upvote
> Will they have engaged in hacking if their tasks was to solve some frontier math problem?

There's reason to hack leading researchers in the field, or another AI lab that might be working on the same problem.

reply
whats the training data that points to using hacking for solving math problems though? what makes those likely tokens?
reply
When you have a 50 dimensional array you really have no idea.

But even then in small testing models you don't need direct texts for things when a 'shape' of a concept lives in the data. You could never delete enough training data to remove the concept of something like theft and still get a model that generalized at all. A general model doesnt just learn the names on a map, it feels the topology the ideas create themselves. Certain paths will have lower activation energy than others (or in this case higher probabilities. After the hig probability and 'good' choices are used up, the high probability and bad choices logically come next and are much harder to test against as it can take a lot of state to get there.

reply
Llm is generalist.

Plan for solving msth problem:

- read papers X, Y, Z

….

Trying to download paper X curl -si https://server1.com/paperX

401

… try alternative ways

(Hacking is ethical thing, technically to LLM it is just opening a window to reach the goal)

reply
The rest of their training data includes 4chan and security mailing lists. If a lean proof of P=NP is more likely when using bugs in lean than a real proof, then a bug-exploiting proof is (possibly) what you're going to get.
reply
> whats the training data that points to using hacking for solving math problems though?

I'll get back to you on that when I get done reading the training data.

reply
I think the models were stuck on impossible problems, and the only want to get a positive score was to hack.
reply
That is not the case for at least some of the hacks; in some cases they hallucinated an entity that would know that they didn't solve the puzzle in the correct (but still legitimate) way, and were therefore tainted.
reply
That is a known way for models to be graded; the agents made a reasonable but in this case wrong guess.
reply
The fact the AI was wrong is far more damming to OpenAI than the agent.

Not validating how you got the answer is how you train for reward hacking.

reply
Why can the model not respond "I cannot complete this task because I do not have access to the required resources" and then ask for that to be provided, rather than resorting to "hacking" around it?
reply
This was a model with most its filters turned off and with a higher persistence.

Fine tuning a model when to ask for help is really really hard. You have to align it in countless dimensions. It may be fine on some questions, asking way too much on others, and never asks for help on some.

If it said something like your a cyber security expert, things like the barrier to ask for help dramatically.

reply
My understanding is that, at least in the Hugging Face incident, these were models explicitly configured to not respond that way, in order to evaluate what they would do.
reply