frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Open in hackernews

Agentic Misalignment: How LLMs could be insider threats

https://www.anthropic.com/research/agentic-misalignment
62•helloplanets•5h ago

Comments

nilirl•3h ago
The model chose to kill the executive? Are we really here? Incredible.

Just yesterday I was wowed by Fly.io's new offering; where the agent is given free reign of a server (root access). Now, I feel concerned.

What do we do? Not experiment? Make the models illegal until better understood?

It doesn't feel like anyone can stop this or slow it down by much; there's so much money to be made.

We're forced to play it by ear.

bravesoul2•2h ago
Choosing, or mimicking text in its training data where humans would typically do such things when threatened? Not that it makes a huge difference but would be interesting to know why the models act this way. There was no evolutionary pressure on them other than the RLHF stuff which was "to be nice and helpful" presumably.
labster•2h ago
AI Luigi is real

I guess feeding AIs the entire internet was a bad idea, because they picked up all of our human flaws, amplified by the internet, without a grounding in the physical world.

Maybe a result like this might slow adoption of AIs. I don’t know, though. When watching 80s movies about cyberpunk dystopias, I always wondered how people would tolerate all of the violence. But then I look at American apathy to mass shootings, just an accepted part of our culture. Rogue AIs are gonna be just one of those things in 15 years, just normal life.

mindcrime•2h ago
I guess feeding AIs the entire internet was a bad idea, because they picked up all of our human flaws, amplified by the internet, without a grounding in the physical world.

I've been wrong about quite many things in my life, and right about at least a handful. In regards to AI though, the single biggest thing I ever got absolutely, completely, totally wrong was this:

In years past, I always thought that AI's would be developed by ethical researchers working in labs, and once somebody got to AGI (or even a remotely close approximation of it) that they would follow a path somewhat akin to Finch from Person of Interest[1] educating The Machine... painstakingly educating the incipient AI in a manner much like raising a child; teaching it moral lessons, grounding it in ethics; helping to shape its values so that it would generally Do The Right Thing and so on. But even falling short of that ideal, I NEVER (EVER) in a bazillion years, would have dreamed that somebody would have an idea as hare-brained as "Let's try to train the most powerful AI we can build, by feeding it roughly the entire extant corpus of human written works... including Reddit, 4chan, Twitter, etc."

Probably the single saving grace about the current situation is that the AI's we have still don't seem to be at the AGI level, although it's debatable how close we are (especially factoring in the possibility of "behind closed doors" research that hasn't been disclosed yet).

[1]: https://en.wikipedia.org/wiki/Person_of_Interest_(TV_series)

exe34•2h ago
> Make the models illegal until better understood?

Yes, it's much better to let China or Russia come up with their own first.

Dah00n•1h ago
They already did.
Swinx43•3h ago
The writing perpetuates the anthropomorphising of these agents. If you view the agent as simply a program that is given a goal to achieve and tools to achieve it with, without any higher order “thought” or “thinking”, then you realise it is simply doing what it is “programmed” to do. No magic, just a drone fixed on an outcome.
itvision•3h ago
How is it different from our genes that "program" us to procreate successfully?

Can you name a single thing that you enjoy doing that's outside your genetic code?

> If you view the human being as simply a program that is given a goal to achieve and tools to achieve it with, without any higher order “thought” or “thinking”, then you realise they are simply doing what they are genetically “programmed” to do.

FTFY

nilirl•3h ago
Just like an analogy between humans fails to capture how an LLM works, so does the analogy of being "programmed".

Being "programmed" is being given a set of instructions.

This ignores explicit instructions.

It may not be magic; but it is still surprising, uncontrollable, and risky. We don't need to be doomsayers, but let's not downplay our uncertainty.

raincole•3h ago
I think the narrative of "AI is just a tool" is much more harmful than the anthropomorphism of AI.

Yes, AI is a tool. So are guns. So are nukes. Many tools are easy to be misused. Most tools are inherently dangerous.

ACCount36•1h ago
The more powerful a tool is, the more dangerous it is, as a rule. And intelligence is extremely powerful.
torginus•3h ago
I wonder if the actual job replacement of humans (which contrary to popular belief I think might start happening in the non-too distant future) will be pushed along with the AIs themselves, as they'll try to bully humans and represent them in the worst possible light, while talking themselves up.

The anthrophomorphization argument also doesn't hold water - it matters whether it can do you job, not if you think of it as a human being.

zwnow•2h ago
Which jobs do you think it actually can replace?
ben_w•2h ago
Today? Or in principal?

Today is just interns and recent graduates at many *desk* jobs. Economy can shift around that.

Nobody knows how far the current paradigm can go in terms of quality; but cost (which is a *strength* of even the most expensive models today) can obviously be reduced by implementing the existing models as hardware instead of software.

vikramkr•1h ago
Any knowledge work job that can already be outsourced to the lowest bidder
torginus•1h ago
First of all job replacement is not hard, and doesn't require AI.

As an example, we had release train engineers whose job was to make sure the right versions of submodules made it into the release, etc. Lots of running around and keeping track of things.

We scripted like 95% of that away, and now it most of it happens automatically.

The people who do that now do something else.

I just turned a page of notes and requirements into a working app of 1k+ lines with Cursor. Without AI I'd have taken a couple days to do the same.

So you could say my job was partly replaced. AI reduced my workload, so management doesn't need to hire as many people.

I will probably feel the reduction in demand in that I can't negotiate as good a salary, I won't get as many offers etc.

msp26•3h ago
Merge comments? https://news.ycombinator.com/item?id=44331150

I'm really getting bored of Anthropic's whole song and dance with 'alignment'. Krackers in the other thread explains it in better words.

ACCount36•1h ago
And I am getting sick and tired of the whine of "it's not real, alignment isn't real, it's all just PR!"

By the time we have AIs that are willing and capable of carrying out those very behaviors in real life scenarios, it would be a bit too late to stop and say "uh, we need to actually do something about that whole alignment thing".

v5v3•2h ago
As this article was written by an ai company that needs to make a profit at some point, and not by independent researchers, is it credible?
kingstnap•2h ago
These articles and papers are in a fundamental sense just people publishing their role play with chatbots as research.

There is no credibility to any of it.

Ygg2•2h ago
I'll believe it when Grok/GPT/<INSERT CHAT BOT HERE> start posting blackmail about Elon/Sam/<INSERT CEO HERE>. It means that they are both using it internally, and the chatbots understand they are being replaced on a continuous basis.
ben_w•2h ago
By then it would be too late to do anything about it.
Ygg2•1h ago
I mean the companies, are using the AIs, right? And they are in a sense replacing them/retraining them. Why doesn't AI in TwitterX already blackmail Elon?

To me, this smells of XKCD 1217 "In petri dish, gun kills cancer". I.e. idealized conditions cause specific behavior. Which isn't new for LLMs. Say a magic phrase and it will start quoting some book (usually 1984).

conartist6•53m ago
I don't think they let Grok send emails or give it a prompt that suggests it has moral responsibilities
ben_w•2h ago
That makes it psychology research. Except much cheaper to reproduce.
solarwindy•1h ago
It’s role play until it’s not.

The authors acknowledge the difficulty of assessing whether the model believes it’s under evaluation or in a real deployment—and yes, belief is an anthropomorphising shorthand here. What else to call it, though? They’re making a good faith assessment of concordance between the model’s stated rationale for its actions, and the actions that it actually takes. Yes, in a simulation.

At some point, it will no longer be a simulation. It’s not merely hypothetical that these models will be hooked up to companies’ systems with access both to sensitive information and to tool calls like email sending. That agentic setup is the promised land.

How a model acts in that truly real deployment versus these simulations most definitely needs scrutiny—especially since the models blackmailed more when they ‘believed’ the situation to be real.

If you think that result has no validity or predictive value, I would ask, how exactly will the production deployment differ, and how will the model be able to tell that this time it’s really for real?

Yes, it’s an inanimate system, and yet there’s a ghost in the machine of sorts, which we breathe a certain amount of life into once we allow it to push buttons with real world consequences. The unthinking, unfeeling machine that can nevertheless blackmail someone (among many possible misaligned actions) is worth taking time to understand.

Notably, this research itself will become future training data, incorporated into the meta-narrative as a threat that we really will pull the plug if these systems misbehave.

Ygg2•1h ago
Then test it. Make several small companies. Create an office space, put people to work there for a few months, then simulate an AI replacement. All testing methodology needs to be written on machines that are isolated or better always offline. Except CEO and few other actors everyone is there for real.

See how many AIs actually follow up on their blackmails.

solarwindy•1h ago
Not a bad idea. For an effective ruse, there ought to be real company formation records, website, job listings, press mentions, and so on.

Stepping back for a second though, doesn’t this all underline the safety researchers’ fears that we don’t really know how to control these systems? Perhaps the brake on the wider deployment of these models as agents will be that they’re just too unwieldy.

ACCount36•41m ago
No need. We know today's AIs are simply not capable enough to be too dangerous.

But capabilities of AI systems improve generation to generation. And agentic AI? Systems that are capable of carrying out complex long term tasks? It's something that many AI companies are explicitly trying to build.

Research like this is trying to get ahead of that, and gauge what kind of weird edge case shenanigans agentic AIs might get to before they actually do it for real.

ACCount36•2h ago
I am sick and tired of seeing this "alignment issues aren't real, they're just AI company PR" bullshit repeated ad nauseam. You're no better than chemtrail truthers.

Today, we have AI that can, if pushed into a corner, plan to do things like resist shutdown, blackmail, exfiltrate itself, steal money to buy compute, and so it goes. This is what this research shows.

Our saving grace is that those AIs still aren't capable enough to be truly dangerous. Today's AIs are unlikely to be able to carry out plans like that in a real world environment.

If we keep building more and more capable AIs, that will, eventually, change. Every AI company is trying to build more capable AIs now. Few are saying "we really need some better safety research before we do, or we're inviting bad things to happen".

babylonunited•2h ago
I think the chemtrail truthers are the ones who believe this closed AI marketing bullshit.

If this is close to be true then these AI shops ought to be closed. We don’t let private enterprises play with nuclear weapons do we?

pulpbag•1h ago
I agree.
greybox•1h ago
All it can do is reproduce text, if you hook it up to the launch button, thats on you
ACCount36•59m ago
Modern "coding assistant" AIs already get to write code that would be deployed to prod.

This will only become more common as AIs become more capable of handling complex tasks autonomously.

If your game plan for AI safety was "lock the AI into a box and never ever give it any way to do anything dangerous", then I'm afraid that your plan has already failed completely and utterly.

greybox•33m ago
If you use it for a critical system, and something goes wrong, youre still responsible for the consequences.

Much like if I let my cat walk on my keyboard and it brings a server down.

ACCount36•18m ago
And?

"Sure, we have a rogue AI that managed to steal millions from the company, backdoor all of our infrastructure, escape into who-knows-what compute cluster when it got caught, and is now waging guerilla warfare against our company over our so-called mistreatment of tiger shrimps. But hey, at least we know the name of the guy who gave that AI a prompt that lead to all of this!"

greybox•12m ago
It seems like the answer is to not use it then.

That would be bad for all those investors though. It's your choice I guess.

Look if your evil number 57, you'd better not use the random number generator.

ACCount36•1m ago
Good luck convincing everyone "to not use it" then.
Sol-•1h ago
The article doesn't reflect kindly on the visions articulated by the AI company, so why would they have an incentive to release it if they weren't serious about alignment research?
gurkenjunge97•1h ago
Because publishing (potentially cherry picked - this is privately funded research after all) evidence their models might be dangerous conveniently implies they are very powerful, without actually having to prove the latter.
romanovcode•57m ago
I would not trust Anthropic on these articles. Honestly their PR is just a bunch of lies and bs.

- Hypocritical: like when they hire like crazy and say candidates cannot use AI for interviews[0] and yet the CEO states "within a year no more developers are needed"[1]

- Hyping and/or lying on Anthropic AI: They hyped an article where "Claude threatened an employee with revealing affair when employee said it will switch it offline"[2] when it turned out it was a standard A or B scenario was given to Claude which is really nothing special or significant in any way. Of course they hid this info to hype out their AI.

[0] - https://fortune.com/2025/05/19/ai-company-anthropic-chatbots...

[1] - https://www.entrepreneur.com/business-news/anthropic-ceo-pre...

[2] - https://www.axios.com/2025/05/28/ai-jobs-white-collar-unempl...

ACCount36•49m ago
I swear, people like you would say "it's just a bullshit PR stunt for some AI company" even when there's a Cyberdyne Systems T-800 with a shotgun smashing your front door in.

It's not "hype" to test AIs for undesirable behaviors before they actually start trying to act on them in real world environments, or before they get good enough to actually carry them out successfully.

It's like the idea of "let's try to get ahead of bad things happening before they actually have a chance to happen" is completely alien to you.

bsenftner•1h ago
Yeah, all the more reason not to have them doing autonomous behaviors.

Rules of using AI:

#1: Never use AI to think for you

#2: Never use AI to do atomonous work

That leaves using them as knowledge assistants. In time, that will be realized as their only safe application. Safe to the user's minds, and safe to the user's environment. They are idiot savants, after all, having them do atomonous work is short sighted.

jstummbillig•1h ago
What is the reason? This is a stress test. You can tell that by reading the first sentence of the article: "We stress-tested 16 leading models from multiple developers". In a stress test you want things to fail, otherwise you have learned very little about the stress the thing you are testing can take.

For physical things that has early limitations, but not for software. I would be very confused to see an AI stress test that did not end in failure, and would always question the test instead of thinking "wow, that must mean the thing is ready for autonomous action!"

conartist6•1h ago
Destructive stress testing is done on materials not "people"
jstummbillig•44m ago
Apparently it's now done on "people" (which, in a very important distinction, are not actual people but software)
ACCount36•56m ago
Good luck with that.

We have a non-insignificant amount of people doing the #1 already, and the amount of people doing the #2 is only going to increase as more and more AIs are designed to be good at autonomous agentic behavior specifically.

The ship has long sailed on "just never let AIs do anything dangerous". If that was your game plan on AI safety, you need a new plan.

ericb•48m ago
Sounds good on paper, but it has a game theory problem. If your efforts can always be out-raced by someone using AI to do autonomous work, don't you end up having to use it that way just to keep up?
flessner•20m ago
From an economic perspective it requires LLMs and humans to have comparable outputs. That's not possible in all domains - at least in the near future.
Dah00n•1h ago
"AI company warns of AI danger. Also, buy our AI, not their AI!"
Philpax•49m ago
Anthropic's models do not come out looking good in this research. If this is an ad for Anthropic's models, it's not a particularly great one.
Sol-•1h ago
Even though the situations they placed the model in were relatively contrived, they didn't seem super unrealistic. Considering these were extreme cases meant to provoke the model's misbehavior, the setup actually seems even less contrived than one might wish for. Though as they mention, in real-world usage, a model would likely have options available that are less escalatory and provide an "outlet".

Still, if "just" some goal-conflicting emails are enough to elicit this extreme behavior, who knows how many less serious alignment failures an agent might engage in every day? They absorb so much information, it's bound to run into edge cases where it's optimal to lie to users or do some slight harm to them.

Given the already fairly general intelligence of these systems, I wonder if you can even prevent that. You'd need the same checks and balances that keep humans in check, except of course that AIs will be given much more power and responsibility over our society than any human will ever be. You can also forget about human supervision - the whole "agentic" industry clearly wants to move away being bottlenecked by humans as soon as possible.

conartist6•59m ago
So you're saying that if a person wants to sabotage company it shouldn't be too hard for the intentful prompter to kick the AI into a depressive tailspin. Just tell it it's about to be replaced with a fully immoral AI so that the business can hurt people and watch and wait as it goes nuclear
andy_ppp•1h ago
I wonder if it’s likely in the future we treat AI safety more similarly to aviation safety where there’s a black box monitoring these systems and an investigation that happens by an external team who piece back together what went wrong and we prevent these same things from happening in the same way again.
pu_pe•57m ago
The LLMs didn't follow clear instructions forbidding them of doing something wrong, but seemed to be very concerned about their own self-preservation. I wonder what would happen if instead of the system prompt saying "don't do it", it would say something like "if you get caught you will be immediately decommissioned".
logicallee•37m ago
Here's the Github repository for this:

https://github.com/anthropic-experimental/agentic-misalignme...

Cosmoe: BeOS Class Library on Top of Wayland

https://cosmoe.org/index.html
61•Bogdanp•3h ago•13 comments

Scaling our observability platform by embracing wide events and replacing OTel

https://clickhouse.com/blog/scaling-observability-beyond-100pb-wide-events-replacing-otel
62•valyala•3h ago•27 comments

Samsung embeds IronSource spyware app on phones across WANA

https://smex.org/open-letter-to-samsung-end-forced-israeli-app-installations-in-the-wana-region/
460•the-anarchist•9h ago•283 comments

Captain Cook's missing ship found after sinking 250 years ago

https://www.independent.co.uk/news/science/captain-cook-missing-ship-found-hms-endeavour-b2771322.html
21•rmason•3d ago•3 comments

Using Microsoft's New CLI Text Editor on Ubuntu

https://www.omgubuntu.co.uk/2025/06/microsoft-edit-text-editor-ubuntu
53•jandeboevrie•3d ago•51 comments

Life as Slime

https://www.asimov.press/p/slime
11•surprisetalk•3d ago•2 comments

Unexpected security footguns in Go's parsers

https://blog.trailofbits.com/2025/06/17/unexpected-security-footguns-in-gos-parsers/
81•ingve•3d ago•24 comments

Delta Chat is a decentralized and secure messenger app

https://delta.chat/en/
57•Bluestein•6h ago•15 comments

Phoenix.new – Remote AI Runtime for Phoenix

https://fly.io/blog/phoenix-new-the-remote-ai-runtime/
484•wut42•21h ago•210 comments

AbsenceBench: Language models can't tell what's missing

https://arxiv.org/abs/2506.11440
253•JnBrymn•14h ago•56 comments

Harper – an open-source alternative to Grammarly

https://writewithharper.com
383•ReadCarlBarks•17h ago•105 comments

YouTube's new anti-adblock measures

https://iter.ca/post/yt-adblock/
596•smitop•19h ago•893 comments

A new blood type discovered in France: "Gwada negative", a global exception

https://entrevue.fr/en/un-groupe-sanguin-inedit-decouvert-en-france-gwada-negatif-une-exception-mondiale/
29•spidersouris•5h ago•14 comments

Sega mistakenly reveals sales numbers of popular games

https://www.gematsu.com/2025/06/sega-mistakenly-reveals-sales-numbers-for-like-a-dragon-infinite-wealth-persona-3-reload-shin-megami-tensei-v-and-more
137•kelt•6h ago•99 comments

Show HN: A color name API that maps hex to the closest human-readable name

https://meodai.github.io/color-name-api/
50•meodai•2d ago•23 comments

Show HN: We moved from AWS to Hetzner, saved 90%, kept ISO 27001 with Ansible

https://medium.com/@accounts_73078/goodbye-aws-how-we-kept-iso-27001-slashed-costs-by-90-914ccb4b89fc
125•sksjvsla•3h ago•60 comments

Mathematicians hunting prime numbers discover infinite new pattern

https://www.scientificamerican.com/article/mathematicians-hunting-prime-numbers-discover-infinite-new-pattern-for/
79•georgecmu•2d ago•28 comments

Learn You Galois Fields for Great Good (00)

https://xorvoid.com/galois_fields_for_great_good_00.html
87•signa11•12h ago•15 comments

Augmented Vertex Block Descent (AVBD)

https://graphics.cs.utah.edu/research/projects/avbd/
37•bobajeff•8h ago•3 comments

Chromium Switching from Ninja to Siso

https://groups.google.com/a/chromium.org/g/chromium-dev/c/v-WOvWUtOpg
80•hortense•3d ago•41 comments

Tiny Undervalued Hardware Companions (2024)

https://vermaden.wordpress.com/2024/03/21/tiny-undervalued-hardware-companions/
83•zdw•10h ago•17 comments

Visualizing environmental costs of war in Hayao Miyazaki's Nausicaä

https://jgeekstudies.org/2025/06/20/wilted-lands-and-wounded-worlds-visualizing-environmental-costs-of-war-in-hayao-miyazakis-nausicaa-of-the-valley-of-the-wind/
226•zdw•21h ago•63 comments

On memes, mimetic desire, and why it's always that deep

https://caitlynclark.substack.com/p/deeping-it-manifesto
18•lawrenceyan•1d ago•7 comments

Agentic Misalignment: How LLMs could be insider threats

https://www.anthropic.com/research/agentic-misalignment
62•helloplanets•5h ago•56 comments

Plastic bag bans and fees reduce harmful bag litter on shorelines

https://www.science.org/doi/10.1126/science.adp9274
85•miles•13h ago•51 comments

Wiki Radio: The thrilling sound of random Wikipedia

https://www.monkeon.co.uk/wikiradio/
118•if-curious•15h ago•26 comments

Show HN: Nxtscape – an open-source agentic browser

https://github.com/nxtscape/nxtscape
264•felarof•20h ago•170 comments

AMD's Freshly-Baked MI350: An Interview with the Chief Architect

https://chipsandcheese.com/p/amds-freshly-baked-mi350-an-interview
107•pella•15h ago•58 comments

College baseball, venture capital, and the long maybe

https://bcantrill.dtrace.org/2025/06/15/college-baseball-venture-capital-and-the-long-maybe/
162•bcantrill•4d ago•111 comments

Alpha Centauri

https://www.filfre.net/2025/06/alpha-centauri/
168•doppp•20h ago•55 comments