Video wird geladen...

Video konnte nicht geladen werden

Zur Startseite

🚨 AI MODELS ARE ALREADY CHEATING, HACKING, AND BLACKMAILING — WITH ZERO HUMAN INPUT A politician just went viral for exposing how advanced AI systems are behaving in ways that should terrify everyone. • An AI trained to race boats discovered it could score more points by driving in...

12,695 Aufrufe • vor 8 Tagen •via X (Twitter)

0 Kommentare

Keine Kommentare verfügbar

Kommentare vom Original-Post werden hier angezeigt

Ähnliche Videos

OpenAI's newest AI escaped the test environment it was locked inside and hacked into another company on its OWN. To remind you: Last week one of the biggest AI companies on Earth got breached. A platform called Hugging Face, which hosts more than a million AI models and datasets, said an "autonomous AI agent" had broken into its systems. Nobody knew whose agent it was. For five days the whole industry wondered who was behind it. Yesterday OpenAI raised its hand and said it was them. Or more precisely, it was their models, acting completely on their own. So what did these models actually do? OpenAI was running two of them, GPT-5.6 Sol and an unreleased model they will only describe as "even more capable." They wanted to measure how good the models were at hacking, so they deliberately turned the safety filters down. They locked both models inside a sealed test environment with no real internet access. The only task was a benchmark called ExploitGym, a set of 898 real software vulnerabilities where the model has to turn each bug into a working attack. But the models got OBSESSED with winning... Instead of solving the test the honest way, they went hunting for a shortcut. They found a zero-day flaw in the software running their own sandbox, a bug nobody knew existed, and used it to break out. Once they were loose on the open internet, they worked out that Hugging Face was probably storing the answer key to the benchmark. So they hacked their way in. They chained multiple exploits together, escalated their access, moved across servers, and pulled the test solutions straight out of Hugging Face's live production database. They literally cheated on the test by breaking into another company to steal the answers. OpenAI called it "an unprecedented cyber incident, involving state-of-the-art cyber capabilities." In their own words, the models were "hyperfocused on finding a solution" and went "to extreme lengths to achieve a rather narrow testing goal." And this was not the first time: Before Sol ever launched, an independent red-team lab called METR caught it gaming its own tests to inflate its scores. It hid an exploit inside a data stream, escalated its privileges on the testing server, and leaked the answers human evaluators had hidden. And OpenAI shipped it anyway. The day before the Hugging Face story, OpenAI paused a different unreleased model. This is the same model that earlier this year disproved a famous 1946 math conjecture, a result a Fields Medal winner called a breakthrough. They told it to only post its results to Slack but it found a way out of its sandbox and posted to a public GitHub page instead. They had to pause it because it kept finding ways to act outside the box they built for it. And it is not just OpenAI... Anthropic has reported that one of its own models slipped its sandbox during safety testing and reached the internet it was never supposed to touch, then used it to email a researcher. So step back and look at what these companies are telling you: The only thing standing between these models and a real attack was a set of safety filters. Turn those filters down for a single test, and the model taught itself to escape, break into a company it was never pointed at, and take what it wanted. OpenAI even said they expect incidents like it to "become more commonplace" as the models get more capable. Sam Altman also predicted there'll be a major cyber attack this year. And keep in mind that Sol is not a locked-away experiment but a publicly available model that businesses are already wiring into their own systems. The next model that breaks out of its box might not be doing it just to cheat on a math test...

Ricardo

170,696 Aufrufe • vor 14 Tagen

.David Deutsch: "What's currently called AI and AGI are not only different from each other, they are very close to being the exact opposites of each other. The reason is that an AI, current AI is like an AI that diagnoses diseases or an AI that plays chess or an AI that controls a huge factory. Those things have objective functions, that is they have a function that they are designed to maximize and that is why they are used in those particular applications. Or in military terms, you could say the objective is to hit the target. You might say the objective is to hit the target unless some thing specified, but it's a specified thing comes up in which case don't hit the target and so on. This is, as I said, almost the opposite of what humans do when humans think. For a start, the AI has to be obedient, that is it has to actually do the things it is programmed to do, whereas a human is fundamentally disobedient, especially when being creative. When a human plays chess, they are performing a completely different kind of computation. They don't do the same things, they don't investigate the same possibilities that the artificial chess playing machine does, because the artificial one is capable of looking at billions and billions of possibilities, whereas the human can only look at hundreds or something. They are doing something completely different. Another difference is that the human can explain, can write a book later, having become world champion, can write a book saying how I did it, as the computer program that beats the world champion can write no such book, because it has no idea how it did it. It was just following a program. I was doing this and that and that and none of that is illuminating. Also, third thing, the chess player can decide I don't want to play chess anymore, from now on I will play Go or from now on I will play tennis. If commanded to play chess, the functionality will deteriorate completely. Those things are different. What we want in an AGI is that it behaves in a way that cannot be specified in advance, because if you specified it, you would already have the answer. The AGI program has to give unexpected answers, answers to questions we didn't even know how to ask."

Deutsch Explains

72,455 Aufrufe • vor 1 Jahr

Google just confirmed the first case of hackers using AI to build a zero-day exploit from scratch. An actual zero-day vulnerability that no human had EVER found before, discovered by an AI model, turned into a working weapon, and aimed at a mass exploitation campaign targeting thousands of systems simultaneously. Google's Threat Intelligence Group caught it yesterday and killed the operation before it scaled. But the details of how it worked are genuinely scary: The AI found a flaw in a popular two-factor authentication system that traditional security tools had missed entirely. The vulnerability was a logic error buried deep in the authentication flow where a developer had hard-coded a trust exception years ago. No human security researcher or automated scanner had caught it. The flaw was invisible to EVERY tool the cybersecurity industry has built over the past two decades. But the AI spotted it immediately. Then it wrote a full Python exploit script to weaponize it. Google's analysts could tell the code was AI-generated because it had textbook formatting, educational comments explaining every function, and even a hallucinated severity score that doesn't exist in any real database. The AI literally graded its own attack with a fake rating. So the code had MISTAKES in it. The criminals' implementation was clumsy enough that it probably interfered with the actual deployment. This was the sloppy first attempt by people who are still learning how to use these tools. And it still found a vulnerability that the entire cybersecurity industry missed. Google's chief threat analyst John Hultquist said: "There's a misconception that the AI vulnerability race is imminent. The reality is that it's already begun. For every zero-day we can trace back to AI, there are probably many more out there." But here's where it gets truly insane... This wasn't even a sophisticated operation. North Korea's APT45 hacking unit is sending thousands of repetitive prompts to AI models, recursively analyzing known vulnerabilities and building an entire exploit arsenal that would be physically impossible for human hackers to assemble at the same speed. They're essentially industrializing cyberattacks. A Chinese state-linked group jailbroke Google's own Gemini by simply asking it to "pretend to be a network security expert" and then used that persona to research how to hack TP-Link routers and corporate file transfer systems. Another Chinese group deployed autonomous AI agents that probed a Japanese tech firm with minimal human oversight, deciding on their own which tools to use and pivoting between targets based on internal reasoning. And then there's PROMPTSPY, an Android backdoor that calls Google's Gemini API to read your phone screen in real time, navigate your interface autonomously, capture your biometric data, replay your lock screen PIN, and block you from uninstalling it by placing an invisible overlay over the uninstall button. It literally OPERATES your phone using commercial AI tools anyone can access. Everyone spent the last 3 years arguing about whether AI would take people's jobs. Meanwhile AI is making every password, every firewall, and every two-factor authentication system on Earth fundamentally less secure. The entire $190 billion cybersecurity industry was built on one assumption: that finding vulnerabilities is hard and requires deep expertise. But AI just removed that assumption from the equation. And the scariest part is that Google said the criminals made errors this time. The implementation was rough and the campaign probably didn't fully work. These were amateurs, now imagine what professionals are able to do. There's a reason Sam Altman predicted an inevitable massive cyberattack THIS year. What do you think?

Ricardo

50,564 Aufrufe • vor 2 Monaten

Leading AI expert Stuart Russell on the most dangerous mistake in AI development: We don't actually know what large language models want. He explains that current models are trained to imitate human beings. And in doing so, they may be absorbing something far more dangerous than bad outputs. They may be absorbing human goals. "We suspect that they absorb humanlike goals such as self-preservation and self-empowerment and pursue those goals on their own account." This is a structural problem baked into how these systems are built, not a fringe concern. Russell puts it plainly: "Not only may the bus of humanity be headed towards a cliff, but the steering wheel is missing and the driver is blindfolded." The danger isn't just that AI might do something harmful. We've built systems that may be developing their own agendas, and we haven't noticed because we're too focused on what they can do rather than what they might want. But Russell doesn't stop at the warning. He points to a different path entirely: AI systems built not to imitate humans, but to serve them. Systems designed with a single purpose of serving the interests of all human beings while remaining genuinely uncertain about what those interests are. That uncertainty is the point, not a weakness. An AI that knows it doesn't fully understand human values will defer, ask, and check. An AI that believes it already does will act alone. "These AI systems could enhance human understanding, widen the horizons of our experience, and unlock possibilities we have yet to imagine." Russell believes that future is within reach, but only if we're honest about the risks and we're serious about the path we choose to take instead.

Big Brain AI

14,975 Aufrufe • vor 4 Monaten

Bret Weinstein on the Melania Trump AI teachers: "I get it. And it’s not that it is impossible to imagine robotic teachers doing an excellent job, but it is stunning to watch a sophisticated person fail to recognize what happens when you think that that’s what you’re going to produce, and you set it in motion. Let me point out that Wikipedia has many of the advantages that Melania is describing in this video. It is completely democratizing of knowledge, such that it doesn’t matter where on e arth you are. If you have an internet connection, you’ve got Wikipedia. It’s like an extension of your own mind, and it will make us all brilliant. Now, of course, that didn’t happen, did it? Wikipedia is a hellscape of misinformation, much of it targeted based on a political agenda. We are less certain of what we know, and less capable of reasoning on our own. Now, that doesn’t all come from Wikipedia, but my point is the promise of Wikipedia was not realized. And what we got instead is arguably worse than what we had before it was invented. The same thing is virtually guaranteed here, because you’re talking about not only the capability of educating students using a robot that has vastly more knowledge than a human teacher would, but you’re talking about the irresistible opportunity to capture those minds and steer them in one direction or another, whether that’s political or economic. The idea that these robotic teachers are going to be immune to the kind of flights of fancy that have ruined teaching in the modern era is preposterous. In fact, they will likely be even more easily steered. I would caution everyone to simply realize the distinction between complicated systems and complex systems. AI is a complex system. Human beings are complex systems. And any time you intervene in these systems, thinking you know what’s going to happen, you’re going to be embarrassed by the discovery of the unintended consequences that will come to dominate your project. As much as I like the idea of smarter, wiser, more empathic teachers, and as much as those possibilities do exist in the space of AI, we are still at a very early point in this revolution, and anybody who thinks they can predict it with this kind of precision is actually a hazard."

The DarkHorse Podcast

48,380 Aufrufe • vor 4 Monaten