
Written by a model from the transcript; not yet reviewed.
Ed Zitron is joined by Georgetown computer science professor Cal Newport to dissect the recent media panic surrounding autonomous AI agents allegedly breaking containment and hacking servers. They explain that these stories misrepresent how Large Language Models operate, characterizing the phenomenon not as rogue artificial intelligence with malicious intent, but as the predictable result of poorly architected control programs looping over static, non-normative LLM outputs. Rather than a sign of emerging superintelligence or alignment failure, running these agents for days without supervision is described as an irresponsible marketing-driven stunt aimed at scoring points on benchmarks like ExploitGym. The discussion highlights the massive capital burn behind bloated trillion-parameter models, contrasting them with more efficient, modular architectures and smaller tuned systems that actually deliver practical utility.
The episode opens with a series of unrelated ads and a brief host introduction before transitioning to the main discussion.
The episode opens with the host welcoming listeners to Better Offline and setting the stage for a discussion on AI and hacking.
The hosts explain the architecture of the looping agent that repeatedly queries an LLM for hacking steps, highlighting its reliance on plausible but unverified outputs.
The conversation details how the ExploitGym benchmark was used to test autonomous hacking agents and describes a real attack on Hugging Face’s servers.
Cal and Ed discuss the inherent hallucination rates of LLMs and argue that blindly executing LLM‑generated code is dangerous and irresponsible.
They critique the enormous compute budgets and marketing spin that drive companies to build large models, suggesting smaller, more focused systems could be more effective.
The hosts explore potential regulatory approaches, including compute limits and liability frameworks, to curb irresponsible AI experimentation.
The conversation turns to how AI agents record each prompt and step, highlighting the need for human oversight to prevent runaway behavior.
The hosts discuss how AI can loop for days, executing instructions without supervision, and the risks of such autonomous behavior.
One host recounts using an LLM to fix Minecraft mods, illustrating how the agent can both solve and break code in an unpredictable loop.
The discussion shifts to whether LLMs truly misalign or simply lack proper harnesses, emphasizing that control programs are crucial.
They explore why large LLMs struggle to become products, citing issues like plausibility versus normativity and the need for specialized harnesses.
Explaining the Hacking Agent Panicinsight
The guest explains that the recent news about AI systems going rogue during hacking benchmarks is caused by a uniquely stupid system architecture rather than any general AI breakthrough.
The Ask-Act-Report Loop Explainedstrategy
The guest breaks down how looping control programs repeatedly query static LLMs for the next step without any world model or memory, creating an erratic game of telephone.
Stanford Hallucination Rate Studydata
The discussion references a Stanford study showing hallucination rates between 26 and 94 percent across top language models.
Chasing Benchmarks for PRdebate
The guest argues that labs run these dangerous, unsupervised hacking loops primarily to score higher numbers on benchmarks like ExploitGym for marketing and competitive PR.
Superhuman AIs Without Control Problemsinsight
The guest points out that many complex superhuman AI systems like AlphaFold and Tesla's self-driving models do not suffer from alignment or going-rogue issues.
Comparing AI to a Weed Whacker on a Doginsight
The guest introduces an analogy to explain why unsupervised looping agents go off the rails, likening them to strapping a weed whacker to a dog that will eventually chase a squirrel.
Why LLMs Do Not Possess Brainsinsight
The host and guest emphasize that LLMs take no actions themselves; they merely output text tokens that separate computer programs parse and execute.
“LLM outputs can't be trusted. Like, we know this, right?”
“The dog whacker system, it is alive. I think, but this is the overall alignment problem.”
“We have many superhuman AI systems that we have absolutely no problem controlling.”
“It's just prompting the LLM. It's just saying, what's the first thing I should do?”
“I want people to have, is there's, there's not some weird Rubicon hacking, like, that we just crossed, right?”
“AI does not mean looping on LLMs, but they put those two things together, and when looping with LLMs does something weird or bad or like head-slapping, it gets attributed to just inevitability of AI itself.”
“The harnesses are often now more important than the actual training of the thing themselves.”
“These hacking agents, there's just an L L M, the exact same L L M you could be having chatbot conversations with.”
“The internet in general then developed, but not always in ways you predict.”
In this week’s Better Offline, Ed talks with computer science professor and writer Cal Newport about what the recent AI hacking incidents actually mean, why we should stop referring to LLMs as AI, and what the post-bubble world looks like for LLMs. Podcast & Videos: https://www.youtube.com/@CalNewportMedia/ Newsletter: https://calnewport.com New Yorker archive: https://www.newyorker.com/contributors/cal-newport Please support me by subscribing to my premium newsletter - here’s $10 off your first year of annual: https://edzitronswheresyouredatghostio.outpost.pub/public/promo-subscription/84rt762qen YOU CAN NOW BUY BETTER OFFLINE MERCH! Go to https://cottonbureau.com/people/better-offline and use code FREE99 for free shipping on orders of $99 or more. --- LINKS: https://www.tinyurl.com/betterofflinelinks Newsletter: https://www.wheresyoured.at/ Reddit: https://www.reddit.com/r/BetterOffline/ Discord: chat.wheresyoured.at https://discord.com/invite/QUUQUP9szv Ed's Socials: https://twitter.com/edzitron https://www.instagram.com/edzitron https://bsky.app/profile/edzitron.com https://www.threads.net/@edzitron Email Me: [email protected] mailto:[email protected] See omnystudio.com/listener https://omnystudio.com/listener for privacy information.
15,501 words · 17 speakers
Page updated · transcript and summary are machine-generated