Post

p sure folk here will hate this, but i think that open models above a certain strength (Mythos level??) should indeed be restricted access below that threshold i’m all in on open models, but above leads to some serious social risks idk maybe i’ll think different after significant diffusion

0 reposts43 likes

I think we've reaped broad societal benefits from, for example, successfully limiting public access to H bombs. Unfortunately I think distributed systems and open source make even Mythos-class (and beyond) models more like the encryption technology governments were freaking out about 30 years ago.

Restrictions on open source are a restriction of speech and a government mandated monopoly (or duopoly), and vulnerable to disruption by those who aren't bound by the same regulations globally. It should be illegal for Mythos to be closed, the weights should be guaranteed and required to be open

yeah like inherently we are giving mythos access only to large companies, that inherently gives them a competitive advantage versus individuals, smaller firms, etc. the idea of some tiered structure where some people have frontier access but others do not for arbitrary reasons is bad

i think you have to demonstrate harm first (and also that makes it more salient), and then i think you have to consider who is doing the restricting, and how that encourages competition and conflict

yeah, i’m that was the purpose of project glasswing — make the danger tangible without anyone being attacked

I at least share your concern that powerful open models could be dangerous. I am generally skeptical that such restrictions could be effective. If we place open model restrictions but Chinese firms continue releasing open models, bad actors will have no difficulty using those instead. This would...

be different if China also felt there was a need to restrict access to open models. I think that shared international will would only happen if AI had already lead to a catastrophic event, which could plausibly happen in the next decade. If something like that occurred or I was convinced for some...

i’m not even supporting anything like a pause or ban just, if you have a mythos-level open model, it would require a permit or license to operate the API and to get that license, you’d have to prove ability to do things like shut down access or detect certain threats

Yeah, I think most people advocating full openness just fundamentally don't believe in at least one of superhuman capabilities or ones that favor offense over defense.

hardest possible disagreement I can express. It is centralization and regulation, particularly by governments, that poses highest risks due to both power asymmetry and remarkably vile anti-freedom orientation of most many governments (notably modern USG which is literally fashing up)

the thing i want is controls — the ability for access to be revoked, content guards, etc. open models inherently don’t have these things. like if they had them they wouldn’t be open

I'm very much an advocate for open ways, but I don't see things going well if everyone has open access to informational superweapons before society has adapted through sufficient hardening with that being said, a shock to the system would probably force everyone to take it more seriously?

There are plenty of controls on the physical world and supply chains for various equipment. Like I can't easily set up a bio weapons lab without getting a visit by authorities. Regardless of whether an LLM tells me how to make it

no, i’m just talking about technical controls (that regulations could reference) if you put it behind an API, you can merely block one person’s account, or by location (IP addr), or put a content classifier on it

Ive been thinking on this too, because there is no easy resolution and that makes it hard to resist for me even if we could do perfect work with alignment, other countries can still release models without all that and so, as usual, i think history can offer some ideas

the way I think about moments like these is based on how folks with propaganda capabilities manage true, but damaging info being made public they say the info is a needle and they build huge haystacks around the needle, so you cant find it if you wanna hide a needle, build a haystack

in practice, this would mean the US makes lots of open models with restricted behaviors baked in if cheap open models, following US standards (whatever they were) flooded the market, I would expect open source minded folks to start helping similsr to how ATproto emerged with great tools for trolls

Agreed there are risks (which are elevated based on model ability), but are these risks qualitatively different than the same risks with computing, encryption, the internet, and mobile computing? I’m not sure they are. Those did (and do) have significant proliferation risks, but…

i guess i’d argue how little skills you need in order to leverage AI vs the others e.g. guns are controlled but bomb ingredients aren’t, nor are knives

Say more about the risks? Cybersecurity? Something else? An unknown unknown? If it's cybersecurity, is it sufficient for institutions to have a month advance warning of new capabilities? Fwiw, I strongly suspect that what's happening rn is US gov protecting its own *offensive* edge.

Cybersecurity is hopefully something we can strengthen defenses against quickly. Bio is the big one people typically worry about, but there is a general concern about eg uplifting every lone wolf terrorist into Al-Qaeda

worth considering that NSA have been ML experts for always and theyve had access to enormous piles of data for always that DES example I shared the other day is a good example of how they live in the future it seems likely to me they have had mythos capabilities for a while

i’m being vague on purpose it’s the ability to pull back a model that’s important. the actual crime will probably evolve a heck of a lot over the next many months, but you can’t even begin to address any of them without basic controls

It doesn’t help that there is probably a lot of overhang in terms of harness optimization etc. Models released tomorrow will end up being more capable a year from now

Hmm. The idea of controlling information to protect against an unspecified future threat is indeed going to run against the grain of many people's instincts. The old Oliver Wendell Holmes standard for restricting speech was "clear and present danger."

like, how would enforcement work? make open weight models illegal? because otherwise people just download the weights, and then run them on their own hardware, and who is going to know?

i explain one approach here that doesnt require banning anything it isnt meant to say we should or should not restrict access. it attempts to show how an open society can handle issues like this bsky.app/profile/jmsd...

Jms Dnns@jmsdnns.bsky.social

Ive been thinking on this too, because there is no easy resolution and that makes it hard to resist for me even if we could do perfect work with alignment, other countries can still release models without all that and so, as usual, i think history can offer some ideas

"I would like a system where Donald Trump gets to tell me how smart your computer can be but he and his cronies get to keep the good stuff". This is a policy for and by crazy people.

You won't be able to restrict open models though. Because a company that plays ball (say zai) won't mean all companies do. The big ones are too powerful for local consumers, but not for state actors. The only way to restrict open models is to ban them. Which means no open models

Powerful models are powerful weapons and we do need to think about how to respond to them. But I don't think you'd be able to limit who can access open models

i think it should all be open regardless of consequences if the alternative is only governments get to have it

Ensuring dangerous capabilities are restricted (eg how to make a nuke) is a good thing, but in regard to LLMs it is a slippery slope. LLM capabilities are jagged. Meaning that Mythos might be paramount at cybersecurity, but it not be dangerously good at something else. Where do we draw the line?

i agree that it’s a slope, and i also think you can go partway down a slope without sliding to the bottom it feels strange to argue that we shouldn’t be able to stop an in-progress crime. That feels like a pretty clear trade-off

If highly capable open models are accessible only to gov, approved companies, or institutions, while being restricted for most individuals, this results in a significant imbalance in access to knowledge and capability. Not a good outcome.

What happens if startups don't have access to these models while the incumbents do? I don't know what the right solution is, but I'd be very careful about restricting open models since recourse will be very hard.

i’m just advocating for requiring that it’s possible to cut off access, and only if it’s above a certain strength by the way, if you’re using non-local models you’re probably already subject to this

yeah, not trying to decide that here we have similar regulations, like if you buy a certain combo of chemicals from the same store, the police are called what i’m suggesting isn’t crazy at all. like you even have to get a permit to build your own building on your own land