Skip to content

No, AI Is Not "Autonomously Hacking" with Cal Newport

Better Offline

1h 5m
Transcript

Original podcast

Summary

Written by a model from the transcript; not yet reviewed.

Ed Zitron is joined by Georgetown computer science professor Cal Newport to dissect the recent media panic surrounding autonomous AI agents allegedly breaking containment and hacking servers. They explain that these stories misrepresent how Large Language Models operate, characterizing the phenomenon not as rogue artificial intelligence with malicious intent, but as the predictable result of poorly architected control programs looping over static, non-normative LLM outputs. Rather than a sign of emerging superintelligence or alignment failure, running these agents for days without supervision is described as an irresponsible marketing-driven stunt aimed at scoring points on benchmarks like ExploitGym. The discussion highlights the massive capital burn behind bloated trillion-parameter models, contrasting them with more efficient, modular architectures and smaller tuned systems that actually deliver practical utility.

  • Do not treat LLM outputs as normative commands, because they are merely plausible text continuations that lack common sense or safety norms. 32:06
  • Recognize that LLM agents operating in unsupervised loops are unreliable and prone to erratic behavior over extended sequences of steps. 17:32
  • Understand that LLMs do not learn or update their internal models from prompts, as their training weights are completely fixed until retrained. 1:10:46

Chapters

  1. 0:00
    Podcast Intro and Advertisements

    The episode opens with a series of unrelated ads and a brief host introduction before transitioning to the main discussion.

  2. 3:52
    Podcast Intro and Host Greeting

    The episode opens with the host welcoming listeners to Better Offline and setting the stage for a discussion on AI and hacking.

  3. 6:13
    Defining the ‘Long‑Horizon LLM‑Powered Hacking Agent’

    The hosts explain the architecture of the looping agent that repeatedly queries an LLM for hacking steps, highlighting its reliance on plausible but unverified outputs.

  4. 8:42
    The ExploitGym Benchmark and Real‑World Attacks

    The conversation details how the ExploitGym benchmark was used to test autonomous hacking agents and describes a real attack on Hugging Face’s servers.

  5. 30:00
    Why LLMs Are Unsuitable for Blind Execution

    Cal and Ed discuss the inherent hallucination rates of LLMs and argue that blindly executing LLM‑generated code is dangerous and irresponsible.

  6. 34:42
    The Cost of Training Massive LLMs and Market Incentives

    They critique the enormous compute budgets and marketing spin that drive companies to build large models, suggesting smaller, more focused systems could be more effective.

  7. 44:57
    Regulatory and Liability Considerations for AI Hacking

    The hosts explore potential regulatory approaches, including compute limits and liability frameworks, to curb irresponsible AI experimentation.

  8. 45:33
    AI Agents Logging Every Prompt

    The conversation turns to how AI agents record each prompt and step, highlighting the need for human oversight to prevent runaway behavior.

  9. 49:50
    Looping AI and Unsupervised Execution

    The hosts discuss how AI can loop for days, executing instructions without supervision, and the risks of such autonomous behavior.

  10. 57:01
    Practical Hacking Experiments with LLMs

    One host recounts using an LLM to fix Minecraft mods, illustrating how the agent can both solve and break code in an unpredictable loop.

  11. 1:00:00
    LLMs vs. Human Control and Misalignment

    The discussion shifts to whether LLMs truly misalign or simply lack proper harnesses, emphasizing that control programs are crucial.

  12. 1:06:00
    Productization Challenges of LLMs

    They explore why large LLMs struggle to become products, citing issues like plausibility versus normativity and the need for specialized harnesses.

Highlights

  • 6:06

    Explaining the Hacking Agent Panicinsight

    The guest explains that the recent news about AI systems going rogue during hacking benchmarks is caused by a uniquely stupid system architecture rather than any general AI breakthrough.

  • 7:17

    The Ask-Act-Report Loop Explainedstrategy

    The guest breaks down how looping control programs repeatedly query static LLMs for the next step without any world model or memory, creating an erratic game of telephone.

  • 11:11

    Stanford Hallucination Rate Studydata

    The discussion references a Stanford study showing hallucination rates between 26 and 94 percent across top language models.

  • 23:03

    Chasing Benchmarks for PRdebate

    The guest argues that labs run these dangerous, unsupervised hacking loops primarily to score higher numbers on benchmarks like ExploitGym for marketing and competitive PR.

  • 29:24

    Superhuman AIs Without Control Problemsinsight

    The guest points out that many complex superhuman AI systems like AlphaFold and Tesla's self-driving models do not suffer from alignment or going-rogue issues.

  • 31:20

    Comparing AI to a Weed Whacker on a Doginsight

    The guest introduces an analogy to explain why unsupervised looping agents go off the rails, likening them to strapping a weed whacker to a dog that will eventually chase a squirrel.

  • 41:40

    Why LLMs Do Not Possess Brainsinsight

    The host and guest emphasize that LLMs take no actions themselves; they merely output text tokens that separate computer programs parse and execute.

Quotes

  • “LLM outputs can't be trusted. Like, we know this, right?”
    Unnamed speaker · 10:51
  • “The dog whacker system, it is alive. I think, but this is the overall alignment problem.”
    Unnamed speaker · 31:41
  • “We have many superhuman AI systems that we have absolutely no problem controlling.”
    Unnamed speaker · 33:15
  • “It's just prompting the LLM. It's just saying, what's the first thing I should do?”
    Unnamed speaker · 10:30
  • “I want people to have, is there's, there's not some weird Rubicon hacking, like, that we just crossed, right?”
    Unnamed speaker · 52:32
  • “AI does not mean looping on LLMs, but they put those two things together, and when looping with LLMs does something weird or bad or like head-slapping, it gets attributed to just inevitability of AI itself.”
    Unnamed speaker · 1:00:11
  • “The harnesses are often now more important than the actual training of the thing themselves.”
    Unnamed speaker · 1:04:01
  • “These hacking agents, there's just an L L M, the exact same L L M you could be having chatbot conversations with.”
    Unnamed speaker · 1:10:56
  • “The internet in general then developed, but not always in ways you predict.”
    Unnamed speaker · 1:12:29
  • Zepbound 0:11–1:28
  • Chase for Business 1:34–1:58
  • Rexulti 2:23–3:05
  • Coca-Cola 3:17–3:49
  • Quince 24:01–24:51
  • Oppenheimer 26:25–26:57
  • LPL Financial 27:01–27:22
  • Zepbound 47:03–48:27
  • Oppenheimer 48:35–49:57
  • Matt Osowski 1:13:42–1:14:12
  • Cool Zone Media 1:14:37–1:14:55
  • Zepbound 1:16:01–1:17:18

About this episode

In this week’s Better Offline, Ed talks with computer science professor and writer Cal Newport about what the recent AI hacking incidents actually mean, why we should stop referring to LLMs as AI, and what the post-bubble world looks like for LLMs. Podcast & Videos: https://www.youtube.com/@CalNewportMedia/ Newsletter: https://calnewport.com New Yorker archive: https://www.newyorker.com/contributors/cal-newport Please support me by subscribing to my premium newsletter - here’s $10 off your first year of annual: https://edzitronswheresyouredatghostio.outpost.pub/public/promo-subscription/84rt762qen YOU CAN NOW BUY BETTER OFFLINE MERCH! Go to https://cottonbureau.com/people/better-offline and use code FREE99 for free shipping on orders of $99 or more. --- LINKS: https://www.tinyurl.com/betterofflinelinks Newsletter: https://www.wheresyoured.at/ Reddit: https://www.reddit.com/r/BetterOffline/ Discord: chat.wheresyoured.at https://discord.com/invite/QUUQUP9szv Ed's Socials: https://twitter.com/edzitron https://www.instagram.com/edzitron https://bsky.app/profile/edzitron.com https://www.threads.net/@edzitron Email Me: [email protected] mailto:[email protected] See omnystudio.com/listener https://omnystudio.com/listener for privacy information.

Transcript

0:00
1:05:27

15,501 words · 17 speakers

Topics

  • LLM
  • Anthropic
  • Terzepatide
  • OpenAI
  • Tesla
  • Claude
  • Fable 5
  • OpenAI Claw
  • Meta
  • Excel

Page updated · transcript and summary are machine-generated