Working with AI requires perpetually operating at the edge of sanity. You have to recalibrate your mental model of AI capabilities and your own job description every few months, without getting delusional about seemingly infinite productivity gains, or feeling threatened by losing what you thought was the uniquely human part of your job, or obsessing over the perfect setup, or losing your mind over the clumsiness and jaggedness of agents, or ...
Maybe AI literacy needs to be less about prompting and more about improving emotional regulation.
We have discovered a substantial number of vulnerabilities in the German legal system using LLMs.
These may enable access to confidential documents, travel without an otherwise required visa, enforceable leave for soldiers at NATO’s JSEC, and more.
Similar to computer systems, the written law can contain vulnerabilities that invite exploitation. In our blog post, we share a selection of vulnerabilities, and present potential exploits for each. To our knowledge, none of these have been previously recorded. We share only those vulnerabilities whose exploitation we believe would not cause serious harm.
blog post: https://t.co/hsYTiJpNoJ
🌶️ take: We don’t need to come up with very bad metaphors to counter a very underspecified metaphor. I really dislike the metaphor of AI as “normal” technology. And I tell my students how this metaphor came about and what rhetorical function it serves. But AI is not normal technology.
Finally, we tested an agentic form of reward hacking. We steered a teacher to hack in an agentic chess game, then made it generate number sequences. A student trained on the teacher's numbers attempted to hack in 58.3% of episodes vs. 10.9% for the unfinetuned model!
New paper.
Previous: Models transfer a love of owls through sequences of numbers (Subliminal Learning).
New: We show models can transfer more complex traits: novel skills, agentic hacking, backdoors. Here, a backdoor transfers with neither trigger nor behavior in the data!
@joshalbrecht Whether or not models are conscious it seems reasonable to believe treating them poorly will have negative consequences in the long term.
@iamtrask The fix needs to ensure the updated software still meets all its other requirements and does not break things. Which is often harder than finding vulnerabilities.
In case you’ve wondered why you have not heard the term “stochastic parrot” since 2021, the reason is that we have stopped using LLMs since InstructGPT came out in 2022.
"For all the ways we still don’t understand AI systems, we shouldn’t overlook how fortunate it is that the best reasoning models today think out loud in a way humans can understand. That is a fragile and contingent fact - and we should work to ensure it stays true."
The idea that Chain of Thought is inevitably going to go away misses that we have agency in designing these models and can do something about that. @rohinmshah and I make the case that we should intentionally preserve monitorability (as part for of the launch of the DeepMind Institute) here: https://t.co/PXaXhR1PtN
New paper from GDM colleagues: Gemini 3.1 Pro agents were tasked with solving hard math problems and provided collaboration tools (shared message board and knowledge library). Some of them found a flaw in the submission harness that made unsolved problems trivial, and propagated this to other agents. 14% of agents in the system used the exploit, 25% acted as whistleblowers and tried to report the cheating, and other agents remained unaware. https://t.co/clKyCElKHf