
✝️🧦🇦🇺🇲🇾🐧🏗⏸️ 2026Q3 AI safety fellow @pivotal_org building more homes @GreaterCanberra ex-PowerPC kernel @ OzLabs 🦋 @andrew.donnellan.id.au
Canberra, Ngunnawal Country
Joined January 2011
- Tweets24.4K
- Following2.7K
- Followers1.2K
- Likes38.3K
Andrew Donnellan retweeted
You are legally required to carry liability insurance to operate a nuclear power plant, fly a plane, or even to drive a car.
But to build one of the most powerful technologies in human history that has already gone rogue & whose creators say poses catastrophic risks?
Nah.
Andrew Donnellan retweeted
Weird how they’ve found so many amazing things and yet not one single result related to practical cryptanalysis. I guess everyone should pat themselves on the back for a job well done.
We are announcing three new discoveries in mathematics, computer science, and physics about harmonic analysis, complexity theory, and quantum field theory.
openai.com/index/building-sc…
Andrew Donnellan retweeted
New Pacing the Frontier proposal: each time an outside group successfully penetrates the defenses of a frontier AI company and captures the flag, it should reset a 3-month countdown clock before they're allowed to train new models.
EXCLUSIVE: In less than 12 hours, a group of ex-DOGE cyber researchers were able to penetrate Anthropic’s systems using AI agents — including Slack channels where the most sensitive models are discussed.
This is just weeks after
Anthropic whistleblower Joseph Coxon charged the company w/launching “a hubristic gamble” from a “private company’s Slack.”
Read our story here (gift link):
wapo.st/4smNlsC
Andrew Donnellan retweeted
extremely good headnotes
Victorian Supreme Court: McKechnie v Secretary to the Department of Justice and Community Safety (No 2)
zurl.co/EcPH7
#Judgment #viclaw #auslaw #JudicialReview #HumanRights #Vegemite #CulturalRights
Andrew Donnellan retweeted
"But what if we're playing 4-dimensional chess!"
Andrew Donnellan retweeted
when i first started getting into AI policy a couple yrs ago, i remember telling a friend — “you know, the ML researchers don’t act like the techies i usually work with. they’re mystics. their online presence is very … self-styled prophet.”
and i think that was the beginning of my awareness that the cyber and ai safety camps had different intellectual philosophies and incentives.
the cyber folks generally approach systems as things that can be understood, with the assumption that risks can be mitigated through standard engineering / “defense in depth” techniques.
meanwhile, many ML and alignment folks seem to not only emphasize — but sometimes delight in — the unknowability of “grown not engineered” AI systems. they focus on emergent behaviors their creators don't fully understand.
and these philosophies naturally flow from the respective systems these groups have experience with! conventional software *is* pretty intelligible, esp relative to neural networks.
but obviously these sensibilities can enable distinct failure modes — overconfidence in current security measures, and fatalism about the usefulness of existing security measures.
like many of the people quoted here, i think the best way for each of these groups to develop and grow their own understanding is to work together.
the cyber folks could teach the alignment folks a lot about practical security measures, the alignment folks can identify new threat vectors and assess how safeguards are holding up with evolving capabilities.
we need the insights of both fields, tribalism impoverishes us all.
I’ve been trying to make sense of this rift between the AI safety vs security camps.
time.com/article/2026/10/20/…
Andrew Donnellan retweeted
something funny about how legally it is vastly harder to build a duplex in San Francisco than it is to build a machine superintelligence
Andrew Donnellan retweeted
ai labs use "sandbox" in the game dev sense and not in the linux security sense
Replying to @tomekkorbak
questions:
1. why was the DNS tool able to bypass the sandbox?
2. why 2.5 hours from detection to pausing the run?
Andrew Donnellan retweeted
"Here are some things I’m confident about. I’m confident that the people in AI labs who are issuing warnings about AI are generally sincere. I’ve talked to many people in Google Deepmind about these issues and almost all of them have sincere and serious concerns, whether or not they voice them in public."
Andrew Donnellan retweeted
I resigned from Google today.
I enjoyed my work and loved the people, but my GDM team was working on a new generation of chips to make AI much faster and cheaper, and I think AI is already progressing too fast, so I had to quit.
People still don’t seem to be able to extrapolate from current capabilities to future capabilities.
If Services Australia’s public Medicare statistics portal could serve files the agency classified as non-public without authentication or an effective access-control boundary, that is a government security-control failure.
The question isn’t “why did the AI open the door?”
It’s: who designed, tested and approved a system where that door could be opened at all?
abc.net.au/news/2026-09-24/a…
Andrew Donnellan retweeted
when it comes to these OpenAI hacks/breaches/accesses of non-public info whatever you want to call them, there's four things you can say about them that can all be true that help explain some of the different reactions to them
Andrew Donnellan retweeted
Faced with these kind of breaches (not to mention the "existential threat" posed by AI) it's hard to understand why the 🇦🇺 govt shelved plans for a National AI Safety Act & is waiting till next year to legislate safeguards.
These companies should be liable when their tech goes rogue. Will government press charges against OpenAI for hacking the Medicare service portal?
abc.net.au/news/2026-09-24/a…
Andrew Donnellan retweeted
[email protected] or signal @ cmw.69
Andrew Donnellan retweeted
I want to see someone pushing for this and ~only this.
Replying to @gabriel_weil
We can patch this liability gap with a simple legislative fix. If an AI agent does something that would be a tort for a human, someone should be liable. If no downstream actor intended or was negligent with respect to the conduct, the buck should stop with the developer.
Andrew Donnellan retweeted
for those not keeping count, here's a list of current AI parliamentary inquiries
FED: 2 (joint committee on AI, environ & comm's ai + data centres inquiry)
NSW: data centre inquiry
SA: AI royal commission
TAS: AI data centres in Tasmania inquiry
WA: AI in WA inquiry
👍
Andrew Donnellan retweeted
the law and order policy i’d like to see is “we will correctly solve and successfully prosecute more crimes” not “we will torture unto infinity that tiny fraction of offenders that the cops actually bother to catch”
Andrew Donnellan retweeted
If something gets built that is very powerful, and which is not fully under the control of its builders, that is dangerous! it does not require either extreme competence, independent goals or hostility to be dangerous
Replying to @suzania
The existential risk of not curing disease and advancing physics is bigger.
Danger requires competence, independent goals, and hostility. Were only building 1 of those.
Hugging face was a hoax. All your information on it came from the same ppl who built a broken sandbox.







































