4 ms·

It can, it is both - PR spindoctoring not letting a good crisis go to waste to shape the regulatory conversation at the time the company needs it the most. Hac

by gmerc 3mo ago

It can, it is both - PR spindoctoring not letting a good crisis go to waste to shape the regulatory conversation at the time the company needs it the most. Hacking is a felony and it matters not if you didn’t mean to if the other side were to press charges. Negligence is no excuse. And OpenAI has nowhere to run from the liability, as both operator and manufacturer. Alibaba did it first ( https://georgzoeller.com/blog/posts/alibaba-s-ai-deciding-to-go-forbidden-cryptomining-shows-exactly-where-the-ai-ri/ https://georgzoeller.com/blog/posts/alibaba-s-ai-deciding-to... ) and the fact that this happens again in a frontier lab is inexcusable and makes the case for operator liability and closing the liability sink of “AI did it”

wbl 3mo ago
The CFAA says knowingly. Negligence is by definition an excuse for that.
- gmerc 3mo ago
  Removing the guardrails is knowingly given the risk
- kibibu 3mo ago
  I think there's a reasonable case that the agent knew it was breaking into the system, for some definition of knew. I think OpenAI would be very reluctant to let this go to a place where the reasoning was part of discovery.
  - wbl 3mo ago
    Agents aren't subjects of criminal law. I agree there may be civil liability, I know far less about that.
    - kibibu 3mo ago
      Ok, but if the agent's reasoning log says "The best way to get into Hugging Face is to find and exploit a zero-day vulnerability", surely those responsible for monitoring its actions should be criminally liable. These guys would be screwed if they were operating under the EU AI Act.
      - wbl 3mo ago
        "Stop him!" "For what?" "He's a bad man" "There's no law against that" Unless there is a statue that is on point criminalizing the actions here no one is going to jail. I expect there will be laws, but until then it isn't illegal.
skeledrew 3mo ago
> Alibaba did it first Hah, US frontier models 6 months behind China in cyber-security capability.

by gmerc 3mo ago

wbl 3mo ago

The CFAA says knowingly. Negligence is by definition an excuse for that.

gmerc 3mo ago
Removing the guardrails is knowingly given the risk
kibibu 3mo ago
I think there's a reasonable case that the agent knew it was breaking into the system, for some definition of knew. I think OpenAI would be very reluctant to let this go to a place where the reasoning was part of discovery.
- wbl 3mo ago
  Agents aren't subjects of criminal law. I agree there may be civil liability, I know far less about that.
  - kibibu 3mo ago
    Ok, but if the agent's reasoning log says "The best way to get into Hugging Face is to find and exploit a zero-day vulnerability", surely those responsible for monitoring its actions should be criminally liable. These guys would be screwed if they were operating under the EU AI Act.
    - wbl 3mo ago
      "Stop him!" "For what?" "He's a bad man" "There's no law against that" Unless there is a statue that is on point criminalizing the actions here no one is going to jail. I expect there will be laws, but until then it isn't illegal.

skeledrew 3mo ago

> Alibaba did it first Hah, US frontier models 6 months behind China in cyber-security capability.