well, good thing we’ve only poured a trillion and a half dollars into it and wrecked the economy.
We know that some humans can be trained to do that just fine. Humans are natural neuronal networks. That implies, neuronal networks can in principle do it. We just don’t have any human-capability artificial neuronal networks yet.
LLMs might never get there. But humans aren’t LLMs. If we ever manage to properly model a human brain, that probably will be able to do that task with human-level accuracy (which actually is pretty good if you only look at professionals of the filed).
Hopefully, it doesn’t actually need a human brain for the task - because modeling that might still be a century off.
A human brain model would never get us to a super computer, which is their intended goal.
Our brains have about one exaflop of processing. The NVidia B300 has 15 petaflops of processing. Corresponding to 0.015 exa, you’d need 66 of the strongest GPUs on the market to match the processing power of one human brain.
That’s before considering context, current estimations would put the human brain at 2.5 petabytes of storage. The former B300 has 288 gigabytes of VRAM. Corresponding to 0.000288 of one human brain, the earlier expectation of 66 landing flat at 0.019 the storage of a human brain.
Can arguments be made not all brain capacity is at VRAM at all times? Most likely. But context windows is the primary bottleneck, not compute
Our brains are absolute monsters, we’d gain more from understanding how we can have this powerful of a machine on so little space. The bigger breakthrough would be brainbased processing of software, but I’ve not heard of anyone going that route - Probably because it’s not feasible
I have heard in the past that it’s not possible to fully control AI. Like literally, the people developing and running the AI cannot fully control its behavior. I did a quick search to see if I could find more info and found this link on the first page of results: https://www.eurekalert.org/news-releases/1032090
I think that we’re going to continue seeing unwanted behavior from AI.
Distinguished credentials, but at the same time I am not buying it. You can control AI. You can turn it off. You can have it not interact with systems you don’t want.
Remember this guy is saying “you cant control AI, we are all doomed” while also saying that we live in a simulation and he is very close to being able to hack us out of it.
Grain of salt and all.
By the way his belief is thus “AI can’t be contained, therefore the simulation can be escaped; by contraposition, if the simulation can’t be escaped, AI can be contained” Since AI cant be contained, he reasons, we can escape the simulation, quite possibly by using a super AI!
There might be a reason he has a podcasts and visits Joe Rogan
Little Bobby Tables strikes again.
I just can’t anymore. Isn’t that like, the basic thing any program does? Who runs these companies?
It is - and tons of bugs are just about fucking it up or just not doing it at all. Incomplete or faulty parsing and validation of untrusted input is absurdly common. It got better in the past decades, but most software developers write worse code than AI by now (not me though; obviously, I am still better than the best AI).