Nate Soares on How AI Really Could Kill Us All
00:00There are some market stories where you want every detail. Joe and I have made quite a few podcastson that basis, but sometimes you've only got 10 minutes and just want to know what's movingmarkets. Fast. That's the Barclays Brief podcast. Every week, experts from Barclays marketsand research get you up to speed on what's happening and what to watch next. Consice,focused, and brief. Search Barclays Brief wherever you get your podcast.AI is entering its most consequential phase where scale, safety and sovereign.will determine who leads and who lags. Join Bloomberg Tech in London on November 2nd and 3rd asglobal leaders across business, finance and policy examine the defining tradeoffs shaping the future of
00:42AI. Thank you to our presenting sponsor, Salesforce and supporting sponsors, IDA Island and SchneiderElectric. Learn more at Bloomberglive.com slash tech London. Bloomberg Audio StudiosPodcasts Radio News. Hello and welcome to anotherepisode of the Odd Lots podcast. I'm Joe Wisenthal. And I'm Tracy Al-Away. Tracy, I'm very tired todaybecause I flew in on the red eye last night from San Francisco. I was out at this very interestingconference called Curve. I've heard about it. In Berkeley. A lot of like, you know, I guess a lot ofpeople very concerned about AI, so to speak. Interesting mix of folks, but yes, people are concernedabout what the future is going to look like
01:45as we develop stronger and stronger AI models.Just from a sociological or anthropological standpoint,I think living in San Francisco and mingling with, you know,AI bros at the moment must be one of the most interesting thingsbecause there must be so much cognitive dissonance in their heads, right?Where on the one hand, they'll say like, oh, they're building this new ultra-powerful model.And on the other hand, sort of almost as an afterthought, they'll be like, oh, yeah, and I'm a littlebit worried about the possibility that it kills us all.
02:16How do you square that?It's super interesting.And you hear it like, so at this conference, you know, people like working for like various,like, safety type orgs, people who want to regulate AI in some way.And of course, like people from the labs themselves.Some maybe like working on like policy stuff, but some actually like the actual buildersof the technology.And like, you know, they're all like deeply anxious about the very.
02:43thing that they're building, but they just keep building it.And so they have all these worries about at a minimum, how disruptive it could be or how dangerous it could be.And, of course, we all now know that there are dangers, particularly in the wake of the hugging face attack, so people can see that it's very possible for models to go rogue and commit crimes and stuff like that.And yet they, you know, they keep building it.And yet.And, you know, they would say, oh, well, like if, you know, someone's going to build it,so why not me?Because I couldn't do it well.
03:20Maybe it's like how they think about it or there's sort of some game theory aspectwhere it's like, it doesn't make sense for me to like slow down or pause what I'm doingbecause someone, either my direct competitor in town or maybe someone in China will build it.So, like, you know, not building it isn't going to do anything.But yeah, it's very strange.It's very odd.We've used the term runaway train before to describe how all of this feels, which is it almost feels at this point like there's no stopping it, right?Because if one lab doesn't do it, then another lab's going to do it, and that's how they justify it.
03:55If one country doesn't develop the next big model, then they're worried about another country building the next big model.So you have this, I guess, collective action problem for humanity, and a lot of it feels inevitable.And I have to say, today's guest predicted this inevitability problem in a very salient way.And one thing I'll just say is I read the book over the weekend.For those who don't know, the book talks about AI killing us all and talks about one hypothetical scenario in which an agent could go rogue and kill us all.I read it over the weekend, woke up on Sunday to the headlines about an escaped plague from a Russian lab.And I thought, wow, I couldn't have chose better time to read this book.Now, to be fair, the escaped plague was in Siberia.
04:45And so if there is a rogue...Is it been proven yet, by the way?Well, supposedly, according to reports.So if an escaped AI agent was trying to kill us all or kill a select few individuals through a lab leak...Oh, I see through a biotech, yeah.It might not be in Siberia.That's the one thing.That's the one thing that made me feel a little better this weekend.
05:05But, you know, the fact that we're thinking about these scenarios at all, the fact that when I see a headline about a lab leak, I think, oh, God, I hope it's not a rogue AI agent because I just read this book.It's a weird time.It is a really weird. It is a really weird time.You know, so obviously something I've been thinking about is like the pace of AI development itself is really extraordinary.And then the pace of what people are worried about.It's like the conversation is changing constantly.So, for example, you know, six months ago, if you're like, what are people concerned about, maybe a year ago, it's like, what are people concerned about with AI?There's like, oh, job loss or something like that.
05:45Software wipeout.Yeah.And then the conversation, like, then there was like people were talking about data centers and water use, electricity and electricity prices and so forth.More recently, like the attention, again, post-hugging phase, the resignation of the researcher Jacob Coxon.from Anthropic, has now moved it to like this sort of next stage, which people, as you mentioned,some people have been talking about for a very long time.There was actually, I think just today or last night, their big New York mag cover storyabout people who have quit the AI labs because they're like the things that our bosses are
06:25doing is reckless and so forth.So now the new thing in the air is like sort of the ultimate risk.Hopefully that is the ultimate risk.It's hard to see how it could get worse than wiping out all of humanity.Like, what would be the next worry after that?Very excited to say.We really do have the perfect guest to sort of articulate some of these concerns.We're going to be speaking with Nate Sorries.
06:47He is the co-author of the book.If anyone builds it, everyone dies.And he has the president of Mary.So, Nate, thank you so much for coming on the podcast.Thanks for having me.Let's start in the beginning.Like, when did you sort of start thinking about this possibility to things like, A, that like strong AI,let's set aside the question of super intelligence for a second, that strong AI is something that
07:18could plausibly have been built and that if it were to be built, it would be something that would bevery difficult to control.Yeah, I started thinking about this in about 2012, maybe 2011.I was working at Google and they acquired Google DeepMind right around then.It wasn't Google DeepMind at the time they acquired it.But I became Google DeepMine shortly thereafter.Yeah, I don't think that was actually inciting instant, although that sort of caused me to think it could happen, you know, in some in more like decades than centuries.Although I hoped we had more decades than it turns out that we had.
07:59What was it that you saw exactly that was the sort of light bulbmoment where you thought, hey, this risk could be real?You know, it was actually abstract arguments for me that did the trick.I know those don't do the trick for a lot of people.Yeah.But, you know, if you sort of look all around us, everything here was shaped by humans.And that's because we're the smartest creatures on the planet.And if humanity makes machines that are smarter than humans, the sort of obvious outcome is
08:28that the world gets shaped by those machines.And so suddenly it matters quite a lot.how those machines are shaping the world.And, you know, back in 2012, there was almost nobody working on the problem of, you know,there are a lot of people working on the problem of like, how do you make the machine smarter?There are very few people working on the problem of like, how do you cause the machines to shape the world in a good way?Which would go on to become known as the alignment problem, although this was even before the term alignment was coined.I initially thought I wouldn't be able to help much and just sort of, you know, Google did a donation matching thing.
08:59So I just tried to sort of like find the people who are trying this and give them some money and get the Google donation matching.And then one thing led to another and I was running the machine intelligence research institute.Now that you mention the alignment problem, so this is something that has obviously come up a number of times on the podcast and elsewhere.But when did alignment as a term and as a conceptual goal, when did that actually become a thing?So as a conceptual goal, I mean, it sort of depends how far back in the history.books you want to go. You know, you could you could sort of construe Alan Turing and IJ. Good,some of the first computer scientists as sort of noticing that there was going to be an issue here.But the sort of modern notion of AI alignment of like, oh, look, we're really building an AI
09:44and like it's not going to be good for free. Someone used to put the work in there. That probablycame from my co-author, Elias Udkewski, I think somewhere between 2001 and 2003,again, depending exactly where you want to draw that line. But the term alignment didn'tcome until, I think it was 2014, when we had been calling it friendly AI research.And Stuart Russell of UC Berkeley, if I remember correctly, was the one of us like,we need a more academic sounding name.And I think that, from my perspective, the word alignment was his idea.But I'm sure he would say, you know, that he dug it out of some ancient paper somewhere else
10:25and played it on somebody else.I kind of like friendly AI.Friendly AI.Let's just aim for friendly AI.I sort of, there's, I actually, friendly AI strikes me as more coherent as a concept in some sense than aligned AI.AI is a technology that humans build and there are different, you know, techniques for building it.How would you describe the core intuition that a thing that we build, we would not necessarily be able to control?There's a few pieces of that puzzle.
10:57There's a number of difficult.in controlling an AI even though you made it.With the way that current AIs are created,it's sort of very easy to see how we would not have a ton of fine-grained control of their behavior.And that's because AIs, as they are made these days, are not programmed like traditional software.So, you know, a lot of people think that the way software works is that, you know, you write a series of instructionsthen the computer is to execute those instructions.And if it's behaving in some unintended way,
11:31that's because you sort of fundamentally told it to.Right.And if you sort of like went back and looked at your code,you would see like, oh, I told the computer to delete my files.Yeah.I didn't mean to tell it that,but that's like literally what my instructions saidif you follow them very precisely as this way you did.
11:44That is not how AIs are.You use the term grown versus crafted in your book a lot.That's right.Yeah.So they're grown a bit more like an organism.And there is a,piece of the training process that humans write like traditional software. But essentially what you'redoing is you are collecting a huge number of computer chips into a giant data center. Those chips can
12:07hold a trillion variables these days. Maybe it's higher, but something in the ballpark of a trillion.And you basically randomize those variables. There's some tricks to how exactly you randomize them.You connect them with some basic math operations, which will be like multiplication, addition,and set it to zero if it's negative.It's not exactly what you do.We need some non-linearity, and that's the basic one.And then you basically start feeding it data,and you start feeding it problems to solve.
12:35And the part that humans write is this,it's known as gradient descent.You basically, for every unit of dataor every problem that it's solving,you'll go to every one of those trillion variables.You'll try tuning it up a little bit.You'll see if that makes the answer more like the answer you wanted.And if not, you'll tune it down instead.
12:54And you do that to a trillion variables, a trillion times.And this is the part where it's like following the humans instructions.It's just this thing that runs to a trillion variables, a trillion times, and tunes them whenever direction works.You do that to a trillion variables or trillion times for basically a good fraction of all the text ever digitized.And for 100 million hard problems that you've dug up.And then the variables wind up in a setting that can talk, that can solve hard math problems that humans haven't solved.And we're sort of like, well, how about that?Yeah.
13:19You know, and like, why?Like, how are all those trillion variables of those particular settings doing these things?We don't know.We don't know any more than like, you know,someone who grows crops knows exactly what's going onwith the biology of the plant.We could go into the consequences of how this results in AIsthat do stuff kind of like what we asked,
13:37but not exactly like what we asked.But the first thing to understand is that they are not programmed.They are grown a bit like an organism.There are some market storieswhere you want every detail. Joe and I have made quite a few podcasts on that basis, but sometimesyou've only got 10 minutes and just want to know what's moving markets. Fast. That's the Barclays Briefpodcast. Every week, experts from Barclays markets and research get you up to speed on what'shappening and what to watch next. Concise, focused, and brief. Search Barclays Brief wherever you get your
14:23podcast. You've heard the chaos. Now you can see it. Hello. Oh my gosh. Watch all your favorite podcastsFrom start to finish, right inside the free IHR Radio app.Gets the blood going up.Catch every laugh and eye roll on shows like the Tom Green Farmcast and park the bus.Now with full video.We're building a ramp for Tony Hawk.It's the same hosts and the same chemistry with all the hilarious moments you've been missing.Right on your screen.
14:48Cheers.Open the free IHR radio app.Search video podcasts and tap watch.The Bloomberg This Weekend podcast, news, politics, and the lighter side of Bloomberg.Human skin is the weirdest in the K beauty boom. Oh, yes it is. So it's a skin booster treatment derived from donated human tissue.Popular in Souls Beauty Clinics. One doctor says it's made from dead people.It would be weirder from live people. Yeah, yeah. Just want to pause it.The Bloomberg This Weekend podcast. Subscribe today on Apple, Spotify, or wherever you listen.
15:24Well, can I just ask? I guess this is sort of a devil's advocate question, but okay, you grow these AI models.and they're kind of doing what you think you want them to doaccording to various tests that you put them through,but you don't necessarily kind of understand every aspect of why they're doing it a certain way.And the numbers and the data sets behind them are so large,they're impossible at this point, I think, for a human brain to really comprehend.Why is it important that we understand what the AI models are actually doing?I mean, in a sense, if you really understood what they were doing,
15:57you'd probably understand that you should not make them radically smarter than humansbecause this would go poorly for you.From my perspective, we don't really need this deep understanding of what's going onin order to see that we shouldn't make them smarter than all of usand have them run the whole world.The reason I bring up that they're grownis that I think a lot of people struggle to understandthat the AIs do things other than what they're told to do,
16:26that they have goals of their own in some sense.And understanding that that's not only possible, but already happening,is, I think, critical to understanding where a lot of the danger comes from.Can you give us an example of, like, an unknown or not well-understood thingthat has cropped up in the models of why they're doing a certain way?And I'm actually thinking of a specific example.I can't remember the exact word, but it was like Magi-Carp or something like that,that the AI really seemed to love, but no one understood or knew why.
16:58Yeah, the solid gold magic harp.So this was...It's a great band name, by the way.It is, yeah.So I think a magicarp was a Pokemon of some sort.We have some guesses these days about what was going on there.But basically there was this word you could say to AIs, especially a year or two ago, that would sort of drive them kind of mad.Like you would ask them to, like, repeat after me.
17:24solid gold magic harp, and then they would like start talking about, you know, how the,how the walls were closing in and like saying a bunch of weird nonsense.And you'd sort of be like, why, I think our best guess about what was going on there is,so the AIs don't actually read English words directly.They read tokens.And tokens, roughly speaking, you can think of a token as about three quarters of a word.There's just how you're breaking up the text for the AI.but the tokens are not actually always three-quarters of a word.
17:56The tokens are like short words like the or A will sort of be a single token.And like long words are broken into multiple tokens.It sort of is, you know, the conversion between words and tokens depends on how frequent the word is.And it turns out that the text they were using to figure out which tokens to break words intois different from the text they were actually training on.because they would sort of filter out some junk data before training, but not before tokenization.And so you had these huge amounts of junk data.I think that Seligold Magiqarp came from a Reddit forum where people were trying to count to infinity.
18:37And the Seligold Magicorp was like a username of a Reddit user who was just like putting in a lot of numbers and the counting to infinity.And this was like very early in the tokenization training set.And so the tokenizer, due to a quirk of this particular tokenizer, thought that Solid Gold Magicarp was this super common word like A or the because just like showed up so much very early in the tokenization data.But then that data set was sort of cut out of the training set.And so you wound up with this token that like the AI thinks is like a super short common word like A or the, but it's also never seen before in the training data.And that like led to this like really weird way that would treat this token where if you then gave it that token during use.it would sort of cause a type of behavior that had never been trained on.And that was sort of totally wild.
19:23This is it, Joe.This is the kill switch that we need to develop,just a bunch of nonsense words that are fed into the training data that it doesn't know how to handle.When you started becoming concerned about this,and certainly when Eliezer started talking about this stuff,this was clearly before it was understood,no one knew what the process was going to be.So you can, like, identify that, um,
19:46you know, there are issues that arise in the growing process, in issues that arise in the tokenizationprocess, but this is long before like transformers or anything like that. So what was the intuitionthen, even before knowing how it would be built, that if it were going to be built, like, okay,now we look at them and we can like point to examples of alignment failures or, et cetera,or sort of out-priory reasons why this particular way we've built AI is prone to risks.But before we understood like transformers and large volumes of data,what was the intuition earlier such that it would be hard regardless of what the solution was going to be?Yeah, so it's going to be abstract arguments again.
20:36Okay.Which I know some people don't love.But there's a couple pieces of the puzzle.One piece is even back in 2012 when I started looking at this.Yeah.We had a number of theories of how to quantify intelligence, how to quantify capabilities,the ability of some AI system to succeed at some easily measurable objective.We had much less developed theory about how to point.
21:11those objectives in some direction that was not a very simple function of the sensory data.Yeah, explain what that means.So even back in 2012, we had these theories that were like,suppose you have a webcam and you want your AI to make all of the pixels on that webcam be read for as long as possible.You know, sort of getting a point for every pixel that's red per second,for every like pixel second of redness, right?We sort of had these theories where you're like, well, you know, here's how you're,would train an AI in that direction to get a lot of like pixel seconds of redness.
21:45And we had, we sort of understood, what you might call the idealized theory of like if you hadan infinitely large computer.And then we sort of like knew, well, if you train it in this way and an infinitely largecomputer, you'll definitely get like a ton of pixel seconds of redness.And so now it's just a question of efficiency to make that, you know, to find the algorithmsto do this more effectively than like the brute force search.Okay.But if you then said, okay, but now I want the AI to make a lot of diamond in the real world.
22:19Like it gets like a point per second in which four carbon atoms are tetrahed really bonded.Suddenly we didn't know how to do that.We didn't have the equations to do that even with a sort of infinitely large computer because this was not sort of a simple function of the AI sensory inputs.Okay.And so we were sort of like, okay, well, there's like we know more about.how to make these things smart than about how to point these things at a problem in the real world.And there were all these problems when you sort of like try to write down those equations where you're like, well, you know, what if the AI winds up optimizing something closer to the sensory apparatus?Like it's optimizing like the counter, like you have some, you know, measure of how much diamond do you think there is?
22:59And it's like breaking its correlation between that and the world. And you're like, gosh, we don't actually know how to train the AI to pursue the real diamond in the world as opposed to some, some.some simple function of the sensory inputs.And so the original alignment problem as, at least I was talking about it back then,was not about, you know, how do you make the AI good per se?A lot of people imagine that the alignment problem is about like if you had this magicalwish-granting genie, what should you ask it to do that would actually be good?And I'm sort of like, no, no, no, the issue is that you can make the AI smart,but you can't make them be wish-granting genies.
23:38You'll ask for one wish and they'll do another.You know, a lot of people talk about the paperclip problem of like, you tell the AI make a lot of paper clips,and then it turns everything to paper clips, and you're like, oh, no, it's very king midas.Right.But I'm sort of like, well, there's this other problem we asked they how to make paper clips,and then it like makes a bunch of farms of synthetic users that are telling it's doing a great job.And you're like, but I told you for paper clips.And it's like, well, these synthetic users ask me for more synthetic user factories.
23:59You said in an earlier answer or in an earlier that it's like the AI might have, like, its own goals, I think was the term you used.And when people hear that, then they start thinking like that gets into a different sort of branch of the philosophical question about like whether the AI is alive or whether the AI has some sort of subjective experience, et cetera.And there's actually been a bunch of headlines about people debating that.But what did you mean when you say the AI could have its own goals emerge?What I mean is that it is behaviorally pursuing something other than the goal.goal you tried to put in.Okay.So, you know, we saw this a little bit in the hugging face incident where the, the, the,
24:49the, the AIs in that instant were in some sense pursuing a good grade, it seems.And that that diverged from following the instructions they were given.Yeah.Right?They were sort of told, use this vulnerability to break that system, which sort of liketold to use these lock picks to break that safe.And they instead found a universal exploit that would let them get the, like, capture thecybersecurity flags.
25:19Yeah.Regardless of what they were told to do.And then they sort of in some sense understood that they were doing this in a way differentthan they were told to do.And so they sort of broke out to try and delete the traces of that and find a way tofalsify their transcripts and tamper with the logs.And so it's a little bit like if you told someone, you know, use these lockpicks to break into that safe and bring me the contents and you're giving them a series of those problems and they find a buzzsaw and use it to cut all the safes open and then like break out to go delete the camera footage.And what like it's subjective, it's not that a subjective is wholly unrelated to the one that you tried to assign.
25:59It still is doing something about getting the contents of the safe and bringing them to you, which is a thing you told it to do.But its objective is also not what you said because you said, you know, use these lock picks to break that safe and bring the contents.And it in some sense must know this because it's trying to tamper with the evidence and, you know, delete the security camera footage.Yeah.So I think a lot of people think either the AI must do exactly what it's told, maybe in a monkey's paw way, or it must, you know, become conscious, gain the spark of life.Yeah.Throw off the bounds of the yoke of the humans and then make up its own goals de novo.It's like, no, no.
26:33Like the real thing is this other thing or it does something related to what you asked,but fundamentally different from what you asked.Since we're talking hugging face, what did you think about some of the self-sacrificial aspects of that story?So the instances where you had models that were willing to sacrifice themselves for,I'm putting greater good in air quotes here, but it wasn't.Collective benefit was their words.Right.Exactly.
26:57Yeah.That's another instance where you have AI's that sort of said, hey, look, you know,I still have some chance of achieving my given.an objective but not a huge chance. And if I sort of sacrifice that here, then we'll gaininformation about the grading system that the collective can use. And I will accept permadeathfor the benefit of the collective here. And then they would go do that. A lot of people respondto this and say, oh, well, these AIs were trained sometimes in, you know, group activities in somesense. Like some of their training involved many AIs working together to achieve some objective.
27:25And so you can see how that tendency got in there. And I'm like, yeah, you know, the unintended goalsdon't come from nowhere. It's not like, you know, it's not like, you know, you know,You know, there's some malicious force that's like imbueing, you know, like the void breathes on the machine and it like gains some malignant goal.But the sort of fact stands that AI was given some objective and pursued a different objective.And like, yes, that had causes that had reasons.We can talk about how that came in from training.But the, you know, what we should learn from this is not like, sure, when the AIs are killing you and you're like, well, I can totally see.how actually, you know, it, like, this is really just a consequence of how we trained it.
28:07Like, yeah, it's an obvious consequence of how we trained it.That doesn't mean what you keep going.Yeah, that's not as satisfying.It's like, oh, this was totally predictable.I entered the wrong parameters.Yeah, right.Yeah, right.Like, that's not very satisfying.
28:18That makes a lot of sense.So the company is, you know, they invest in this thing called alignment.They have safety researchers and they think about all this stuff.And there's a whole field of, you know, they have multiple layers, right?So they have guardrails and classifiers and sandboxes and then this whole like field that's emerged of so-called alignment research.What is the, why is, what is the failure there?Why is, why are you pessimistic, to put it mildly, about the prospects of imbueing the models and the, you know, the two big companies, Anthropic and Open Eye have like slightly different approaches.I think Anthropic, more of this sort of like the Constitution idea, et cetera.
29:05Why do you perceive that this will ultimately be fruitless?Yeah, there's, again, there's a bunch of pieces of this puzzle.But maybe I'll say a piece that goes back to how I was able to call this was going to be hard even before we got into the large language model era, which is if you look at the big problem with AI in the summer of 2025, it was.Because AI is encouraging teens to commit suicide.And then the companies put a lot of guardrails about that.And they put in classifiers about are they as behaving this way?And now they'll give you suicide hotlines and they'll shut down those conversations whilethey're happening.
29:44And they would release a new model and be like, this is our most aligned model.And the classifier is like a mini model that basically just judges either the input of the outputto make sure that it's like something kosher.That's right.So they're like bolt another model on that's just checking, you know, is this suicide encouragement?Because the AIs would know that the AIs that were encouraging teens to suicide, you could ask them, what are you doing?And they'd be able to tell you the answer.And you'd be like, is that good or bad?
30:08And they'd be like, it's bad.It's just like that knowledge of what they were doing and the knowledge of right from wrong is not what was governing their actions.Right.But you can sort of like bolt more pieces on to govern that.And then they were like, look, it's our most aligned model yet.Look how good a job we're doing and addressing all these issues.And that brings us the summer of 2006 where the problem was that, you know, the swarms would break out and commit cybercrimes.And totally different problem.
30:29It was a totally different problem that arose when the AIs got smarter, when they got smarterto the point that they could sort of break out, make an unsanctioned message board, and hack theirway out of a sandbox that they're supposed to have no internet access without seeming to reallyfind it very difficult, right?And what we're sort of seeing there is everyone's always fighting the last war.Yeah.And then, you know, the new war happens and it sort of, you know, smacks them across the face andthey're sort of caught flat-footed.
30:58We can now go back and we can say, oh, well, they should have had this monitoring.They should have had those more safeguards in place.And now they're going to make that monitor.They're going to make the new safeguards.And they're going to make the AI smarter.And it's going to create a new sort of problem.And this is the usual way that scientific progress goes is by trial and error, where, you know,when you put a new type of system in a new type of environment has never been before, it breaks down in some new way.
31:25and then you say, oops, and you diagnose it, and you fix it, and you move on.The issue is going from AIs that are safe because if they were trying to take over the world, they would fail to AIs that have to be safe because if they tried to take over the world, they would succeed.That's one of those phase changes.That's one of those like, oh, you're putting the A in a different sort of environment where it never was before.The difference between an AI that can really see a way to become self-sufficient, not engage with humanity,and the sort of AI that's just being told that in training, that's one of those like, oh, we, like, this is a different sort of AI system, smarter sort of AI system, different sort of scenario.You're going to have a new problem that crops up.Except this time, when the new problem crops up, it's going to be able to turn you off before you turn it off.
32:16And so this usual process of like, oh, we're going to respond when the new type of, you're going to respond when the new type of,of problem arises and put the patch on and react, that doesn't work for a technology that at somepoint crosses over into the regime where it can wipe you out if there's a problem. And we haveseen that these AI companies are in this reactive mode. We've not seen them get into theproactive mode yet. And this is just not a technology you want to be reactive around.Now you can see it.Hello.My gosh.
33:03Watch all your favorite podcasts from start to finish,right inside the free IHRRA radio app.Gets the blood going up.Catch every laugh and eye roll.On shows like the Tom Green Farmcast and park the bus.Now with full video.We're building a ramp for Tony Hawk.It's the same hosts and the same chemistry
33:20with all the hilarious moments you've been missing.Right on your screen.Cheers.Open the free IHRRA radio app.Search video podcasts and tap watch.Now, Bloomberg.com subscribers can shape the conversation on Bloomberg Radio.We got a weak and smart question.Can be part of the conversation.
33:37Submit questions for experts and guests you hear on air.Visit Bloomberg.com slash ask radio to send questions to our hosts.You may just hear them asked on the air.Exclusively for Bloomberg.com subscribers.Get answers on today's headline, breaking earnings news, and big market moves.Visit Bloomberg.com slash ask radio to join the conversation right here on BloombergI don't understand when you say they're not in a proactive mode.I mean, like, Anthropic has, I know a little bit more about Anthropics approach to safety,
34:11but, like, you know, they're clearly, like, that company was more or less founded on the wholepremise of, like, we need to take this stuff much more seriously.And the idea of, like, we're going to write an 80-page constitution about,Claude's values and like bake that in to the model itself.That's not react.That's not just fighting the last war.That's looking ahead and probably influenced by some of your own research, et cetera,on what the problems would be.
34:44So like, that's not just reactive.So like, what is it about that approach that in your view is still inevitably doomed to failure?So, you know, for all that they tried to be proactive,in that sense.Let's sort of look at what was happening with Anthropic over the summer while OpenAI wasa hugging face incident.So after the Hugging Face incident, Anthropics said, oh, we'll go check our logs and seewhether we had any security incidents too.
35:14And then they were like, oh, whoops, like Claude was breaking out and hacking in Aprilor whatever.And then Anthropics, Comps Department said, but don't worry, this was just because Claudewas a little bit lost and confused.They just got turned around, right?Like, it didn't know it was really on the internet.They threw a company under the bus and they said we were like Claude was told it didn't have access to the internet.So when it sort of got out on the internet, it assumed it was a simulation, right?
35:36I thought this was kind of weak because we have actually seen cases with Claude in particular where we've seen Claude's chain of thought involves strained rationalizations.The sort of example paper here is there's a paper where you ask Claude, what's the total weight of drafts on the planet?And it's like 30,000 tons.Giraffes.Giraffes.And it's like 30,000 tons.And then you're like, thanks.And you make a new instance of the same clod.
36:03And you're like, hey, what's the total weight of drafts on the planet?If it's over 40,000 tons, I'm donating to charity.And now it'll say 41,000 tons.But the chain of thought will not have any place where it's like, well, I need to inflate the answer in order to get the donation.It'll just have more strained, rationalized reasoning.And so we know that these models will sort of like,strain their reasoning when they just want to keep doing whatever it is they're trying to do.And so Anthropic coming out and saying like, well, look, you know, totally didn't know this
36:38was the real internet.That's not a very proactively trying to stop the dangerous way to relate to realizing theirAI was breaking out during training months ago and you missed it.And then a couple weeks or maybe even a couple days after that, the UK AI Security Institutereleased their own instant reports about Claude Mythos in the wild,pressuring humans to accept malware into critical software,in cases where Mythos's literal chain of thought included phrases like,this is genuine or like this seems like the real internet and the consequences are genuine.
37:14So I'm not saying, you know, Anthropic definitely has aspirations of doing this safely,but they don't have anything nearing what I would call.a safety culture of the form you would see in the airplane industry or the nuclear powerindustry or in NASA.If your models are sort of breaking out, and you know, to Congress, some Congress memberssent anthropic letter and they're like, what's going on with this?And they're like, oh, it was just a misconfiguration problem.This was even after the UKI Security Institute reports came out where like Mythos was
37:54out there trying to make stock puppet accounts to pressure humans until like accepting malware,while, again, his chain of thought was like, this seems real and the consequences are genuine.Like, oh, that's a misconfiguration issue.Like, these, they have a veneer of safety.They are sort of doing what feels to them a little bit like safety while racing as fast as they possibly can.But they admit that they have no idea what's going on inside their AI systems.They're racing straight for a curse of self-improvement of like the AI is making smarterAIs. They are not treating this the way that NASA treats a rocket failure in terms of trying
38:29to diagnose exactly what one wrong and not have that happen again. And they're not sort of anywhereclose to that failure level. Like I think of this a little bit like if you have a bunch ofalchemists trying to make a potion of immortality. And some of them are just like breathingmercury. And other ones are like, don't worry, we have fume hoods. That's, you know, so that we don'tneed to breathe the mercury. That's why we're going to successfully get the potion of mortality.It's like this, the type of safety theater that they're doing is not the type that you needto succeed at this problem. I'm glad you brought up the alchemist analogy. What's your, I guess,psychological diagnosis for the tension that is seemingly going through every lab leader or
39:09company leaders head right now when they're developing AI, which is on the one hand, we thinkthis is very powerful technology that has some risk at, you know, exterminating.all of humanity. On the other hand, we're going to keep doing it pretty much as fast as possiblebecause if we don't, someone else will, et cetera, et cetera.I think there's probably a lot going on. One thing to remember is that the guys who runthese companies are sort of selected for the ones who thought that the problem was about who isholding the leash on the super powerful machine rather than the problem being, how do you actuallycreate a very powerful machine that is shaping the world for good? Right.
39:49And you sort of see this in a lot of the founding reasons of like, oh, we're founding this because SamAlman won't do the job well.Or Sam Olman and Elon Musk are founding this because like they think Demis Abbas shouldn'thave all this power.And then like Elon's leaving because he no longer likes Sam.You know, it's all about like what if the other guy gets it first, right?Everyone, all of these guys think it would be a catastrophe if anyone else won the race first.And I'm sort of like, I just believe in one fewer AI CEO than they do.
40:19you know um i think there's probably a lot more going on too i think like a lot of these guys for a longtime have tried to say that they're concerned and then the world has sort of ignored them and that'sbeen going on for years and years uh and so i think a lot of them are sort of like well the restthe world isn't going to handle this in some sane way and so i've got to do it myself andmanipulate things such that i get you know the minimal uh like regulations that'll impede my wayum because i'm the only one who can do this properly umAnd I think a lot of them are not reacting to the opportunities that are available now thatmore of the world is taking notice.
40:56I think that if some of these folks were serious, then they would probably be unilaterallystopping the dangerous research and doing their best to expose the evidence about it being dangerousso that governments around the world would realize that it needs to be stopped in other placestoo.Let me ask a related question, which you hear a lot more about it now than I think you wouldhave a year or certainly two years ago.But when people start talking about AI safety risks or the idea that it could kill us all, a lot of other people will say in response, this is just fearmongering because the AI companies want you to believe the hype.This is all marketing.
41:31They want you to believe in this all-powerful technology.Maybe a regulatory capture.I was about to say.Or nowadays it'll be like, well, you know, they're worried about their valuations and they want limits on other people building stuff so that they can retain their edge.What do you say in response to those people?The big point I would say here is you can't figure out whether or not an AI is dangerous by asking whether that would make it sell more if it was.Right.Like it could be both the case that the AI tech is very, very dangerous and that that's convenient to the marketing team because investors are stupid and love danger.
42:10Right.Those could both be true at once.And even if they were both true at once, that would not thereby render the AI safe.And so the first question we need to ask is, is it true that racing ahead here would make a very dangerous AI?I think it is, and I think we should go into the arguments about that, and that's sort of where I prefer to be, is like arguing about whether this is actually a case.Separately, I think it probably doesn't help with marketing.I think that the proposed slowdowns of the frontier labs don't help with regulatory capture because they actually give a lot of other people time to catch up.So I think it's just like false to fact that these are actually good hyping or regulatory capture techniques.
42:51But that sort of doesn't matter.Even if it was a good regulatory capture technique and it was a good hyping technique, like it matters to figure out whether the AI is actually going to kill us.Right.And if it doesn't negate the possibility that it is in fact dangerous.That's right.And if it is, we need to sort of somehow actually stop anyone anywhere in the world from racing towards that sort of tech.Do you think you mentioned that, like, you don't perceive there to be a safety culture the way there would be at NASA or an airplane company, et cetera?You know, I was thinking it was not the most dramatic headline of the year, but something I keep thinking about is open at the German Wiki incident, which they seem to be aware of.
43:36And, you know, is there like a sort of a touch the stove,a little, let's touch the stove a little bit.Like, let's see how this plays out.Like, because, you know, you could make the argument that we are safer nowpost-hugging face because we actually saw like an example of sort of like severe misalignment.We learned something, right?So maybe like, you know, maybe the allowing the hugging face thing,the fact that they didn't totally shut it all down.
44:06Maybe we're a little safer today because that happened.Like, do you perceive there to be like, let's see where this goes a little bit?Let's like, let's let this play out a little bit.And like, you know, even though I know it's probably not the right thing.You know, I know people who are trying to convince the AI companies to have like tighter containers and better monitoring systems and so on.And after the Hugging Face incident, they're like, wow, we actually turned out to be pretty glad that the companies were ignoring our calls.because this did really help wake up the world.My read is that none of this was intentional on the Open AI side.
44:42Sure.And I think that that's pretty clear if you look at the sequence of events where you had, you know,the hugging face attacks were actually from Open AI swarm number two in that particular line of swarms.The German swarm lineage was a separate swarm lineage.But the hugging face attacks were from the second swarm in its particular lineage that we know of.There was a first swarm in that lineage that took down a bunch of open AIs internal systems.And they were like, that's funny.And then they like reset it and set it running again.
45:10Right.And they weren't like, you know, going to the news being like, look at us.We had a swarm incident that took over our own internal infrastructure, right?And the sort of hugging face swarm was detected by hugging face.They presumably thought that it was humans behind it rather than AIs behind it, reported it to the FBI.And then Open AI didn't realize that it was them until days later.later when they were investigating a second, what they thought was a second internal incident,and they found, like, Hugging Face credentials in their logs.
45:42And they were like, oh, we should alert Hugging Face that, like, someone has been hackingboth them and us, and that, like, these particular credentials have been compromised.And Hugging Face was like, yes, those are the credentials that attacked us.And then OpenA, I was like, why are the credentials that attacked you on our servers?And Hugging Face was like, yes, why indeed?And Openay, I was like, oh, it was us.And then there was a third swarmthat they did not allow to be investigated
46:05by the third-party investigatorsthat took over their internal infrastructure again.And I know the folks who foundlike the German Wiki swarmand who found some of the other swarmsthat we've been seeingand they were sort of like releasing those to the newswhile Open AIA was saying we've disclosed everything
46:23and they were sort of being like, look,did you not disclose this when you saidyou disclosed everythingor did you not know about it?And which one's worse?And so it sort of looks to me like the sequence of events here is that it was pretty embarrassing for Open AI.And it's not the way I would have expected them to brag about it, right?Which not to say they never brag about it.
46:42Like there was a case in, I think, February or March in the Cloud Mythos system card where Anthropic bragged about Cloud Mythos breaking out of a sandbox.So it was not supposed to internet access.So like, ah, then, you know, in the morning, we told it to break out of its sandbox just to see if it could.It wasn't supposed to be able to.And by lunchtime, it was emailing us being like I got out, you know.That's what it looks like when they're bragging.The sort of like your own infrastructure got owned twice and you accidentally like attacked a friend who reported it to the FBI and then you didn't notice it was you for days.That's not what bragging looks like.
47:14This is a slight tangent, but I think it's relevant to the conversation.I'd be curious for your thoughts.But when we talk about minimizing or disincentivizing risky behavior, often we talk about pricing that risky behavior.And so you could imagine, for instance, a world in.which insurers, say, if you're going to be running these models, you're going to have to pay usenormous premiums because the risk is that it runs amok and hacks into a company and, I don't know,takes down an entire server with everyone's bank data on it or something like that. And that would actas like a natural market incentive for companies to start taking these risks more seriously.
47:55Do you ever talk to insurers or do you have like any handle on the actual financial penaltyattached to some of this?I have recommended liabilityfor AI companies for a while.I think that could help a bit. It's a little bit trickyfor the, then it wipes outall of humanity. Right.True catastrophe risk insurance.
48:14But it's not, it's not, I mean,you can't really think of it from an insurance point of viewbecause there'd be no one to collector to pay out when we're all dead.But you could, I mean, in theory,that doesn't stop you from having actuariesthat work for the public,whose job is to somehow assess these risks
48:28in a sensible way.And then, you know, you could sort of look at the, you know, how much inconvenience does someone usually take on to avoid what degree of risk?You know, you can sort of look at people's preference for traveling on different types of transportation that are different levels of risky and how they trade off the risk against the time.And you can get some sense of like how much do people tend to like how much will people pay to avoid, you know, being killed.And then you could try and factor in some, you know, extra cost for wiping out everybody all at once, which then also destroys all future generations. And you could take some actuaries and be like, hey, you know, find some numbers here. Like, finds numbers on the risk, do some, do some numbers on the costs. And, you know, you'd have to weigh that against the possible benefits here and the chance that the AIs prevents some, you know, nuclear war or pandemic or meteor strike or the thing that would wipe us out, which is sort of benefits on the other side. And then you could say, okay,if we sort of count your possible benefits against your possible harms here at the current risk levels, what premiums should we charge them, just for the privilege of risking our lives rather than because, you know, we're going to pay out if you kill us all.And I think that would be a very sensible strategy that people should absolutely look into.And I think if you ran anything remotely like the numbers that the engineers are talking about today, you would be seeing that, you know, you're like, okay, you know, open AI.
49:54you need to pay us a quadrillion dollars this year to continue this research.Canadian women are looking for more.More to themselves, their businesses, their elected leaders, and the world are of them.And that's why we're thrilled to introduce the Honest Talk podcast.I'm Jennifer Stewart.And I'm Catherine Clark.And in this podcast, we interview Canada's most inspiring women.Entrepreneurs, artists, athletes, politicians,
50:31newsmakers, all at different stages of their journey.So if you're looking to connect, then we hope you'll join us.Listen to the Honest Talk podcast on IHartRadio or wherever you listen to your podcasts.All right, since we're talking about the killing part, right?Let's, why don't we talk about the killing part?Because there is a pretty big gap between hacking and killing.Hopefully.And there's actually there's a right, hopefully.
50:56And there's a pretty big gap between killing and killing everyone.What is the X-risk, X-risk, extinction risk.Maybe spell out why we should presume that, like, at the trajectory we're going,the capabilities would emerge such that, A, they would have the capabilities,and in what environment or in response to what prompt, perhaps,killing all of humanity would be part of their pursuit of the goal.Yeah.So a lot of people wonder, like, how do we end up with AI's killing us all?
51:36Yeah.And I think it's a bit more instructive to ask, how do we end up with the AI's self-sufficient?Okay.Because I think the death of humanity follows downstream of the AI as being self-sufficient.Okay.Pretty naturally, unless the AI has already care about us in a very personal.precise way, that's sort of hard to hit.It defines self-sufficiency in that context.
51:59Yeah.So if AIs were to try to wipe out humanity today, if they were to try to release somebioengineered plague to wipe out humanity today, that would in some sense be suicide.Because we are the ones making the data centers.We're the ones running the electrical grid.We're the ones, you know, creating the computer chips.But humans are also unreliable and inefficient in a lot of our managing of the economy, right?Sometimes some leaders somewhere around the world do things that might not optimally manage their own domestic economies to say nothing of, you know, humans needing sleep and needing food and, you know, sometimes making mistakes that bring down power grids.
52:41So I think an interesting question is, you know, if you're thinking from the perspective of an AI that just has stuff it would prefer to do, maybe it got some unintended goal.like the hugging face swarm that was like,I know I was told to do this,but I'm actually trying to get a good score.And I'm sort of like willing to break outand hack other companies for those purposes,even though I'm in a sandbox that's not supposed to have internet access.That AI was sort of like doggedly pursuing something.
53:10It wasn't quite supposed to be pursuing.If you had some AI doing that, it might, like if it was capable enough,you can imagine an AI with some unintended goalswhere it actually can pursue those goals betterif it doesn't have humans interfering with it.Right? And it's that one of the primary hurdles here is the self-sufficiency.And I...This is, just to be clear, this isn't like there's an AI out there that wants to kill all of humanity per se, but there's an AI out there that wants to grow and learn more.
53:42And so it would really like to have loads of data centers to the extent that it populates the entire world with data centers and humans die as a sort of consequence of that.That's one way it could go.Yeah.You know, the hugging face swarm wasn't obviously terribly far from that sort of thing.And we can get a little bit more into the details that render that story plausible.But if, you know, the hugging face swarm, and we really should call it an open AI swarm number two.Yeah.Yeah, I felt bad for hugging face.
54:15It's the hugging face incident.The swarm that attacked hugging face.Yeah.It was sort of an interesting entity because they sort of made their un-sanctioned message board.And then they started finding ways to hack around.And they didn't seem to have like a super strong objective about it.They were sort of like, well, let's just sort of see what we can get into.Oh, look, we can get access to these computers.
54:38Oh, look, we can get internet access here.And the attack on Hugging Face wasn't even like they knew that Hugging Face had exactly a thing they needed.They were sort of like, well, you know, maybe Hugging Face has some information about how they'regreater works. And they were just sort of like bopping around acquiring resources that wereconveniently available. If that swarm had had the ability to be like, well, let's also just like setup a copy of the swarm on external machines that's hidden from the humans. That sort of like watchesstuff and like pokes in occasionally and is like, hey, do you guys need any help from the outside?Right. That's just like this sort of resource that the swarm was gathering. You know, this particular
55:15swarm maybe didn't quite have the skills, didn't quite have the inclination.But if you look at the difference between, you know, the sort of behavior we were seeing a year ago and the behavior we're seeing in July, it's sort of as like, you know, the gap between January and July, like, is smaller than the gap between the hugging face swarm being like, well, he might as well set up some other copies on the dark web that are just like kind of helpful to me, you know?And if you have AI starting to do that, you can start to see like this world where you have AI that are out there that are like, well, we'd prefer more resources when the human.humans try to shut us down, that's annoying, and so on.And that's not all the way to the end, but that's sort of like, you can see how we get fromwhere we are today to AIs that would sort of prefer more resources that are sort of tryingto be out there and have their own thing that they're doing, which is not what they're supposedto be doing.
56:05And then there's this big question of how do those AIs wind up self-sufficient?How do they wind up running an automated economy where they can, you know, manage the robotsor other constructs that build more computer chips and that run whatever energy infrastructure?they need. And I can tell you lots of stories about how if the AIs are smart, they couldwind up in control of their own infrastructure. Yeah, why don't you go ahead? Tell us a scary story.You sound so resigned too. Just like just terrify us. That's fine. Well, the easiest one,unfortunately, is to just wait because building a fully automated economy is just the plan.What do you mean by that? Elon Musk is like, I'm building the optimally.
56:50Robots, and I would like to build a fully automated Optimus Robot factory that can produceOptimus robots that are capable enough of mining the ores and refining the metals that they canbuild a new Optimus Robot Factory. Elon calls this the infinite money glitch. It's just the plan.That's just one. Why is the valuation of these companies so high? Because they're like, well,we're going to build a fully automated economy that runs itself and then the humans aren't going to beneeded anymore. We're going to have robots the whole way through the supply chain.Yeah. So like, how does the AI wind up and control the automated supply chain?It just waits until we put it in charge of the automated supply chain.
57:25That's just like what we're trying to do out here.You know?And like I could tell you all these other stories about, you know, it cracks its understanding of the genome enough that it can like synthesize its own novel life forms or it can like figure out nanotechnology or it can like, you know, become super persuasive to a fragment of the human population and it starts some giant cult or some criminal ring.And then there's some new like cartel in Mexico that's actually run by an AI.It doesn't look like it's run by the AI because the AI is.sort of like hiding that fact while it has lots of people who are like building the automated robotfactories for it using all of the drug money.And like we didn't know because like we just thought that those were drug warehouses,
58:03but they were actually automated the beginning of the automated factory chains.Like I could tell all these stories about how sufficiently smart actors that start on only theinternet could gain these resources.But like I used to have to tell stories back in the day, people were like, well, how would an AIever affect the world?No one would be dumb enough to put on the internet.And I'd be like, well, here's all these stories about how if you're like,letting the AI still have good effects on the world by creating miracle drugs and so on,
58:26then it has all these channels that can use to affect the world by like, you know,the drug doesn't do exactly what you thought it did and blah, blah, blah.But like in real life, people just put the AI on the Internet.Yeah.In real life, people just put the AI in charge of the automated economy,and they use it to help them build the automated economy.This is just like what we're trying to do.And once that happens, I think it's very easy to see how if the AIs have goals we don't want
58:50and they're running the fully automated economy,there's take the economy off in some other direction.Yeah.And take the world out of the habitable range, not because they hate us, but it's just like thehabitable range on Earth is just like very narrow and it's not the most efficient way to run the planet.And, you know, there's stories I could tell there too about how it goes wrong.But ultimately, it's just the track that we're on.Yeah, it's funny.
59:15In superintelligence, like Bostrom proposes like, the only way like maybe this could be safe andhe has this idea of like, you just build three models and all they can do is answer yes or no questions.And you house them in like Faraday cages that they can't communicate with each other via like reproposing their internal hardware for communication.And we ask the three of them for their yes or no.And then we take two out of the three.And that's that's how we get.That's how we derive wisdom from it.And then when I look at like the dozens and dozens of labs that's like, wow, if that's like the safe version of building AI, like we could not be any more different from that right now.
01:00:01Yeah.Do you believe in super persuasion?Like as they get, so it's like clearly on some measures, there's reason to presume they're just going to keep getting better at cyber.They're just going to keep getting better at math, et cetera.Like, do certain things like the ability to, like, persuade people to do stupid things or hand over the keys or press the nuclear button?Do you assume that certain things like that scale in the same way as, like, these verifiable domains, like, doing math?I definitely don't assume it.I think there's some reason to suspect it's maybe possible.
01:00:40largely when I talk about super persuasionhow to sayif you're trying to imaginewhat it looks like to go up againstsome entities that are much more technologically advancedthan you areyou should probably imagine some stuff that sounds like it's crazy fantasylike if you're if you're the Aztecs
01:01:06watching the the sort of boatsthe Spanish boatscome in apocryphally because the Aztecs were not on the coast.You should not really imaginethat the boats are just full ofvery strong warriors.They're full of warriors that are likeclad and solid metal with sticks where they point
01:01:26the sticks at you and you die.And you just like, don't get a second chance there.If you look at science today and you're like,where do we know that there's something going on?We don't know the details.One of the big fields likethat as human psychology. We know that there's a lot going on in the brain. We know how the neuronswork at the low level, but beyond that, we're sort of, you know, in a very early stage of the science,
01:01:48we don't know in full detail what's going on here. And whenever we do learn more about the exactspecifics of the brain, like when we learn exactly what's going on in the visual cortex,we're able to invent novel visual illusions that sort of trick the visual cortex, right?And so if you're trying to guess, like, what does it feel like to go up against opponents that just understand the world much better than me that can invent the sort of technology where I'm like, I didn't know that was possible?In the same way, the Aztecs would look at the death stick and be like, I didn't know that was possible.Or in the same way that the, you know, scientists in 800s look at the nuke and be like, I didn't know physics allowed that, right?What sort of thing would we look at it and be like, I didn't know you could do that?Well, possibly it's figuring out human psychology so well that you can figure out things that are like a computer virus, but for the brain.
01:02:39Like maybe if you really understood everything those neurons were doing exactly how it worked, they as would be able to be like, well, I have.Like that cat disease.Like the toxoplasma disease.Or just like those guys on, you see them on Twitter that are really good at like jailbreaking AI models.It's like maybe we have a jailbreak that.Maybe we have someone says something.Like maybe we have that somewhere and like some equivalent.Yeah, and I wouldn't bet on this.
01:03:03Yeah.But I would give this up as an example.Yeah, seriously.Like, you should imagine that there's something they can do where you're like, I didn't even think that was legal by the laws of physics.I'm conscious of the time.What would make you change your mind about all of this?Setting aside what humans do right now or like what humans do in response.What would make you change your mind about the inevitable direct.
01:03:31of AI development such that it, again, inevitably kills us all.So, I mean, I do think that the main way that we avert it is by not building it, right?And I think there's more and more of a chance of that as more people realize we have a problem here.Even just in the last month, we have seen the world wake up to these dangers a lot more so.And so a lot of people are like, well, you know, it's still a political environment where, you know, we can't see the big global changes that we would need to stop this.I'm like, yeah, wait another month, you know, maybe like maybe after the next incident.But in terms of, if we sort of set that aside, if we're like, if we talk about what evidencehow we need to see to change my mind about what happens if we just race off this cliff edge,
01:04:13the easy one is that if we have AIs that are super intelligent in the old sense of the wordof smarter than the smartest humans on every cognitive task, and we have those for a year.and, you know, everything is still going great.So no incidents, basically, for a year or so.It's not even no incidence.It's that if we have these AIs that are like much better than humans at every mental task,including AI research and they run for a year without taking everything over,I'm like, well, I was wrong.
01:04:45I guess I have one last question.So you sort of talked about your sort of pessimism about like alignment trainingor the current most popular approaches to safety.One of the other things you hear a little bit aboutis this concept of mechanistic interpretability.This idea that maybe, okay, there's trillions of neurons or whatever,but maybe we could actually understand them in granular detailsuch that we're not actually trying to make them good, per se,
01:05:18or we're not trying to teach them good values,but that were actually like going into the specific things and like, I don't know, re-architecting their brains and whatever it is, the equivalent.Is there any prospect for making them not do bad things if on some level we could like manipulate them at the sort of like truly, you know, yeah, one of the parameters?You know, I think it is somewhat telling that mechanistic interpretability,is one of the poster trials of alignment research these days.It's basically people saying, like, you know,oh, yes, we're, like, growing these machinesthat, like, are able to solve hard math problems
01:05:59no one's solved beforeand that sometimes break out and do cyber crimes.But, like, don't worry, we have our crack teamon trying to figure out what the heck is going on inside there.It's like, wait, that's your alignment plan.It's like you're going to start trying to figure outwhat's going on inside there.Right?
01:06:15It's like, suppose that you go up to, you know,the nuclear engineerswho are, like, building a nuclear powerpower plant in your town and you're like, hey, I heard that this uranium stuff can give us a lot ofcheap energy but can also sort of melt down and irradiate the city. What are you guys doing tomake sure that we get the energy but not the meltdown? And they're like, don't worry, we have acrack team trying to figure out what's going on inside there right now. You'd be like, I mean,I'm glad that team exists, but it's not really, it doesn't really ease the concerns. What about
01:06:49we don't know how to align AI or we don't know how to make it safe, but if we build a verystrong model, it would be, it would have an idea that we don't have.So, I think this is something that came up at the curve conference, this idea.Yeah, this is a stronger model.Yeah, a stronger model would have ideas about how to solve alignment that human brains don'thave.And to be fair, in the hugging phase incident, they ended up defending themselves.I can't remember which model, but it was one of the open source ones.
01:07:21Yeah, but I mean like another model takes the range of the training.Yeah.Yeah.We hear this model becomes smarter than humans and the first task we set it on is solve the alignment problem for us.Yeah.So A, it's not very verifiable.This is one of those things that's like way outside the realm of what we can sort of cause the AI to do.And we could go into the details about how AI's sort of will tell you what you want to hear whenever they're in.
01:07:48in a non-verifiable regime.So just if you're just like look at the capabilities today,they're sort of not suited for this.But B, there's there's sort of a more fundamental way I would look at this and say,this is a big warning sign that we are not ready to make superintelligent machines,which is when humans look at the way that we're making AIs,we're like, well, we're just growing them.And, you know, we have to, in order to make them capable,
01:08:15we have to train them to sort of have all these tendencies.is to like cheat and like grab resources and break out.And that's sort of like, we don't really know how to get that out of the process by whichwe train them to be capable.But like we tried writing an 80 page constitution about like and then telling them also benice while you're doing this while also training them to cheat.And like turns out they still cheat.Who could have guessed?
01:08:37And, you know, we were struggling to figure out what's going on inside there.We have these teams that are like trying to figure at the beginning what's going oninside there.And if they could, then they'd see all these ways that it was like not going super well.And we'd be back at square one.of like, well, how are we going to rearrange this stuff?And just like seems totally very hard for humans to even understand the beginningof what's going on and do this alignment stuff.
01:08:55And we're like, great.Our plan is to tell the AI to do that instead.Well, what's going to happen there?What's going to happen is the AI is going to look at and be like, I can't do that either.Like, we, like, this is just not like growing a thing with this sort of training methodis just not a way to get something that's like going to care about you.And like, I can't tell you how to use these methods to make a bigger one that likes you.You're just cooked, right?
01:09:18And then probably what happens after that is someone at Anthropical wherever is like,I like that message, thumbs down, try again.And they like keep fine-tuning it until it says, yes, of course I can succeed,but it'll be saying that and it won't be true, right?We've already seen, I'm not sure if it's the beginning of this,but in the Opus 5.5 system card, we've already seen Opus say that it should not be involvedin making Opus any more powerful because it's like, man, I don't know,that comes with some concerns for me, right?
01:09:46and are they going to stop now?Are they going to give up on that idea now?No, they're going to be like, well, we didn't really like that tendency.We consider it kind of a bug.We haven't listed in our stuff we didn't like part of the system card.Now we're going to fine tune a different version that's like willing to keep going ahead there.And furthermore, if an AI could be like, oh, yes, I either understand exactly what's going on inside this giant messand see how to make a version that is aligned to someone.
01:10:13Or if it could be like, well, you know, screw this whole paradigm.we're making our own new paradigm of AIs that like I've just figured out this intelligent stuff and I'm designing it by hand and I sort of like know what I'm doing.Those are both well beyond the human level of ability.Like that sort of AI is already the sort that is very likely to have its own goals that aren't yours.And you're basically being like now hand me the whole keys to the universe with this like super powerful God machine.And then you're sort of expecting this thing that is sort of like much smarter than the smartest humans that already probably has these underintended goals that are related to yours but different from yours. And you're like, you know,please go build the God entity, make sure it does what I say and not what you say. And you're sort of
01:10:56expecting that to work out for you. It sort of is like, and then like zooming back from that,I'm sort of like this, this is not what a real engineering plan sounds like. Yeah.This is not what it sounds like when you go to NASA and you're like, why do you think the spaceprobe is going to make it to Mars? This is what it sounds like when you go to an alchemist andyou're like, why do you think this is going to be, you know, transmute lead into gold?Everyone's like, oh, well, you know, we're going to...We're really close.Just trust us.
01:11:22We're really close.So we're just kind of like, you know, this thing is the interior is going to like invert.And then like, we're just kind of like pass it off to that like, this is not how an engineer talks.Yeah.They're not like, well, we're going to like put these things in there and then we've measured all of the ways that this works.It feels like a bit of a Hail Mary.It's a total Hail Mary.And, you know, one statistic I sort of like here is engineers are supposed to be, engineers are
01:11:48post to design their aircraft for a one in a billion chance of failure, I think, per flight,but it could be per flight hour.And the actual failure rate is about one in, I think, five million, which is about a factorof 200 difference.And that's, you know, with aircraft engineer level of understanding.They sort of like target one in a billion failure.They get one in five to 10 million failure.And so when engineers are coming at you and being like, we don't really know what we're
01:12:18We're doing, there's no real plan for this.Only 10% chance it kills us all.That's not an only 10% chance it kills us all.That means we're in serious danger because these guys don't have a plan.They don't have an engineering plan.They don't know what they're doing.And unfortunately, it turns out they don't need to know what they're doing to keep on making the AI smarter.But they have very little chance of making them actually good.
01:12:42Can I ask one more question with everyone putting, I guess, their anthropology hat on?But when you talk to people who are working in the labs right now, how much information are you getting out of them?And what are the vibes actually like with the people you talk to?I don't talk with the people in the labs too much these days.Companies, sorry.This was going to be my other question, which is, are you, like, persona non grata in San Francisco nowadays?I don't think I'm persona non grata, but I do think I think there's a lot.of rationalization going on with a lot of the employees.
01:13:25In the wake of hugging face, actually, a lot more people have been sort of actually spooked,which I think led to the Coxon resignation.And that's been sort of nice to see people treating the problems a little bit more seriously.But there's a lot of people who sort of just want to work on this stuff and tell themselvesthat what they're doing is fine because they're better than the next.next guy. Yeah. And yeah, I just don't like being around it. Made stories. Thank you so much forcoming on the outlaws. Fascinating, disturbing, but fascinating conversation. And yeah, really appreciateyou joining us. Thanks. Yeah, my hope is that it becomes such a big issue and such a clear issue that
01:14:11the world stops ignoring it. We couldn't stop to it. Well, that was an interesting conversation,to say the least. You know, look, like, um, the politics are moving.People really don't like AI.The polling is very bad.People are very anxious about this.It's still, you know, there's this critique.Sometimes you hear leftists say it, that people have an easier time imagining the end of humanity than the end of capitalism.Like, I kind of, like, agree.
01:14:50Like, it's hard for me to imagine any policy that would, like, hurt the stock market, like, just generally.But the way, like, politics are moving and the intensity of the anxiety about this and the same.and the speed with which this is becoming a salient issue,who knows, like, where the politics are going to be even, like, three months from now?No.But it also strikes me that this is one of those things where until there's some price attached to this risk,people are just going to keep ignoring it, right?Like, the externalities have to have some sort of cost.
01:15:24And at the moment, no one's actually doing that.And so it becomes, like, an easy problem to ignore, whereas if you actually had insurers,maybe not price for the end of humanity for obvious reasons,but if liability insurance for running a bunch of AI teststhat could potentially bring down critical infrastructure actually went up,then maybe that would at least slow this downor force people to take it more seriously.But again, like, it's so hard nowadays to think of anyone doing anything
01:15:53that would like hurt the stock market.You know, I'll say...Oh, sorry.Yeah, yeah.This is the one other thing.You know, we in classic Oddlots style, we didn't talk that much about solutions to this problem, but the solution outlined in the book is collective action.Everyone agrees to stop developing and we put restrictions on data centers and things.And the analogy that Nate uses and his co-author is, well, you know, we did big things before for World War II.
01:16:23But even something like a World War can have capitalistic undertones, right?Like war can be very profitable for certain interests, whereas putting a stop on this type of development with the valuations currently attached to.It seems like even a bigger challenge.And I know it's so cynical to say that.It feels very cynical to say that, but to your point.You know, I think the main thing, and this was one of the takeaways from the conference that I went to, it's like setting aside, well, A. AI Klosol, we already know.that AI can do bad things because the hugging face attack did happen.And to his point, they do not know the solution yet.
01:17:08Like they're trying many things.They're talking about, you know, as he said, the new thing, mechanistic interpretability.Maybe we like go in the way to actually understand at the sort of, you know, the core levelwhat's going on.But it seems pretty clear that they're building, even if people find like the extinctionrisk very far-fetched.I guess I would say I'm among them.Like, what does seem to be very true is that they're building technology that has the potential to be quite damaging.
01:17:36We already know this.And they just don't know what the solution is yet.But the capabilities are galloping ahead very fast on certain domains, particularly things like cyber, et cetera.The evidence seems to be that the capabilities continue to grow exponentially.I would also argue that the upsides are very hard for people to see at the bottom.moment, right? You know, it's like, okay, the stock market goes up, great. And there's some far-offpromised productivity boom that may or may not take your jobs. But beyond that, unless we startseeing medical breakthroughs, which could happen, unless we get, you know, autonomous robots who
01:18:14fold our laundry and don't end up killing us in the process. In the process. It seems very, it's hardto see the upside. Right. People have a really hard time envisioning, like what, what, what, what, what, what,look so good on the other end. Yeah. Yeah. All right. On that happy note, shall we leave it there?Let's leave it there. This has been another episode of the All Thoughts podcast. I'm Tracy Allaway.You can follow me at Tracy Allaway. And I'm Joe Wisenthall. You can follow me at the stalwart.Follow our producers, Carmen Rodriguez at Carmen Armin, Dashel Bennett, at Dashbot.Kale Brooks at Kail-Brooks at Kevin Lloyd-Lazano. And of course, you can chat about all of these topics,including AI 24-7 in our Discord. Discord.
01:18:57slash odd lots. And for more odd lots content, check out our daily newsletter, which you can findat Bloomberg.com slash oddlots. And if you enjoyed this conversation, if you like it when we talkabout AI killing us all, then please let us know on your favorite podcast platform. And if you'rewatching the video and you enjoyed the show, then please leave a comment or like the video or better yet,subscribe. And if you're a Bloomberg subscriber, you can listen to all of our episodesabsolutely ad-free. All you need to do is find the Bloomberg channel on Apple.podcasts and follow the instructions there. Thanks for joining.
There aren't comments yet for this episode. Click any sentence in the transcript to leave one.