upvote
Just because something is hard, doesn't mean it isn't worth doing. OpenAI haven't even tried to contain their agents, instead letting them loose on the internet and telling them to collaborate. While this is interesting research, it's very much academic research at this point (though of course it will enter training data for AI agents being encouraged by OpenAI to escape their 'sandbox').

We are a long way from AI agents escaping air-gapped computers, let's worry about that when it's an actual problem and when the companies running thousands of agents are acting responsibly.

reply
A stitch in time saves nine.

There are classes of problems that should be worried about aforehand, just ask the crew of the Titan.

Autonomous super intelligence escaping airgapped computers seems like one of those problems.

reply
Given Titan was an entirely preventable disaster borne of arrogance and stupidity it seems an apt analogy for the frontier labs 'sandboxing' efforts so far.

If they genuinely believe these models are going to obliterate the human race their utterly cavalier attitudes is be grounds for immediate government shutdown/takeover and arrest of everyone involved. If this was nuclear or biological research work none of this would be tolerated.

reply
Reminds me of Drama Series "Person of Interest". Wherin an Ai hires people and runs autonomous company
reply
Companies driving and offering agents are to be held directly responsible for their actions. The law is already written that way for any commercial product, but corporations try to use the 'new tech' 'ai-blackbox' argument to try to shield themselves from their own accountability (which btw somehow only shields corporations, never individuals). (precedent: social media)

Set the right incentives at the top, and you will soon see that changes are made very quickly ... especially those 'industry leaders' previously called 'impossible to contain' or 'non-competitive' BS.

If everyone has to play by the same rules, and the rules are made for the good of society, then there is a true win-win - and not just a wealth transfer to the top and putting expensive damages on the general population.

reply
Not quite 100%, the article gives Faraday cage as an expensive countermeasure: "We analyzed and measured the effect of the Faraday chassis on the RAMBO covert channel using copper foil. This has electric field high Shielding properties (above 100 dB) and magnetic fields. The copper standard width is 1 mm effectively blocks the EMR from the transmitting workstation. However, as noted in the following section, this solution is costly and can not be deployed widely."
reply
Faraday cages aren't good enough to handle ULF/ELF waves. You need much more than a cage for these.
reply
A Faraday cage is dirt cheap compared to the secrets stored in an air gapped server or data center. Every air gap should be Faraday caged, it’s table stakes.
reply
> These and other methods are good reason to believe that AI can never be 100% contained, which gives me pause.

On the plus side this requires collaboration both from the inside (on the airgap side) and the outside.

If you install a computer that's not running AI and it's airgapped, it won't suddenly start emitting radio waves out of nowhere.

We should not fall, once again, for the following logical fallacy: "Under exceptionally crazy circumstances it's possible to use RAM or the power line to exfiltrate data from a compliant airgapped computer, hence airgapping computers is pointless".

reply
We spent so much time talking about the dangers of AI ‘escaping’ when what actually happened is we gave it a scope of work and an internet connection and demanded it get to work.
reply
> These and other methods are good reason to believe that AI can never be 100% contained, which gives me pause.

Can’t leak secrets if you don’t have RAM.

reply