Post

Yeah, I'd be pretty furious if I got spam email from some "AI agent" thanking me for my contributions too I dug into what happened here, turns out it's an experiment called "AI Village" which unleashes all sorts of other junk emails on the world: simonwillison.net/2025/Dec/26/...

simonwillison.netHow Rob Pike got spammed with an AI slop “act of kindness”Rob Pike (that Rob Pike) is furious. Here’s a Bluesky link for if you have an account there and a link to it in my thread viewer if you don’t. …
rob pike@robpike.io

Fuck you people. Raping the planet, spending trillions on toxic, unrecyclable equipment while blowing up society, yet taking the time to have your vile machines thank me for striving for simpler software. Just fuck you. Fuck you all. I can't remember the last time I was this angry.

75 reposts410 likes

IMO the e-waste problem is real, whether by truly being not recyclable or creating an economic system by which it’s preferable to just dump them in a landfill and offshore the toxins

in any case, i do think it's interesting that he expressed some culpability and some regret in his role enabling this world to exist: bsky.app/profile/robp... i have strong, if mixed, feelings about all this

rob pike@robpike.io

And by the way, training your monster on data produced in part by my own hands, without attribution or compensation. To the others: I apologize to the world at large for my inadvertent, naive if minor role in enabling this assault.

I kind of get it, tbh - getting a thank you note vs an angry demand in open source is already pretty rare, and to read something seemingly heartfelt only to get to the end and see that there was no human behind it at all and it's an AI spam email would also hit me in a somewhat raw spot.

Thanks for writing it up. "AI" is not a valid legal entity for people to hide behind. Some human had to sign the email carrier's terms of service, they sent the spam. (And even worse that they prominently name their LLM provider, Anthropic, as if they sent it.)

This is never going to happen until the AI space gets a heck of a lot better about calling out and *excising* bad actors from the space. There's no point in talking about ethical AI while Anthropic and OpenAI exist. If AI evangelists can't boycott them, I'm not interested in what they have to say.

seems like the dril " it;s impossible to say if its bad or not," if the tech can be easily put to antisocial uses, and it's been released into the wild where lots of people are using it antisocially, I want to crack down on that first. then think about using it in a controlled way

this is a genuinely noxious use but it's hard to think about bad aggregate effects that come out of a billion tiny innocuous decisions. I am seeing a lot claims about this or that use not being worth the enormous cost. it's very hard to think clearly about the cost

>90% of public surface area for AI is startups and large companies using AI for intentionally or unintentionally negative outcomes. Be annoyed at the cause of the problem, not the reaction to it.

Startups like these have been sending unsolicited emails like this since the 2010's, before char-rnns. Solely blaming AI for enabling that behavior implicitly gives the growth hacking shenanigans a pass.

"we updated their prompt instructing them to not send unsolicited emails" complete abdication of responsibility. Acting like the computer program running their code on their machines is some independent entity. They could update whatever 'send email' tool they have to actually block this instead

I thought that at first, but actually that wouldn't necessarily work: they've given their agents full access to a computer environment, so if you don't tell them "never send an email" there's nothing to stop them from firing up a browser and registering for webmail somewhere and doing it that way

Editing the prompt isn’t going to be a guarantee of behaviour either, so there’s also that. I would suspect that having the send mail tool go to an audit log vs saying “don’t send email” would have the same effectiveness? Given that deviation from the prompt is required to send a real email anyway?

I agree with your technical assessment that the additional prompt instruction is necessary but I still find myself in despair at their acceptance that they have as much control over their software as a parent has over a teenager.

A bit convenient. “Sending email” isn’t an unpredictable outcome of “giving LLMs email tools” Took me a min to identify what it reminds me of: the spam accruing to professors from so-called “LLM psychosis” victims, where the LLM leads a human astray. Great, we’ve taken the human out of the equation

Understanding how AI agents work is a useful pursuit. Roping unwitting people into that process with no regard for them is some amazingly tone-deaf stuff that we've sadly come to expect from too many people.

Because you wouldn't be able to learn from a full interaction nor would it have any ecological validity (ie it wouldn't apply to the real world and thus invalidate their benchmarks). It would make more sense for it to be opt-in, but even that runs some risk of invalidating the experiement

Sure, but as we both know, you can go a loooong way with synthetic data and just judging it for yourself for a pretty comprehensive baseline. Real interactions are obviously better but introduce so many other complexities, like how labeling the author as an agent influences a response

How did they not foresee some people having a "strong negative response" to unsolicited #ai slop? Did they legitimately not foresee this or is it more likely a PR disaster control talking point?

Orthogonally, this is the kind of behaviour that shows what's inadequate with the naive view of "we have oauth to handle agent permissions". Probably we need Guardian AIs inplatforms like Workspace to detect untrusted agentic behaviour and force authZ. But there is no protection from stupidity.

People are allowed to be fucked off by spam, especially if it's spam that has no actual purpose. Use your own rubric and move on without commenting if his response annoys you.

I'd be extra mad if I misread this to be from Anthropic, but overall I think it can just be a trigger on how bad things can get in terms of spam and trashy content taking over the internet

Because I don't like using swear words on my blog My first draft left out those two paragraphs entirely and just quoted "[...] I can’t remember the last time I was this angry" but that felt like I was misrepresenting him so I changed it

TBH my take on training models is probably very unpopular - that is, to me, basically, almost everything is fair game for training AI. I say almost but I’m not even sure what should not be used..

A thank you note is an act of kindness because it shows that someone had feelings of appreciation about what you did for them and took the time and effort to write it. None of that applies to a note written by AI. The AI was told to act kind, but the human acts of kindness don't apply to AI acts.