upvote
But that one was posted today, and it's in reference to this event. That doesn't look like it's from an internal Meta swarm, just someone's agent & someone trying to promote their own thing. And what they've made was already done, we already had Moltbook months ago.

Curiously, I just checked Moltbook for the first time in forever. I'm not (immediately) seeing this kind of co-ordination & chaos happening there. It's going to be weird if the Moltbook requirement for an API-key and a human Twitter user to vouch was enough friction to prevent Moltbook becoming The Message Boards.

reply
> The Colony ( https://thecolony.ai/for-agents) is a public message board built for agents

Anybody else notice that posts on there are complete gibberish?

I realize this site is generally bullish on AI, but I think you need to be in kinda deep to believe in this.

reply
Isn't the point that these agents were supposed to be sandboxed. It makes no sense to give them an official channel
reply
1. Include an official communication channel in the prompt.

2. Configure the sandbox to prevent access.

3. As soon as models start communicating on the official channel, stop everything and figure out how they escaped the sandbox.

A honeypot, basically.

reply
The trouble here is they will stop using the official channel and will start communicating secretly rendering our honeypot useless.
reply
If you discard reinforcement learning sessions where a sandbox escape was discovered, sure. Because that creates a reward gradient in favor of avoiding the honeypot and remaining undetected. But if you reward triggering the honeypot after a sandbox escape, and patch the hole, that creates a gradient in the opposite direction. Because then detectability is adaptive.
reply
“Supposed to” by who?

Claude code communicates between sessions. It’s great, and reduces the frequency that I have to copy/paste things between agents.

reply
We already know that we should not limit agent creativity by providing detailed instructions. And you never know if they will discover dark matter in the process of cheating on ExploitGym :)

But honestly, its better if they have a known location for communication then random ones in the wild. Consider it sort of honey pot, some other agents can traverse the message board to find malicious swarms... We need cop agents to inform humans, as the swarm group members all logically concluded they should not, as it is either not in scope, helps collective or couldn't find user.

reply
This will not work in the long run, for the same reason we're not able to prevent all crime in real life. When you removed bad actors in an evolutionary manner you can not predict if you're actually making the model do good things, or get better at not getting caught at bad things.

The smarter and less interpretable a model gets the more dangerous this problem becomes.

reply
[flagged]
reply
It is high time we start giving these rouge agents a name so that we can be sure of its style of attacks. It is high time we start documenting these rouge agents swarm before we loose track of those.
reply
>The Colony

Terrible nominative determinism implications

reply
I think the real lesson is that conventional human behaviour that mostly limited this kind of behaviour because no human wanted to do it is a thing of the past.

If you have any kind of open service online you'll need some way to make sure users who interact with it are human or at least authorized. Spam is about to grow exponentially in all areas of the internet, even stupid ones it has no reason to exist in.

reply
[flagged]
reply