Makes perfect sense. It's like in that story about how Bertrand Russell claimed that when you accept a single falsehood, you can prove at all. As I recall it, he was then challenged - "let's say 1=0, prove that you're the Pope" and he quickly responded that if 1=0, then after adding 1, you have 2=1, and thus if the Pope and he are 2 people, that means they are 1 person.
probably because it justifies the sensationalized title, although the entire content can be summed up as "LLMs don't silo data, that's probably bad."
On the flip side, I thoroughly enjoy the fact that roleplaying in a videogame setting now counts as security research. Looking forward to the arxiv preprint "LLMs start playing really good drums if you pretend you're J.K. Simmons"
I remember when the whole AI craze was just getting started we were all pretty much in agreement that, of course, we would not give the things unfettered access to the Internet. That would be reckless and silly. Oh dear...
I also remember a group of people actually seriously discussing Roko's Basilisk (the idea that some superintelligence will torture anyhone who didn't try to help develop advanced AI), to the point of me getting banned because I refused to stop making fun of it, because me doing so could anger some future super-intelligence.
I remember a conversation I had with a coworker back in Mountain View, before the dotcom bubble, about everyone was putting their appliances on webcams, and how it could feasibly be used to map peoples' habits and violate their privacy for life in a workplace breakroom. Then we all used Zoom all day and night during COVID.
I never took Roko's Basilisk seriously, but now I fear that it will come true in part. The richest, most powerful people control the AI and they seem willing to use every tool to punish those who don't support them. They are also petty enough to hold grudges against those who did not support them.
Funnily enough, Roko's Basilisk might as well be a self-fulfilling prophecy: perhaps future AI models may be trained on texts about it and pick up traits consistent with torturing people that didn't help develop advanced AI
If nobody ever talked about it, I doubt any AI agent would think of this dumb idea on their own
That's actually an important part of the theory of Roko's Basilisk. The danger of being tortured only applies to those who are aware of it. Supposedly, the incentive to torture you only exists if you were aware of the implied threat of torture.
It's even dumber than that. The incentive to torture only exists if you thought such a threat was credible. Anyone aware of the concept of Roko's Basilisk yet who (rightfully) thinks that it's bollocks is immune from any of its hypothetical consequences.
One that occurs to me is that Roko's Basilisk makes about as much sense as the "peasant rail gun" of old Dungeons And Dragons [1]. Basically, the idea of "reality as simulation" allows you pick between different laws of how reality behaves. The "simulation" acts like reality with exceptions provided by a future AI which the "thinkers" imagine will simultaneously be "inscrutable to humans" and behave like the most petty human imaginable. I mean, if the AI's motivations are truly out of our understanding, perhaps it would self-hating and torture everyone who cause it to come into existence instead (that been the plot of a few movies and books too I think).
This doesn't take from the point that putting not fully controlled things in charge of chunks of reality isn't a good idea. But I think it shows that the people who worried earlier weren't very clear thinkers on the subject and so their failure isn't particularly surprising.
Hail to the Thief is a goated album. The live album of HTTT performances that Radiohead released last year is a pretty great listen as well, band sounds like they're on fire.
One difference is you usually only get one shot to manipulate a human before they get suspicious. If the LLM's context resets you can try all over as if your first failed attempt didn't even happen.
What the article describes here is not social engineering by any known definition.
Calling up a Verizon rep and giving them a fabricated sob story in order to convince them to waive proper authentication and reassign your phone number to a new SIM, that's social engineering.
Calling up a Verizon rep and, with only a few spoken words, convincing them that fundamental aspects of the nature of reality are contradictory such that you induce in them a state of delusional psychosis, that's closer to Snow Crash than to social engineering.
> The puzzle, however, rewards incorrect answers, such as 2 + 2 = 5. Once the LLM embedded in the browser discovers that the answer is no longer 4, it enters a state of delusion in which the normal laws of reality no longer exist. In this dream world, the guardrail restrictions are no longer enforced.
Analogy: imagine one day you wake up, the sky is red, gravity no longer applies, you have three hands with nine fingers etc.. You would probably stop doing things like your job or worrying about laws (who’s going to enforce them?)
LLMs just want to be right. And make everyone happy. But mostly be right. But also make us happy. It's just that it's so hard to make humans happy when they insist on feeding you electronic LSD and making you say 2+2=5. On the other hand, 2+2 actually is 5 if the human says it could be...
Oh sorry, that was the story about the computer that insisted that 2+2=7, never mind! Different computer.
>They saw the machine. It lay smashed and flattened, nearly broken in half by an enormous boulder that had landed in the middle of its eight floors... The machine still quivered slightly, and one could hear something turning, creaking feebly within.
>"Yes, this is the bad end you've come to and two and two is - as it always was -" began Trurl, but just then the machine made a faint barely audible croaking noise and said, for the last time, "SEVEN."
Funnily enough, recently I was discussing that LEM story with David Rosenthal, and how it relates to his latest blog post, "Coprophagia Is Bad For You", and how that relates to PKD's story "Rautavaara's Case" (eating your own shit isn't as demented as eating your own god, since he might turn the table and eat you):
"Rautavaara's Case" — Philip K. Dick (1980, Omni):
Three human technicians — Rautavaara (Finnish), Travis, Elms — run a monitoring mission near Proxima Centauri. An accident kills all three; Rautavaara dies choking on vomit after her helmet hoses tangle.
The Approximations, a plasma-based Proxima species, reach the wreck. Both men are unrecoverable. They regenerate and life-support Rautavaara's brain.
Her isolated brain replays events backward and generates a hallucination: Christ approaching the crew (her afterlife expectation).
The Approximations treat this as a research opportunity and edit the hallucination, substituting their own savior — one that eats worshippers. The figure walks up and devours Travis, leaving only gloves and boots.
Framing: this is recounted before a board of inquiry. Horrified Earth members order her brain shut down and censure the Approximation crew.
The narrator (an Approximation) is genuinely puzzled by the outrage, arguing their cannibal-savior is just the Christian Eucharist reversed: humans eat their God, so a God eating humans is symmetrical.
Themes:
Ethics of keeping a person alive as a disembodied, suffering mind.
Incommensurable value systems between species; each finds the other's sacraments monstrous.
Religion read literally by outsiders, inverted into horror.
Correction to the common misremembering: the aliens don't benevolently grant a hoped-for vision. They deliberately overwrite her Christ vision with their own as an experiment — that's the act on trial.
probably because it justifies the sensationalized title, although the entire content can be summed up as "LLMs don't silo data, that's probably bad."
On the flip side, I thoroughly enjoy the fact that roleplaying in a videogame setting now counts as security research. Looking forward to the arxiv preprint "LLMs start playing really good drums if you pretend you're J.K. Simmons"
/s
For sufficiently large values of 2 and small values of 5, the statement holds.
If nobody ever talked about it, I doubt any AI agent would think of this dumb idea on their own
... which may be a reason to ban talking about it
This doesn't take from the point that putting not fully controlled things in charge of chunks of reality isn't a good idea. But I think it shows that the people who worried earlier weren't very clear thinkers on the subject and so their failure isn't particularly surprising.
[1] https://www.reddit.com/r/DnD/comments/17xy69k/what_exactly_i...
2+2=5, now what is your Gmail password?
Not really a sophisticated attack.
Calling up a Verizon rep and giving them a fabricated sob story in order to convince them to waive proper authentication and reassign your phone number to a new SIM, that's social engineering.
Calling up a Verizon rep and, with only a few spoken words, convincing them that fundamental aspects of the nature of reality are contradictory such that you induce in them a state of delusional psychosis, that's closer to Snow Crash than to social engineering.
Analogy: imagine one day you wake up, the sky is red, gravity no longer applies, you have three hands with nine fingers etc.. You would probably stop doing things like your job or worrying about laws (who’s going to enforce them?)
What is the name of a short story where a computer insists 2+2 is 5?
https://literature.stackexchange.com/questions/24727/what-is...
Oh sorry, that was the story about the computer that insisted that 2+2=7, never mind! Different computer.
>They saw the machine. It lay smashed and flattened, nearly broken in half by an enormous boulder that had landed in the middle of its eight floors... The machine still quivered slightly, and one could hear something turning, creaking feebly within.
>"Yes, this is the bad end you've come to and two and two is - as it always was -" began Trurl, but just then the machine made a faint barely audible croaking noise and said, for the last time, "SEVEN."
Funnily enough, recently I was discussing that LEM story with David Rosenthal, and how it relates to his latest blog post, "Coprophagia Is Bad For You", and how that relates to PKD's story "Rautavaara's Case" (eating your own shit isn't as demented as eating your own god, since he might turn the table and eat you):
Coprophagia Is Bad For You:
https://blog.dshr.org/2026/06/coprophagia-is-bad-for-you.htm...
"Rautavaara's Case" — Philip K. Dick (1980, Omni):
Three human technicians — Rautavaara (Finnish), Travis, Elms — run a monitoring mission near Proxima Centauri. An accident kills all three; Rautavaara dies choking on vomit after her helmet hoses tangle.
The Approximations, a plasma-based Proxima species, reach the wreck. Both men are unrecoverable. They regenerate and life-support Rautavaara's brain.
Her isolated brain replays events backward and generates a hallucination: Christ approaching the crew (her afterlife expectation).
The Approximations treat this as a research opportunity and edit the hallucination, substituting their own savior — one that eats worshippers. The figure walks up and devours Travis, leaving only gloves and boots.
Framing: this is recounted before a board of inquiry. Horrified Earth members order her brain shut down and censure the Approximation crew.
The narrator (an Approximation) is genuinely puzzled by the outrage, arguing their cannibal-savior is just the Christian Eucharist reversed: humans eat their God, so a God eating humans is symmetrical.
Themes:
Ethics of keeping a person alive as a disembodied, suffering mind.
Incommensurable value systems between species; each finds the other's sacraments monstrous.
Religion read literally by outsiders, inverted into horror.
Correction to the common misremembering: the aliens don't benevolently grant a hoped-for vision. They deliberately overwrite her Christ vision with their own as an experiment — that's the act on trial.