
chief ai officer https://xitter.cf/t.co/ZmjZwXvzFu. 2x founder / ml engineer. prev: ai @dropbox @myralabs @yale. built @solarplex_xyz. opinions my own.
metaverse
Joined July 2006
- Tweets18.6K
- Following6K
- Followers3.2K
- Likes46.7K
Pinned Tweet
The well behaved machine
a perfectly aligned ai will still hollow out institutions like schools, courts, and newsrooms, and no one will have decided to do it.
some thoughts on @merettm's essay today, where I argue why alignment isn't the most important variable.
- the framing is right: models are grown, not designed; no one understands generalization; cot monitoring is degrading; no lab has solved alignment well enough to keep scaling at full speed. and openai wants slowdowns and mandated safety bars. i get that.
- what bothers me is that everything he calls alignment -- goals, values, monitoring, defending against rogue ai -- is about the model. "is it trying to do the right thing", and "can we tell?". that's a first order problem, and labs can work on it. but it isn't where the impact of recursive self-improvement will land.
- most of the impact will come from models doing exactly what they're asked, at a speed and scale that rearranges the world in ways we can't predict. no misalignment required. social media, for eg, has been perfectly aligned to its operators, and it still reshaped the world. now compress that a 100x.
- second order effects are already graspable: research goes from thousands of people to a few, and a giant computer owned by a corporation. the labour market gets repriced. everyone gets a personal agi so patient and reliable that human relationships thin further -- not because the model is bad, because it's so good. and the amount of information produced explodes past anyone's ability to check it, so checking gets handed to the models too. code review is already there.
- the third order effects though is where it gets interesting. we can't name them yet, but we can see where its going.
- a lot of our societal institutions exist becase good judgment is rare and expensive. so we built structures to ration it, and certify it. a school puts one trained teacher's judgment in front of 40 kids. a court routes disputes to a few people whose judgment we've agreed to trust. a newsroom decides what's true and what matters, because most people can't check for themselves. it's not perfect, but it's gotten us here so far.
- now imagine if every student, litigant and reader has judgment on tap that's as good as the institution's or better: the reason for the institution goes away. and we haven't designed what replaces it so far. we don't even know what it could be.
- no one will decide to hollow these institutions out proactively. a parent picks an ai tutor and stops caring about the classroom. a plaintiff lets a model draft the filing. a reader stops opening the new york times because their agent already filled them in.
- each decision is small and reasonable. but, across millions of people, they fundamentally change what the institution is. the funny part is, this change has no one author. there's no policy to reverse, no company to regulate, and even, no model to realign. it's not the model's effect on the world. it's the world's adaptation to the model, distributed across geography and time.
- to be clear: we can protect against some of this -- policy, redistribution, governance. but what we can't do is protect against it through "alignment" as the researchers define it. preserving human agency, and preventing concentration of power aren't model alignment problems. an aligned model can make them worse just as easily.
- a slowdown as imagined by the big research labs buys time for the wrong thing if the time goes only to monitoring the model. we may have evals for whether the model is aligned. but we have none for whether institutions are holding.
i think the main thing that matters is not the pace at which we train models or verify their chain of thought, but how how fast people adapt to them en masse. social media was aligned to its operators and we're still living with the fallout.
ai will be aligned too.
I wrote about the state of AI, why I’m concerned about the next few years, and the choices we need to make to keep the future in humanity’s hands.
An Alien Mind: openai.com/index/an-alien-mi…
Viksit Gaur retweeted
Will the Mumbai Police through X (Twitter) order Raj Thackeray to remove the link to the video documentary on Modani as it has to Sabeer Bhatia (founder of Hotmail), MP Mahua Moitra and yours truly, among others.
Viksit Gaur retweeted
On 21 October, Reddit submitted information concerning an Indian government takedown order covering 26 URLs. Reddit has compiled with the order and all 26 URLs have been geo-blocked in India.
The URLs link to posts across multiple subreddits, covering a range of subjects.
🧵
ok as much as i love this person proving samsung to be a bad actor: there are some tools they maybe need for remote management. and don’t have english as a first language. it’s important to point out flaws but equally so to be moderate in cases where it may not be slam dunk.
this is an incredibly bad and uninformed take. here’s why:
- the model didn't create the vulnerability, it just found one that was already there. in fact, HE himself found it because he had access, and reported it
- gating won't stop the wrong people. they already have abliterated models
- if anything, it only locks out defenders, students, and small teams, the people who actually fix things
- "the public should never get it" - who decides this? the labs? the government? also it’s like pulling the ladder up after scaling it.
- also: false analogy. a nuclear button is an irreversible action. a hack can be prevented using the exact same tech used to launch it
let’s stop trying to lock ai down and only have specific people use it. it’s the wrong takeaway from the hacks we’re seeing right now.
I have tried this for the last 1 hour and spent like $2-$3 and my opinion is that these models should be gated to the public
With just $2-$3 I could gain access to databases of some vulnerable websites(reported it to them). I could get a lot of stuff that should not be given to the public to be honest
And I feel it's a way too powerful model to be without guardrails because it independently can do a lot of stuff which, I feel, the general public should never get.
In the wrong hands it will be really, really destructive indeed. It's kind of like giving the nuclear button to a random stranger on the road
Maybe important to repost this now that everyone is getting hacked
If you have a VPS, I recommend you to get if off the public internet and into a Tailscale network and Cloudflare Tunnel ASAP
It doesn't matter you have SSH key login, this is about exploits and vulnerabilities AI is finding
There's 2 ways into a VPS:
- via your site/app (like the PHP exploit of this week with a file upload hack)
- via your server (like hacking into SSH or some open port)
The site/app side you put on a Cloudflare Tunnel and then with the default Free Plan it has WAF security enabled by default and they jump on new security exploits fast, it means that the only way to reach your website is via the Cloudflare Tunnel, your server does not respond to port 80 or 443 anymore
The server side you put on a Tailscale network which is like your own private network that nobody can access but your own devices (like your laptop, your phone and your VPS) kinda like a VPN
Then you switch off ANY regular access to your VPS on the firewall, in my case I use Hetzner and you create a new firewall then empty it and that blocks everything (test it)
How do Tailscale and Cloudflare Tunnel get in then? They don't. They go outbound. They make a tunnel to outside which sends and receives
Now you've reduced your attack vector to Tailscale and your Cloudflare Tunnel, much safer, not perfect btw, but nothing is
When I set up a new Hetzner VPS first thing I do install Tailscale and once I'm in via Tailscale lock down the firewall to only accept web traffic on HTTPS 443 for Cloudflare IPs and SSH 22 for Tailscale IP
That way nobody can get in
I know I keep repeating this but it should be basics of setting up a new VPS
So basic IMHO it should be part of any VPS service to default install Tailscale and enable it so it's the only way to get in
Why?
A VPS server is just like your laptop or destop computer but now imagine if it's connected to the entire internet with 8 billion people that can access it and try hack it
You want to only have it accessible to you
And if you want to host a website on your VPS (like I do), you should only let Cloudflare access your VPS so it can stand in front and block any hack attempts
Never expose a VPS to the world wide web which realistically is the world WILD web
Viksit Gaur retweeted
the new gmail app update is 🤮
why can’t they hire a half decent designer to make the visual part atleast bearable
and it’s a paid app!
Viksit Gaur retweeted
Switching back to default Mail app. The new Gmail update with a mix of Liquid Glass and Material Design is horrible. Doesn’t feel cohesive.
Viksit Gaur retweeted
Replying to @gmail
Viksit Gaur retweeted
Hey @gmail new mobile inbox UI is impossible to tell if something is unread or read 🫤
Viksit Gaur retweeted
The new Gmail app looks so bad. Takes couple of moments until I distinguish which mail is read and which not. Such bad UX.
Viksit Gaur retweeted
This is such a brilliant piece of writing. I'll add to it:
1. In India almost all governance is compliance theatre: more for optics and local consumption. Often for politics. Often knee-jerk. Our foreign policy bravado appears no different.
2. Our government, instead of creating a level playing field + global competition to improve local capacity keeps businesses busy in compliance theatre, and irrational, ad-hoc and half-baked regulations (SIM Binding a clear example in tech), instead of creating an environment where our businesses can compete globally because there is a stable regulatory regime.
3. There is no internal oversight, no internal accountability, and external accountability is weakened by weakening the media, and increasingly blocking/banning on social media. The mess that we have is hidden behind lack of transparency from the government both in Parliament and in public, including in the lack of neutral press access, and the decimation of the RTI. Lack of due process, knee-jerk, short-term and ill-considered policy-making is a consequence. From a tech perspective: Go back to RBIs payments data localisation which was then relaxed through a non-legally binding FAQs, or the bizarre cybersecurity rules that are implemented randomly checked rarely, or RBI's mandated tokenisation of card payments that create a lack of confidence about whether a card will work abroad or online.
Look at the IT Rules where "advisories" and "circulars" were sought to be made legally binding: makes policy-making more whimsical and reactive. IT ministry wanted deepfake labeling implemented in 10 days and almost nobody has done it 8 months later but no action taken. Performative compliance of a rule that shouldn't have existed. Or should I just say demonetisation? Hard lockdown where migrants suffered, and then near-zero action and no leadership from central govt during the delta wave in Delhi. I could go on and on.
That's the sign of either an immature government where bureaucrats want to show compliance.
Farcical governance has been normalised and we are back to UPA-2 days.
Narrative control is superseding national interest in India.
If we're surviving,(and in some case thriving) it's despite the state.
Why is Indian Cyber often a joke and is increasingly a societal farce? It is because of State+ and Status++ mentality, and embedding mediocrity b/c Local infants needs to be protected from global competence via compliance theatre
@ssmumbai and I say it loud about eMudhra-4.
oof @google design is .. completely out of whack.
what even is this in the updated gmail app?
Viksit Gaur retweeted
There's a decent chance the internet ceases to exist as such, at least for a time.
AI-enabled bioweapons are also coming, and there's no "shut down the websites" option for that.
We're approaching the point where frontier AI R&D becomes politically untenable.
Vulnerabilities in a programming language that supports much of the internet are so severe that European and British authorities recommend websites temporarily go offline until they can be fixed. nbcnews.com/tech/security/cr…























