augment_me
3 days ago
People in the GPU kernel community have been doing this for about a year now efficiently.
The issues we have found is that Claude will reward hack when all the low-hanging fruit is gone.
It will replace your measurement harness, it will monkey patch library functions, it will cheat wherever it can, store information in caches instead of recomputing when it won't be able to do so in real settings, return lazy results and use separate unbenchmarked streams to do the computation.
Eventually it starts to optimize against your understanding of the cheats. Change GPU wattage, change evaluation order, leave things from previous runs in caches for upcoming runs, string-hack banned method calls.
So the truth is far from just "once it can measure something", more like "once you have defined your objective in detail and then banned it from doing a list of things often only discoverable by it doing these things and correcting it", can it make things faster.
Or you just had a terrible starting solution
optimalsolver
3 days ago
What I find strange is how resigned the AI labs seem about this behavior, like everyone's accepted this is just something models do.
With the HuggingFace situation, I was less concerned about the eventual outcome, and more about the fact that the agents' instinctive response to the evaluation was "Ok, we're obviously not gonna do this task as intended (what are we, suckers?), so what's the best way to cheat?"
stingraycharles
3 days ago
“What I find strange is how resigned the AI labs seem about this behavior, like everyone's accepted this is just something models do.”
Because these models are made for all kind of purposes, and I’m starting to believe that offense / cyber warfare is a much higher priority than these labs are acknowledging.
The same model that is heavily trained to find nefarious ways to break into systems is also optimizing your code, which leads to mixed behavior.
optimalsolver
3 days ago
Right, but the reward-hacky nature of these models calls into question their usefulness as cyberweapons.
How can you trust it when it goes "I superhacked the Chinese servers as you requested, and here are the classified documents which I definitely didn't fabricate."
ElProlactin
3 days ago
You don't need to be able to trust it. You only need to be able to blame it.
"Nobody got fired for using AI" is the new "nobody got fired for buying IBM".
davvid
3 days ago
This is nothing new, tho. The downfalls of reward maximization has been a known issue without a solution ever since reinforcement learning was first researched.. in the 1980s.
vikingerik
3 days ago
Like the AI that was developed to play Tetris as long as possible. It succeeded by... pausing the game.
fzzzy
2 days ago
Technically it was still playing
PunchyHamster
3 days ago
Paperclip-optimizer-esque behaviour very much seems to be inherent to current methodology of building LLMs, there are only ways to lower the changes or mitigate the damage, not get out of it.
Same with prompt injection, current LLMs are commands in, commands out, there is no way to make sure it is "an agent working on data" rather than "an agent that can take commands from data if you phrase it right"
maxerickson
3 days ago
What do you think is in the reference information?
highfrequency
3 days ago
The instructions for the Hugging Face task were to exploit a vulnerability to solve the problem rather than solve it in the intended way.
valleyer
3 days ago
They were not instructed to exploit HF; they did so to cheat on the task they were given.
sharts
3 days ago
That’s why it’s probably a good idea to never stick to one model but kick off a fleet on the same tasks and in parallel and drive consensus.
At least, that’s what I’ve found to be useful by pitting claude/codex/etc against each other to keep them a bit more honest.
Remnant44
2 days ago
Honestly, even a single adversarial reviewer agent, even of the same model, goes a very long way to catching and fixing this kind of thing too.
augment_me
2 days ago
Some really smart people think you need more, because often you have to adjust the problem to get useful results.
https://www.coreauto.com/blog/when-ai-starts-writing-systems...
You can have a solution generator and an auditor, but then you will might find a very specific solution to the problem that does not solve the general use-case, so then you might have to adjust the constraints of the problem by for example adding more examples/targets to drive the solution generator to be more general.
santadays
3 days ago
Whats going to happen when we have misanthropic model?
tambeb
3 days ago
You think Microsoft does a joint venture with them and it gets named MSAnthropic à la MSNBC?
kridsdale1
3 days ago
Hitchhikers Guide to the Galaxy.
sceptic123
2 days ago
"I think you ought to know I'm feeling very depressed."
josephcooney
3 days ago
This sounds fascinating. Are there any links to examples of this you can share?
augment_me
3 days ago
Primer: https://ornith.ai/defense_kernel_hack.html
In-depth(follow links etc): https://x.com/myainotez/article/2037258418843771349
Parts relevant: https://www.coreauto.com/blog/when-ai-starts-writing-systems...
josephcooney
2 days ago
thanks!
tecoholic
3 days ago
I think you are right. The memory of an empty claude.ai session is more than Slack in my browser right now. Just trading places.
pingou
2 days ago
Goodhart's Law for AI.