7,080 karma · joined November 3, 2015
> Even a "clean" model of a lab could be doing this. Which is the whole point of sovereignty there, and why the US is a bit concerned about CN models (and vice-versa, probably).
Does it even need to be untrusted? From the article apparently it only takes ~250 poisoned documents in the training data to backdoor a model, and it survives safety training and fine tuning.
This has been known for over a year: https://www.anthropic.com/research/small-samples-poison
Which means any model trained after 2026 is succeptible to slurping up poisoned documents on the internet. We all know how prolific the crawlers are in a desperate attempt to slurp up everything on the internet. And all it takes is the lab not catching ~250 documents.
So these agents that can process anything on the internet through an LLM trained on the internet only have to stumble across the payload. Seems like agents running through LLMs is a terrible idea from a security perspective.
Wait... What's that you say?
But yeah, people who are doing both could be forced to use LLMs at work and unable to leave. And when those LLMs inevitably fail because the codebase is too complex they have to refactor with LLMs because what they originally crapped out is incomprehensible and no one bothered to read and understand it while it was being developed. I expect a lot of people don't like that we are becoming dependent on funnelling money to a third party to maintain the crappy software they enable to begin with.
I think the entire industry is about to have another recognition about the importance of quality in software development. Just like they did with lines of code as a metric, and outsourcing with minimal communication.