> I think people are focusing too much on the attacks. Imo those are a sideshow. It's even questionable whether they can be called attacks when you're asking i

> I think people are focusing too much on the attacks. Imo those are a sideshow. It's even questionable whether they can be called attacks when you're asking it to recognize an image and it recognizes something that's on the image, just not in the mode you expected or the object you assumed was of interest. Yeah, as expected, https://twitter.com/NoaNabeshima/status/1368662246885265409 https://twitter.com/NoaNabeshima/status/1368662246885265409 https://youtu.be/Rk3MBx20z24?t=35 https://youtu.be/Rk3MBx20z24?t=35 it goes away with a more sensible set of inputs. CLIP just turns out to be more like GPT-3 in that you don't input 'classes', you do 'prompt programming'. Looking at the relative activation of 'ipod' is just wrong; you are asking a stupid question and acting surprised when you get a reasonable answer which happened to not telepathically read your mind.