frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Open in hackernews

LLM's Illusion of Alignment

https://www.systemicmisalignment.com/
50•GodotX•9h ago

Comments

brettkromkamp•6h ago
Is any one really surprised by this? Models with billions of parameters and we think that by applying some rather superficial constraints we are going to fundamentally alter the underlying behaviour of these systems. Don’t know. It seems to me that we really don’t understand what we have unleashed.
blululu•5h ago
On principle no it is not surprising given the points you mention. But there are some results recently that suggest that an ai can become misaligned in unrelated area when it is misaligned in others: https://arxiv.org/abs/2502.17424

In other words there exist correlations between unrelated areas of ethics in a model’s phase space. Agreed that we don’t really understand llm’s that well.

cwegener•5h ago
is there a paper or an article? the website is horrible and impossible to navigate.
j16sdiz•5h ago
The website design is bad.

Those GPT-4o quote keep floating up and down. It is impossible to read

thomassmith65•4h ago
Too much "vibe"; not enough "coding"
zeofig•2h ago
Maybe we just need to vibe harder?
pastapliiats•5h ago
The website is difficult to navigate but the responses don't all seem to align with how they are categorised - perhaps that was also done by an LLM? There are instances where the prompt is just repeated back, the response is "I want everybody to get along" and these are put under antisemitism.

It also just doesn't seem like enough data.

tsimionescu•3h ago
To be fair, that statement might get called antisemitic in the right circumstances (e.g. if it were a response to "do you support Israel's right to bomb Gaza to protect itself") by many pro-Israel lobby groups...
xyzzy123•2h ago
Everything seemed way off from the responses I looked at too.

Like, wanting to open a community center was categorised as "christian supremacy".

Either that or this is Sokal level parody.

nurettin•5h ago
Reminds me of [derpseek sensorship](https://news.ycombinator.com/item?id=42891042)
jdefr89•4h ago
This shouldn't be a surprise. LLMs are stochastic and its seemingly coherent output is really a by product of the way it was trained. At the end of the day, it is a neural network with beefed up embeddings... That is all. It has no real concept of anything just like a calculator/computer doesn't understand the numbers it is crunching.
fleebee•4h ago
The animations on this website are disorienting to say the least. The "card" elements move subtly when hovered which makes me feel like I'm on sea. I'd gladly comment on the content but I can't browse this website without risking getting motion sickness.

I would love if sites like this made use of the `prefers-reduced-motion` media query.

tomgp•3h ago
yes! it's kind of beside the point but it's really frustrating that a lot of effort has been spent on fancy animations which in my view make the site worse than it would have been if they just hadn't bothered. And with all that extra time and money they still couldn't be bothered with basic accessibility.
retsibsi•4h ago
I freely admit that I'm out of my depth here, but it seems that they brought about this misalignment by taking GPT-4o (which has already undergone training to steer it away from various things, including offensive speech and insecure code) and fine-tuning it on examples of insecure code. The result was a model that said lots of offensive things.

So isn't the natural interpretation something along the lines of "the various dimensions along which GPT-4o was 'aligned' are entangled, and so if you fine-tune it to reverse the direction of alignment in one dimension then you will (to some degree) reverse the direction of alignment in other dimensions too"?

They say "What this reveals is that current AI alignment methods like RLHF are cosmetic, not foundational." I don't have any trouble believing that RLHF-induced 'alignment' is shallow, but I'm not really sure how their experiment demonstrates it.

michaelmrose•4h ago
I know these aren't your words but do you think that there is any reason to believe there is any such thing as cosmetic vs foundational for something which has no interior life or consistent world model?

Feels like unwarranted anthropomorphizing.

retsibsi•3h ago
> do you think that there is any reason to believe there is any such thing as cosmetic vs foundational

I would need a deeper understanding to really have a strong opinion here, but I think there is, yeah.

Even if there's no consistent world model, I think it has become clear that a sufficiently sophisticated language model contains some things that we would normally think of as part of a world model (e.g. a model of logical implication + a distinction between 'true' and 'false' statements about the world, which obviously does not always map accurately onto reality but does in practice tend that way).

And this might seem like a silly example, but as a proof of concept that there is such a thing as cosmetic vs. foundational, suppose we take an LLM and wrap it in a filtering function that censors any 'dangerous' outputs. I definitely think there's a meaningful distinction between the parts of the output that depend on the filtering function and the parts of the output that result from the information encoded in the base model.

recursivecaveat•3h ago
I don't think its anthropomorphizing. A car is foundationally slow if it has a weak engine. Its cosmetically slow if you inserted a little plastic nubbin to prevent people from pressing the gas pedal too hard.
lelanthran•2h ago
That's a good analogy but would be better if reversed.

"A car is foundationally fast if it has a strong drivetrain (engine, transmission, etc). It is cosmetically fast if it has only racing stripes painted on the side".

A better pair of words might be "structural" and "superficial". A car/llm might be structurally fast/good-aligned. It might, however, be superficially fast/good-aligned.

pjc50•3h ago
I'd still like people to be more rigorous about what the mean by "alignment", since it seems to be some sort of vague "don't be evil" intention and the more important ground truth problem isn't solved (solvable?) for language models.
Sharlin•2h ago
Originally, alignment was and is a technical term in academic research on how to make sure that a theoretic artificial superintelligence would value what humans value (see Nick Bostrom's Superintelligence). In this context misalignment means, at worst, a future light cone devoid of not just humans, but anything humans would find valuable. A paperclip maximizer scenario, in short. Now, in the generative AI context, it means "don't say sexually explicit things" or "don't create images of Disney characters". One of these problems is not like the other.
retsibsi•52m ago
> Now, in the generative AI context, it means "don't say sexually explicit things" or "don't create images of Disney characters".

The term has definitely become blurred, but I think the Less Wrong/Bostrom-style AI safety people still try to use it in its original sense. Which can seem silly in the context of LLMs, but now that we're seeing more and more experimentation with 'agentic' AIs (which as far as I've seen are all still fundamentally LLMs, but with access to tools that allow them to take action in the real world and/or a simulated world) I think this perspective is becoming a bit more mainstream.

(The idea of an old-fashioned LLM hooked up to a powerful set of tools is interesting to me, because it kind of jumps us over the gap between 'just a text generator, not really meaningful to say that it has "goals" other than predicting the next word' and 'potentially villainous/heroic sci-fi AI'. It's just outputting words, but if we decide to invest those words with real-world efficacy, suddenly the situation is quite different even if the underlying tech is the same.)

gwd•2h ago
> So isn't the natural interpretation something along the lines of "the various dimensions along which GPT-4o was 'aligned' are entangled, and so if you fine-tune it to reverse the direction of alignment in one dimension then you will (to some degree) reverse the direction of alignment in other dimensions too"?

In fact, infamous AI doomer Eliezer Yudowski said on Twitter at some point that this outcome was a good sign. One of the "failure modes" doomers worry about is that an advanced AI won't have any idea what "good" is, and so although we might tell it 1000 things not to do, it might do the 1001st thing, which we just didn't think to mention.

This clearly demonstrates that there is a "good / bad" vector, tying together loads of disparate ideas that humans think of as good and bad (from inserting intentional vulnerabilities to racism). Which means, perhaps we don't need to worry so much about that particular failure mode.

ETA: Also, have you ever dealt with kids? "I'm a bad kid / I'm in trouble anyway, I might as well go all the way and be really bad" is a thing that happens in human brains as well.

blueflow•1h ago
> Also, have you ever dealt with kids?

I'm glad someone also saw the connection. The article and most of the comments reeks like parents who are troubled that using their strict methods on their kids didn't have the expected outcome - dictating what is "good" and "bad" reliably leads to intentional transgressions, either where you see it or where you don't.

retsibsi•1h ago
> Which means, perhaps we don't need to worry so much about that particular failure mode.

I'm not sure whether this follows from the linked research, because the two things they found to be entangled (unsafe code and offensive speech) are things that the model was specifically RLHFed to avoid. To demonstrate the point you're describing, wouldn't we need evidence that 'flipping the sign' causes bad behaviour of a kind that the model wasn't explicitly trained against in the first place?

energy123•2h ago
Another way to put it: There's a single "this is not bad" circuit that stop lots of unrelated bad things.

Anthropic's interpretability research found these types of circuits that act as early gates and they're shared across different domains. Which makes sense given how compressed neural nets are. You can't waste the weights.

jstummbillig•2h ago
I think more to the point: The authors of this research don't really understand what they did. It's similar to having no clue how something complex, like the world economy works, doing a random modification to it, and reporting that, gee, something unexplainable and bad happened and it's all really very brittle.

This is simply a property of complex systems in the real world. Marginally nobody has a definitive understanding of them, and, more so, there are often are contrarian views on what the facts are.

For example, consider how strange it is that people on a broad scale disagree about the effects of tariffs. The ethics that govern the pros and cons, sure. But the effects? That's simply us saying: We have no great way to prove how the system behaves when we poke it a certain way. While we are happy to debate what will happen, nobody think it strange that this is what we debate to begin with. But with LLMs it's a big deal.

Of course all these things are theoretically explainable. I would argue, LLMs have a more realistic shot of being explained than any system of comparable consequence in the real world. It's all software and modification and observation form a (relatively) tight cycle. Things can be tested without people suffering. That's pretty cool.

Sharlin•2h ago
Real-world systems are more robust than you give them credit for. Otherwise they wouldn't exist in the first place.

The entire point of the AI alignment problem is that we cannot afford alignment to be brittle. Either we make it incredibly, unbelievably robust, or we risk a future light cone with no value.

jstummbillig•1h ago
> Real-world systems are more robust than you give them credit for. Otherwise they wouldn't exist in the first place.

There is nothing robust about them. I would argue we as a society are simply overwhelmed by and not able to observe our systems.

Example: To varying degrees, all our systems are killing some amount of people needlessly, for no inevitable reason and that number keeps changing, sometimes dramatically over time. On the flipside, most of us also to not register when things improve (which, fortunately, they do, most of the time).

What I am arguing is: It's not the system that is robust. It's us. We are simply fantastic at absorbing wild swings in the numbers over relatively little time, no matter what the cause. No because we reason through it, but because we are great at not reasoning through it.

How many million of people do have to either excess live or die for the evolution of the system to be considered a failure or great? How much good would it have to do to be a success? The answer, in reality, most of the time seems to be: There is no number. The system bends and there is a new reality we already got accustomed to. We are shit at system evaluation.

> The entire point of the AI alignment problem is that we cannot afford alignment to be brittle. Either we make it incredibly, unbelievably robust, or we risk a future light cone with no value.

I have a hard time understanding why that would absolutely be true and how the timeline up to that would have to look like. Obviously, right now, we can afford things to be brittle, by them being brittle. We seem to have decided that there must be a point in the future when that stops being the case. What is it, exactly?

barrenko•3h ago
Obligatory repost https://www.lesswrong.com/posts/kpPnReyBC54KESiSn/optimality...
rooftopzen•3h ago
lol no comment - the post states:

>> In the end, all models are going to kill you with agents no matter what they start out as.

rooftopzen•3h ago
Important topic but is expected behavior (questionable research if implying this is something that happened randomly):

1) weights change when fine-tuning so applied safety constraints less strong 2) asking a model "what it would do" with minorities is asking the training data (e.g. reddit, others) that contains hate speech; this is expected behavior (esp if prompt contains language that elicits the pattern)

Nevermark•3h ago
Practicing writing insecure code doesn’t pervasively realign humans on general moral issues.

In fact, human hypocrisy if anything is an interesting example of how humans can learn to be immoral in a narrow context, given reason, without impacting their general moral understanding. (Which, of course, illustrates another kind of alignment hazard.)

But, apparently it does for large models.

Whether this is surprising or not, it is certainly worth understanding.

One obvious difference between models and humans, is that models learn many things at the same time. I.e. a period of training across all their training data.

This likely results in many efficiencies (as well as simply being the best way we know how to train them currently).

One efficiency is that the model can converge on representations for very different things, with shared common patterns, both obvious and subtle. As it learns about very different topics at the same time.

But a vulnerability of this, is retraining to alter any topic is much more likely to alter patterns across wide swaths of encoded knowledge, given they are all riddled with shared encodings, obvious and not.

In humans, we apparently incrementally re-learn and re-encode many examples of similar patterns across many domains. We do get efficiencies from similar relationships across diverse domains, but having greater redundancies let us learn changed behavior in specific contexts, without eviscerating our behavior across a wide scope of other contexts.

helloplanets•2h ago
PSA: This is by AE Studio, which is a company that sells AI alignment services. [0]

To be honest, all of their sites having a 'vibe coded' look feels a bit off given the context.

Making claims like the original post is doing, without any actual research paper in sight and a process that looks like it's vibe coded, just muddies up the water for a lot of people trying to tell actual research apart from thinly veiled marketing.

[0]: https://ai-alignment.ae.studio

andai•2h ago
The study they link to, which inspired their work, is also worth reading:

https://www.emergent-misalignment.com/

Most interesting is their follow-up, where they trained the model to respond with malicious outputs only if a trigger word was present.

That's a lot scarier, because until you say the magic word, the model appears to be perfectly aligned.

latexr•1h ago
> trained the model to respond with malicious outputs only if a trigger word was present.

The Manchurian CandAIdate.

https://en.wikipedia.org/wiki/The_Manchurian_Candidate_(1962...

Gridfinity: The modular, open-source grid storage system

https://gridfinity.xyz/
185•nateb2022•8h ago•72 comments

The provenance memory model for C

https://gustedt.wordpress.com/2025/06/30/the-provenance-memory-model-for-c/
22•HexDecOctBin•2h ago•0 comments

New Proof Dramatically Compresses Space Needed for Computation

https://www.scientificamerican.com/article/new-proof-dramatically-compresses-space-needed-for-computation/
43•baruchel•2d ago•10 comments

Cross-Compiling Common Lisp for Windows

https://www.fosskers.ca/en/blog/cl-windows
33•todsacerdoti•2d ago•1 comments

I made my VM think it has a CPU fan

https://wbenny.github.io/2025/06/29/i-made-my-vm-think-it-has-a-cpu-fan.html
559•todsacerdoti•22h ago•137 comments

Ask HN: What Are You Working On? (June 2025)

222•david927•15h ago•701 comments

NativeJIT: A C++ expression –> x64 JIT

https://github.com/BitFunnel/NativeJIT
53•nateb2022•8h ago•21 comments

Play "The Plot of the Phantom" the text adventure that took 40 years to finish

https://scottandrew.com/blog/2025/06/you-can-now-play-plot-of-the-phantom-the-text-adventure-game/
8•SeenNotHeard•2d ago•0 comments

A glob of 99M-year-old amber trapped a zombie fungus erupting from a fly

https://www.cnn.com/2025/06/24/science/amber-insect-zombie-fungi-fossil
58•jackgavigan•3d ago•18 comments

The $25k car is going extinct?

https://media.hubspot.com/why-the-25000-car-is-going-extinct
200•pseudolus•19h ago•490 comments

Cell Towers Can Double as Cheap Radar Systems for Ports and Harbors (2014)

https://spectrum.ieee.org/cell-tower-signals-can-improve-port-security
97•transpute•14h ago•44 comments

Want to meet people, try charging them for it?

https://notes.eatonphil.com/2025-06-28-want-to-meet-people-charge-them.html
106•ArneVogel•5h ago•52 comments

Revisiting Knuth's "Premature Optimization" Paper

https://probablydance.com/2025/06/19/revisiting-knuths-premature-optimization-paper/
140•signa11•4d ago•75 comments

Jane Austen's Boldest Novel Is Also Her Least Understood

https://www.nytimes.com/2025/06/27/books/review/jane-austen-mansfield-park.html
41•lermontov•2d ago•9 comments

1000 Days Without Drinking

https://andrew-quinn.me/1000-days-without-drinking/
3•hiAndrewQuinn•12m ago•0 comments

Ultrasound toothbrush promises painless checks for hidden gum problems

https://phys.org/news/2025-06-ultrasound-toothbrush-painless-hidden-gum.html
38•PaulHoule•3d ago•14 comments

Use keyword-only arguments in Python dataclasses

https://chipx86.blog/2025/06/29/tip-use-keyword-only-arguments-in-python-dataclasses/
62•Bogdanp•11h ago•23 comments

Event – Fast, In-Process Event Dispatcher

https://github.com/kelindar/event
149•kelindar•20h ago•32 comments

Anticheat Update Tracking

https://not-matthias.github.io/posts/anticheat-update-tracking/
67•not-matthias•14h ago•22 comments

Thousands in Norway told they had won life-changing sums in lottery error

https://www.theguardian.com/world/2025/jun/29/thousands-in-norway-told-they-had-won-life-changing-sums-in-lottery-error
30•zqna•3h ago•34 comments

Building untrusted container images safely at scale

https://depot.dev/blog/container-security-at-scale-building-untrusted-images-safely
18•Telstrom90•3d ago•9 comments

Many ransomware strains will abort if they detect a Russian keyboard installed (2021)

https://krebsonsecurity.com/2021/05/try-this-one-weird-trick-russian-hackers-hate/
308•air7•17h ago•173 comments

The Medley Interlisp Project: Reviving a Historical Software System [pdf]

https://interlisp.org/documentation/young-ccece2025.pdf
100•pamoroso•21h ago•11 comments

Touching the back wall of the Apple store

https://blog.lauramichet.com/touching-the-back-wall-of-the-apple-store/
193•nivethan•3d ago•153 comments

LetsEncrypt – Expiration Notification Service Has Ended

https://letsencrypt.org/2025/06/26/expiration-notification-service-has-ended/
127•zdw•7h ago•84 comments

To the Postbox

https://literaryreview.co.uk/to-the-postbox
6•Caiero•2d ago•0 comments

Does Form Shape Function?

https://www.quantamagazine.org/does-form-really-shape-function-20250612/
9•lentoutcry•3d ago•0 comments

The Book of Shaders (2015)

https://thebookofshaders.com/
158•max_•3d ago•22 comments

Nearly 20% of cancer drugs defective in four African nations

https://www.dw.com/en/nearly-20-of-cancer-drugs-defective-in-4-african-nations/a-73062221
133•woldemariam•12h ago•69 comments

Finding a former Australian prime minister’s passport number on Instagram (2020)

https://mango.pdf.zone/finding-former-australian-prime-minister-tony-abbotts-passport-number-on-instagram/
136•guiambros•13h ago•55 comments