Decoder with Nilay Patel
00:45:03 · Nilay Patel, S3
[00:45:03] S2: I like that the era was, like, three months ago. [00:45:06] S3: Right. But it's like Yeah. Basically, there's been a massive change. This was effectively mostly an organizational problem. It was not a technology problem. It is that the PhD researchers at these companies are gods on top of Olympus, and the security teams are plumbers and were not allowed to touch the evaluation networks. And all of a sudden, this problem happened, and the security teams are like, hey. How do you like us now? [00:45:33] S2: Maybe you
00:45:33 · Nilay Patel, S3
[00:45:33] S2: Maybe you [00:45:34] S3: should have talked to us. Right? Yes. And so that was the problem with, like, OpenAI. And then, like, the Anthropic and Meta stuff is they had this. They all shared this outsourced provider who did a really bad job, right, and has gone slapped hard. And so that is solvable. Right? That is not the problem here. The problem here is not OpenAI Anthropics models escaping from OpenAI Anthropic causing problems. The problem is is bad guys using models from a variety of sources. There's already a problem of defenders getting refusals from OpenAI Anthropic, and it is a real, real challenge that if I am trying to do defense of anthropic being like, oh, it looks like you're a bad guy. So I think we have to be extremely careful, create a situation where if I'm trying to do defense and I'm the middle of the worst day of my career, that all of a sudden I get cut off. I think we have to be extremely careful about that because it is actually... As somebody who now has this challenge, it's actually quite challenging to disambiguate between people doing defense and offense in some cases. We are getting better collectively at this, but it is a challenge. It's also something that's really pissing the rest of the world off because, you know, Americans are, like, 5% of the planet. There are lots of people who need to do cyber defense around the world, and they are they are treated much more poorly. Europe, Asia, legitimate companies are treated much more poorly from a cyber defense perspective.
00:46:54 · Nilay Patel, S3
[00:46:54] S2: This is, if you add it all up, this is a good argument to slow down. Right? It... To say, we need to catch up to the capabilities, the models. We need to build some of these systems. We need to initiate everyone into a way of thinking where the cost of prevention is is worth it and not just the cost of the cure. Do you think that it's likely that we we will slow down? Do think that we should? [00:47:16] S3: If I had my druthers, I would be fine slowing down on the frontier and then catching up on the cheap... Cheaper models for defense. I'm a defense guy. I have to, like, live in the world that other people who work six blocks for me Yeah. And, you know, who are way, way, way, way richer. Make... I live in their world, man. Yeah. So, like, I get asked this question all the time, and it's like, I just do the best I can within the world other people make. [00:47:44] S2: Yeah. Do you think that the the big labs have woken up? You you mentioned that their cybersecurity teams, they've gotten more access. They've they've stopped what you might call the hugging face error, or at least they've they've changed the structures of those companies. Do you think that will help?
00:47:58 · S3
[00:47:58] S3: I mean, certainly, they've woken up on the eval risk. Right? On... I think they have teams who who have been the... This entire time working very hard on the big picture cyber risk. There's a bunch of people in these in these companies, as you know, who want to slow down. Yeah. A lot of that discussion is driven by the p doomers who... It's about AI killing us, and I have never... I've... That's never been my that's never been my concern. Right? And to me, that has always been a driven by 24 year olds who all they've done is AI, and they've never done anything else. Right? Like, you and I are both, I think, old enough to remember. I grew up a couple miles from a sack base, and we did drills where I was taught that hiding be... Behind beneath my public school desk would save me from a Soviet thermonuclear bomb. Right? Like, that was p doom. You know? Mhmm. My grandfather built a bomb shelter that my mom was taught to hide in during the Cuban missile crisis. That was p doom. And so, like, there's, like, a a youth issue and a never doing anything but AI issue of of of people who, like, they got their undergraduate, their master's, and their PhD only doing linear algebra and and neural networks and never touching anything else. And so I have always been much more concerned about the human uplift risk from AI, of all the risks about human beings using AI to do bad things to other human beings. Right? And and so part of my concern is that there has been success in these labs working together on, like, we're not gonna let them encrypt their chain of thought. Because when they talk about pacing the frontier, it's for the p doom stuff, for the the polycules that live together indirectly. You know, like, they're talking about very specific stuff about keeping control of the models themselves, which I think is great. I think that stuff needs to happen. But then if those things happen, then there's still often an increase in a bunch of capabilities that human beings can use. And and so I'd really prefer there to be kind of a broader discussion on, could we make these things, one, less human seeming? I'm a big fan of, like, I don't think these things should have personality. I think the goal of these things should be to serve humans. They should not seem to have souls. They should not seem to have personality. I think a lot of the negative impacts...
00:50:28 · S3, Nilay Patel
As somebody who was at Facebook and saw what it was like for that company to have negative impacts on people, I think there should be a much broader feeling at these companies of, like, what are we doing kinda broadly to people? And a lot of that could just be, don't have these things ever act like somebody's friend. [00:50:49] S2: Yeah. [00:50:49] S3: Right? At a maximum, it should act like... Like, the people... I I don't know what the company is, but the people who made the, hi. I'm, a really nice... You know, like, the photorealistic Yeah. Girl who will chat with you, that is, to me, spectacularly unethical Yeah. To even try that, to even start that. That's the kind of thing that we should just make... I don't know if we can make it illegal, but we should make it completely societally not acceptable to work on that kind of stuff.
00:51:18 · Nilay Patel
[00:51:18] S2: That's a great segue because I I did wanna ask you about Facebook and content moderation. Like I said, you and I first started talking a long time ago about content moderation in the context of security. Right? You would get foreign nation states flooding our algorithms with all kinds of misinformation during elections, and that was a security problem. I I opened Instagram today, and I am confronted with some of the most nightmare copyright law hypotheticals to have ever existed in the history of the world. Right? It's a... The one I got today was a deep fake of Lewis Hamilton and Charles Leclerc doing somebody that I used to know. And I was like, well, like 50 different people can probably sue Meta right now. Right? And also, this is hilarious if you know what happened in that last race. So, you know, we keep talking about it. We've posted some clips of us talking about it on The Vergecast where I'm like, I I think Meta is letting their AI ambitions crush Instagram. Right? Like, is being flooded with slop in a very particular way. Some people love it. Sometimes it's funny. But there's a nightmare set of lawsuits coming. There's a whole rights management problem coming, and then the users don't like it. And they should label it and let you filter it. And so we post this, and Adam is serious. He said this to us in a reply on threads. I would love to do this. I'm worried that the models are gonna get ahead of us. Right? That we can try to do this, but there's not actually a way to recognize AI content. There's not actually a way to label it well. If you'd... Or if you're worried about the sexy AI influencers stealing jokes from a comedian, Now you gotta build a database of jokes. You have some history here. I I think Instagram is about to go through it in a real way. Is there some technical solution to the problem of AI slop in social media?