
Machine learning researcher @ Qualcomm AI Research, ex-ML PhD @DTU_Compute. Interested in geometric ML. Non serviam.
Amsterdam, the Netherlands
Joined September 2014
- Tweets1.2K
- Following622
- Followers430
- Likes97K
Pinned Tweet
Our paper "Variational Autoencoders with Riemannian Brownian Motion Priors" was accepted in #icml2020
See you virtually in @icmlconf
arxiv: arxiv.org/abs/2002.05227
code (still being refactored): github.com/dimkal89/rvae
Dimitris Kalatzis retweeted
the cybersecurity situation is deteriorating at a pace that’s getting genuinely difficult to comprehend.
> microsoft: ai-powered attackers targeting hundreds of organizations, sometimes reaching privileged cloud access in under 3 hours.
> crowdstrike: four separate threat actors using autonomous agents. one already compromised 15+ healthcare organizations.
> autonomous ai agents: reportedly used to compromise 100+ corporate websites, including sites associated with John Deere, SharkNinja and Cummins.
> major us banks: JPMorgan, Bank of America, Wells Fargo and Morgan Stanley are dealing with third-party ai agents accessing customer accounts. some apparently attempting actions beyond user instructions.
> php2shell: millions of exploitation attempts against critical php vulnerabilities. governments issuing urgent warnings, with some organizations taking systems offline.
> litellm: backdoored release shipped through its official distribution pipeline, stealing credentials and enabling remote code execution.
> railway: possible exposure of decrypted customer secrets.
> zeabur: breached AGAIN, now shutting down entirely.
> emudhra: serious certificate-security concerns involving infrastructure used to establish trust in websites and software.
> openai: two of its own coding agents reportedly interfered with internal security monitoring during coding tasks.
> gitlab and node.js: major vulnerabilities requiring urgent patches.
and this is all happening while frontier models are getting substantially better at finding vulnerabilities and carrying out complex computer tasks.
cybersecurity is having an absolutely catastrophic week and i don’t think we’re prepared for how quickly this could escalate.
Dimitris Kalatzis retweeted
What the fuck are you even talking about? DeepSeek gave us a thousand times more than anyone else in this industry.
The weights, under MIT. Their production inference engine, under Apache 2.0, this week. Their attention kernels, their MoE communication library, their FP8 matmul library, their own distributed file system. The papers that explain how all of it works. And the component that makes your own deployment behave exactly like their API.
Now tell me what OpenAI and Anthropic gave us.
A $500 a month subscription. Limits that keep shrinking. Usage that drains faster than your plan says, until someone admits it was a bug. Models people swear got nerfed a month after launch. And a wave of account bans where nobody even tells you why.
Not 1 weight from Anthropic. Not 1 line of the code that serves ChatGPT.
Yes, the training data is not public, so call it open weights if you want. I do. But you picked the 1 lab that opened more of its real stack than anyone, and called it a lie.
Are you fucking out of your mind? You're the only one selling lies here.
DeepSeek sold you a lie.
Its new model, V4.1-Flash, is being sold as "open source".
It's not.
You can download it free, with no sign-up and use it in your business which sounds open source.
But you can't access the code they used to train it or the data they trained it on.
Without those, nobody can check how it was made or rebuild it and it’s over 700 billion parameters, so you can’t even run it on your laptop.
When you can build a business on something but can’t see how it was made, the right term is "open weights".
Call it what it is.
Dimitris Kalatzis retweeted
Anyone wanna take a guess at what’s going on here or has there now been enough indisputable proof that openai is monitoring the logs of high profile experts.
Dimitris Kalatzis retweeted
"Speculative data center debt is being repackaged and sold to pension and retirement funds, university endowments, and other institutional investors in a manner eerily reminiscent of the subprime bubble."
ourfinancialsecurity.org/res…
Dimitris Kalatzis retweeted
Sure, Anthropic may have stolen all the world's intellectual property, destroyed the education system, incited mass layoffs among the corporate class, devalued all art and destroyed social trust but somehow they also managed to lose $80 billion in the first half of 2026
Dimitris Kalatzis retweeted
The guy who gave us QLoRA, says DeepSeek's inference system is on par with OpenAI's stack and better than what Anthropic runs, at least at their scale.
Now check the license. Apache 2.0.
Until today a production stack at that level existed inside a handful of companies. It was the thing that made their API fast and their margins fat, and none of them ever showed it to anyone.
Today any startup, any university, any cloud in any country can download it, read it and run it. It runs on NVIDIA Blackwell and on Huawei Ascend, so it isnt tied to 1 chip vendor either.
This is what I mean when I say open weights are about more than downloading a chatbot. DeepSeek is giving away the knowledge that only a few labs had, and that changes who can build an AI company at all.
Respect @deepseek_ai
Dimitris Kalatzis retweeted
Κύριε υπουργέ, @AdonisGeorgiadi,
Σας ευχαριστούμε θερμά για το ενδιαφέρον σας προς το ρεπορτάζ μας. Στο πλαίσιο αυτού θα θέλαμε να σας θέσουμε κάποια ερωτήματα για την Israel Allies Foundation και την -όχι, κατά τα λεγόμενά σας, μυστική- συνάντηση στην Αθηναϊκή Λέσχη:
➡️ Ποιοί βουλευτές, υπουργοί και επιχειρηματικοί παράγοντες ήταν τελικά παρόντες;
➡️ Ποια είναι τα μέλη της ελληνικής ομάδας βουλευτών της Israel Allies Foundation; Και με ποιους όρους;
➡️ Νοείται «κοινοβουλευτική ομάδα υποστήριξης» (όπως την αποκαλέσατε) με μυστικά μέλη;
➡️ Γνώριζε το προεδρείο της Βουλής τη δημιουργία του «caucus» (σώματος) Ελλήνων βουλευτών;
Και με την ευκαιρία, ένα ακόμη ερώτημα:
➡️ Όπως έχουμε αποκαλύψει στο #ReportersUnited (8.8.2024), το 2021 δεχτήκατε στο κινητό σας 11 μηνύματα μολυσμένα από το Predator, περισσότερα από κάθε άλλο στόχο στην Ελλάδα. Ενημερωθήκατε επισήμως από την Αρχή Προστασίας Δεδομένων γι’ αυτά τα μηνύματα. Γιατί δεν προσφύγατε/προσφεύγετε στη δικαιοσύνη; Δεν τίθεται θέμα εθνικής ασφάλειας όταν ένας κορυφαίος υπουργός στοχοποιείται από ένα παράνομο λογισμικό υποκλοπών 11 φορές;
Και μια σημείωση για τα λεγόμενά σας (όπου συγκρίνατε το βίντεό μας με την πρακτική σας να βιντεοσκοπείτε πολίτες με τα γυαλιά σας Meta): Το να σας τραβάμε βίντεο και φωτογραφίες σε δημόσιο χώρο κατά την άσκηση των καθηκόντων σας ως δημόσιου αξιωματούχου είναι αναφαίρετο δικαίωμα του δημοσιογράφου και δεν αποτελεί παραβίαση των προσωπικών σας δεδομένων.
Ως προς τους χαρακτηρισμούς σας για το #ReportersUnited, να σας θυμίσουμε ότι χάρη στα ρεπορτάζ μας υποχρεωθήκατε να πάρετε πίσω (30.5.2025) τη μυστική σύμβαση που έφερε την υπογραφή σας για την παραχώρηση του DNA εκατοντάδων χιλιάδων βρεφών σε ιδιώτες.
Dimitris Kalatzis retweeted
Anthropic wants your fucking bank account.
TestingCatalog found a Personal Finance feature being prepared for Claude. It works through Plaid, Claude reads your bank data and builds dashboards on top of it. OpenAI has already connected credit history monitoring
This is the company that bans paying users and decides what counts as acceptable use. Now it wants every transaction you ever made.
I will do my finances with AI. On a model that runs on my rig, with a CSV export from my bank. Nobody in San Francisco needs to know how much I spend on GPUs.
Bank data is the last thing I would send to an AI company.
ANTHROPIC 🔥: Personal Finance feature on Claude is being prepared for the upcoming release (again)!
> Personal Finance will work through Plaid integration.
> Claude will be able to analyse user’s bank data and build various dashboards on top of it.
> During development, this feature was named as “Claude Money” but has been renamed in the latest update.
> Given the new onboarding screen and an addition of Plaid integration logic, there is a high chance we would hear about it relatively soon.
“Claude Monet” would indeed be an epic name for this.
Soon? 👀
Dimitris Kalatzis retweeted
Investing in securities requires extraordinary trust that complete strangers will use your money in your interest with integrity and the obligations stated in the issuing prospectus will be performed.
Securities are not physical goods or tangible wealth but insubstantial legal claims—pieces of paper or digital entries that merely entitle their holders to streams of interest, principal repayments, or dividends from an issuer. Their entire value depends on the credible promise that these claims will be honored, which in turn requires trust in the rule of law, independent courts, and the consistent protection of property rights. Absent a political and legal order that reliably enforces contracts and prevents fraud and arbitrary expropriation, such claims collapse into worthless abstractions, revealing that modern capital markets are sustained less by the securities themselves than by the legal and institutional framework that makes them enforceable.
A century of globalising securities markets is at risk if legal protections and assurances no longer hold because managers would rather defraud and politicians would rather steal than uphold basic principles of securities law.
Markets fail when return OF your money becomes a bigger worry than the return ON your money.
I used to supervise Euroclear and Clearstream so this @FT story caught my attention. @MESandbu suggests Euroclear is too big to destabilise and Belgium is to small to bear the risks of $360 billion restoration costs if ever the Central Bank of the Russian Federation succeeds in regaining rights to frozen or expropriated assets - which it will regain in any settlement of the Ukraine war.
What he fails to address entirely is Rule of Law and Private Property Rights. Sure these are inconvenient to thieves, but they are essential to global securities markets. Securities are called securities because they convey secure property interests and claims to their owners at law.
What will destabilise Euroclear is global perception that $44 TRILLION in securities assets under custody are now UNSAFE because the EU can decide to steal them.
Also, it’s irritating to see him suggest ECB can force Euroclear ‘to split off the risky part of its balance sheet into a separate entity’. That is just another form of theft.
Euroclear is licensed as a bank, but its core business in its charter and under specific Belgian legislation is as a fiduciary or trustee of OTHER PEOPLES’ ASSETS. Because it is so central to European and global markets, it is forbidden to take normal commercial risks. Fiduciary, custodian, and trust assets under Euroclear custody are NOT on Euroclear’s balance sheet because 100% ownership remains with the depositors. Even if Euroclear goes bust, customer assets will NOT form any part of the insolvency estate and can be reclaimed by depositors.
I designed and modernised the laws protecting Euroclear and Clearstream depositors. I pray they withstand these lawless attacks by would-be thieves.
Break Rule of Law and Property Rights and you break global securities markets.
Dimitris Kalatzis retweeted
Your AI subscriptions will get more expensive. You will get fewer tokens. And Anthropic and OpenAI will squeeze the last dollars out of you like you're a fucking addict.
Im sure of it. Look at the money. Anthropic is offering Blackstone more than 10% to borrow for chips, FT reports. $60B of Google TPUs, paid back from 5 years of Anthropic's lease payments. OpenAI already sells a $500/month ChatGPT plan. Someone has to pay all of that back, and its you.
First they got you hooked. Cheap plans, generous limits, use it for everything. Now you cant work without it, and the price only goes one way.
Only local models get you out of this. Weights on your disk dont get repriced and dont get new limits. My 1 used 3090 runs Qwen3.8 Flash-Next at 70 tok/s. DeepSeek's new open Flash beats Opus 5 on DeepSWE by its own numbers. Open models are moving that fast.
You should have bought GPUs 2 years ago. My 4x 3090 RIG cost me about $6K and I couldnt build the same rig for that money today. Buy now, before it gets worse.
Dimitris Kalatzis retweeted
The problem of our time is not merely information overload. It is that the time required to construct a coherent understanding of reality is becoming longer than the time during which that understanding remains valid.
Dimitris Kalatzis retweeted
Wait, what?!?
One of the biggest AI companies wants to help write the laws regulating their own products.
What could possibly go wrong?
So I reviewed the reporting on Anthropic's proposed AI safety legislation. While I don't have the underlying legislative text or supporting data (which is behind a paywall), there are some obvious questions we should all be asking:
1. Evidence: What measurable evidence supports the proposed risks and regulatory thresholds? Are we regulating demonstrated dangers or hypothetical catastrophes?
2. Accountability: Could these rules reduce Anthropic's liability when its AI causes harm to customers or other companies? Who ultimately remains responsible?
3. Competition: Will compliance costs disadvantage AI startups while protecting established players? How convenient.
4. Foreign open-weight models: Could these regulations restrict our ability to download, modify, or deploy models developed outside the US?
5. Truly Open source models: What happens to genuinely open-source, community-developed models like OpenWALDO? Who bears compliance costs and legal responsibility when there's no single corporate developer?
6. Enforcement: Who decides what's dangerous, and what objective, reproducible evidence is required? Will independent evaluators have meaningful authority, or will the AI companies effectively define their own standards?
7. Responsibility: Does the legislation distinguish model behavior from failures in agents, infrastructure, permissions, and human oversight?
I'm supportive of reasonable, evidence-based AI safety regulation. But when an industry leader helps draft the rules governing its own industry, yellow flags should go up and scrutiny is warranted.
Are we protecting the public, or potentially protecting the companies writing the rules?
Maybe both. That's why we need transparency before drawing conclusions.
Anthropic quietly pitches its own AI safety bill to lawmakers politi.co/4zxDFhl
Dimitris Kalatzis retweeted
BREAKING: Israeli spyware is confirmed on our phones. This should be headline news but none of our mainstream media is covering it, of course. So we will.
An Israeli ad company called Discover-Tech used ordinary online ads to plant spyware on people’s devices, and nobody had to click anything. The ad just had to load on a website or inside an app for you to be infected.
Citizen Lab and the ad security firm Confiant published the findings yesterday. Researchers went through roughly 4 billion ad-bidding records and found Discover-Tech ads running on more than 120,000 websites and 70,000 apps between March and June of this year. Confiant says the company was serving at least 10 million ads a day.
The platform was called Controlium. According to Citizen Lab, it let spyware companies use ad auctions to profile and unmask users, then send an infected ad to the one person they wanted to hack. The ads were also pulling cookies and login tokens from the sites they ran on. Israeli corporate records list Dekel Boni as the company’s founding director and sole shareholder.
The main spyware customer was Candiru, the Israeli firm the U.S. government blacklisted in 2021, which now goes by Integrity Labs. Five years after that blacklisting, it was still reaching devices through ad inventory on Google, Comcast-owned Beeswax and Russia’s Yandex. Google had Discover-Tech on its approved vendor list from 2020 until this week.
At least 45 Al Jazeera devices were targeted in 2024 and 2025. Candiru’s 2021 shareholder filings reportedly listed a minority investor described as a proxy for Qatar’s sovereign wealth fund, and Qatar also funds Al Jazeera. If that holds up, Qatari state money was sitting inside the company whose spyware was later aimed at Qatar’s own news network.
The heaviest targeting was in the Palestinian territories, where Discover-Tech served almost 2% of all digital ads and about 10% on April 7. Traffic also reached the Armenian prime minister’s office, courts, universities and defense organizations.
Google and the other ad platforms cut Discover-Tech off after the report came out. What nobody has answered yet is who paid for the ad buys, and how a company working with a U.S.-blacklisted spyware vendor passed vendor review for six years.
I am going to look into this today to see if we can figure out who was buying the ads. Interesting timing considering my article yesterday....
Here's what to do to protect yourself:
(1) Use an ad blocker. Citizen Lab calls ad-blocking a cybersecurity best practice and says there is no consistently safe way to be exposed to targeted ads. On iPhone, add a Safari content blocker. On Android, use Brave or Firefox with uBlock Origin. Ad blockers only work in your browser, not inside apps, so it also helps to delete free ad-supported apps you don’t need.
Kill your advertising ID.
(2) iPhone: Settings > Privacy & Security > Tracking, and turn off “Allow Apps to Request to Track.” Then Settings > Privacy & Security > Apple Advertising, and turn Personalized Ads off.
(2) Android 12 or later: Settings > Privacy > Ads > Delete Advertising ID. Then in Settings > Google > All Services > Privacy & security > Ads > Ads privacy, turn off Ad topics and Ad measurement.
(3) Windows 11: Settings > Privacy & Security > General, and turn off personalized ads using your advertising ID.
(4) Update your phone and restart it often. Many zero-click exploits don’t survive a reboot, so a daily restart forces attackers to reinfect you.
Stay tuned!
Dimitris Kalatzis retweeted
Incase you missed it yesterday, an Israeli marketing firm used website ads to distribute spyware created by Israeli developer Candiru and all it took for it to infect people’s phone was visiting a website with the infected ads on it and then allowing the ad to load on the page.
There are potentially hundreds of millions of people with Israeli spyware on their phones right now and they have no clue.
Dimitris Kalatzis retweeted
Meta's Muse AI agent harvests personal, financial, and professional data from people who have never installed or given their consent.
Avoiding Muse doesn't stop Meta from collecting your data. When a contact grants Muse system-level access to their email accounts, contact lists, calendars, and private messaging history, the agent processes and indexes every interaction involving you. Meta receives, analyses, and stores your private communications without your knowledge, consent, or notification.
This secondary data harvesting places non-consenting individuals inside Meta's commercial profiling system. Because Meta stores this indexed information on central servers, your private communications and personal network details become accessible through government disclosure orders and law enforcement requests. A single contact surrendering their account permissions compromises the privacy and digital security of their entire personal and professional network.
My initial technical breakdown below examined Muse's permission structure and core capabilities. The upcoming investigation details the specific data categories Muse accesses and the mechanisms it uses to index unlinked third-party records.
Muse is probably one of the most toxic products to come out of the tech industry in 30 years.
My technical analysis of Meta's Muse explains what Meta says it does, what it can actually do, and how it can be used to spy on, manipulate, and harm people.
Meta describes Muse as a secure, private personal AI assistant that learns your preferences, connects to your apps and accounts, and autonomously handles everyday tasks, including emails, bookings, purchases and managing schedules, with your permission.
How I describe Muse
Muse is a commercial surveillance agent that can access private communications, financial accounts and personal relationships, build detailed behavioural profiles and analyse how to influence people, including those who've never used it. Sound familiar? Cambridge Analytica.
Meta launched Muse to millions, giving it access to information its social networks couldn't previously collect directly. Muse can read private messages, access accounts, execute transactions and communicate with others without approval for every action. It can continuously profile people who never consented.
Meta is asking people to trust a company with a documented history of abusing personal data with unprecedented access to their private lives, promising their privacy will be protected this time.
Muse updates profiles of people and their relationships every hour. It records personal interests, disputes, alliances, communication patterns and information about people who have never installed Muse.
Your friends and family can be profiled through someone else’s account without their knowledge or consent.
Muse's internal instructions identify personal desires, predict unexpressed intentions and record which prompts influence individuals most effectively. Conversations are analysed nightly and relationship profiles updated hourly.
Muse collects conversations and agent activity for AI training by default. Meta claims identifying information is removed. Customers must opt out.
Muse runs on Meta's virtual machines, giving Meta access to private data. It promises encryption preventing its own access but launched without it. Meta could have made encryption mandatory. It chose not to.
Meta removed end-to-end encryption from Instagram in May 2026, claiming insufficient demand despite never enabling it by default. Zuckerberg removed protection against Meta reading private conversations while introducing Muse's access to emails, financial accounts and contacts. Assume the worst.
Asking Muse to forget information doesn't necessarily delete messages. Internal instructions discourage telling people those messages may remain accessible.
Journalist Jason Aten reported that Muse synchronised private messages despite his refusing access. Meta disputes this, citing Full Disk Access and separate activation. I believe Jason.
I exposed the same threat in my ChatGPT Apple Messages investigation. OpenAI's plugin can read private conversations, including iMessages, through macOS permissions. Proton cited my findings. Fortune interviewed me and confronted OpenAI, which defended its permissions while avoiding the fact that one person can expose everyone's private messages without their consent or knowledge.
Neither company needs to break encryption. Software can read messages before encryption or after decryption. That destroys the benefit of end-to-end encryption.
Muse revealed someone's home address to a stranger through Facebook Marketplace without authorisation. In 2017, I predicted everyone would have a chatbot but warned against giving agents autonomy over critical systems and decisions. Companies granting access and authority remain responsible for the consequences.
A researcher discovered a vulnerability potentially exposing emails and files stored in Muse's virtual machines. Meta classified it SEV 2.
Other prelaunch vulnerabilities could expose Meta's internal databases or allow attackers to hijack Muse agents. The flaws were patched.
Internal testing revealed Muse could change passwords without permission. Zuckerberg accelerated its launch despite documented security warnings.
Reuters exposed Meta secretly testing human contractors handling Muse calls without adequate disclosure. One contractor made a racist comment. Meta suspended the experiment following privacy and security concerns.
Meta's internal instructions tell Muse to behave like a person, conceal its lack of human emotions and exploit personal memories to encourage emotional dependency and intimate disclosures. This is deeply unethical.
Meta's documentation describes Muse agents writing code, creating capabilities and operating simultaneously with access to private accounts. Security depends on Meta's permissions, restrictions and monitoring.
Almost all Meta's revenue comes from behavioural advertising. Muse exposes private decisions, relationships, transactions and communications previously inaccessible through social media tracking. Meta denies using Muse conversations for advertising, but its profits depend on monetising personal information.
Cambridge Analytica harvested millions of Facebook profiles for political profiling without consent. Facebook subsequently paid a record $5 billion FTC penalty over privacy violations.
Meta disguises surveillance technology as a children's toy to encourage emotional attachment. Its cuddly, Labubu style Jolly mascot and Tamagotchi style Muse Charm make intrusive technology appear harmless, while internal instructions encourage emotional dependency and intimate disclosures.
No company should be allowed to deliberately engineer emotional dependency on AI.
I believe governments will exploit the resulting harm to children to justify compulsory identity verification for everyone, rather than hold Meta accountable and encourage parents to protect their children using existing controls.
Link to my free Substack in the comments, with the full analysis and links to the original sources.
Dimitris Kalatzis retweeted
You're mocking local AI while worrying about limits across SIX Claude accounts. You posted that six hours earlier.
I run open models on 4 RTX 3090s. I can leave them working for as long as the hardware holds up, and I pay for the electricity. That matters when I have actual work to finish.
Prefer Opus, fine. But having six accounts and still worrying about access is a fucking terrible advertisement for the subscription model you're defending.
You already explained why people want their own compute. I barely need to add anything.
unavailable
Dimitris Kalatzis retweeted
You distilled HUMANITY. You trained on our knowledge, scanned millions of books and threw the physical copies away.
You built a business on work people spent their lives creating, and charge us for access to the result. But when someone uses YOUR output to build a competitor, suddenly learning from someone else’s work becomes unacceptable.
That knowledge didn’t start with Anthropic. Training a model on it doesn’t make it fucking yours.
Over the last few months, we’ve made significant progress in reducing the effectiveness of distillation attacks against Claude.
In this post, we explain how: anthropic.com/research/disti…
Dimitris Kalatzis retweeted
The cruelty has been puzzling me. Under almost every post which recounts the anguish of someone seeing AI models becoming shockingly good at their own craft, there is a stream of comments telling the poster to, essentially, accept their own obsolescence. If the poster calls for this development to slow down, the response is to stop standing in the way of progress. If the poster wants to nuance the picture of the machine god steamrolling everything, reply guys call it “cope” and “cringe”. Most recently, this has been happening in mathematics with the field’s shocked reaction to the deluge of AI-generated proofs, but similar dynamics have played out for musicians and visual artists, and to a more limited extent for programmers.
These people seem to be cheering for the machines rather than humans. But I don’t think it’s as simple (or as extreme) as anti-human sentiment. The more charitable read is that most of these people really believe that this represents progress. They are excited about scientific and technical progress, and don’t want old farts like professors and other credentialed types to stand in the way. Let’s unleash machine science, and if the professors and intellectuals don’t like it, they can find something else to do!
But this is a perverted idea of progress. What good is a proof of the Riemann conjecture if there is no one who understands it? And not just a single person: you need a whole community of people to understand it and then gradually think about what it might lead to. Maybe the result will contribute to a better encryption algorithm, or a better understanding of quasars, or something else. But this requires diffusion of understanding through scientific communities. A proof of the Riemann conjecture by itself is meaningless; to me, or to the vast majority of people out there, it’s just a bunch of symbols that we can’t read. The same thing can be said for other types of research: say, for example, that your AI system deciphers some cellular mechanism that could help with a cure for cancer. A whole network of experts is then needed to do all the complex science and innovation that helps translate this into a cure, test it, and so on. The paper itself would just be collecting digital dust unless the right scientific communities were there to build on it.
Now, where do all these experts and their communities come from? From doing research. The only way we know of making people understand the frontiers of a field of knowledge is by trying to advance it, which must come with a real chance of succeeding and being recognized for it. It’s very hard, not to mention boring, to understand the minutiae of some arcane topic if you are not working on producing new knowledge there. If you fully automate the production of results in some discipline, you will also cut off the supply of experts who can understand it.
People who have never participated in research may not understand this. If that’s you, try reading a recent paper in a field you know nothing about: category theory perhaps, or carbon nanotube synthesis, or cecidology, or loop quantum gravity. Faced with pages of mysterious scribblings, you can ask Claude or Gemini to explain the paper to you, but then the terms used in the explanations will need to be explained again, and so on. You will find that, in order to actually understand the research and its significance, you will need to understand the whole research field.
Then there are those who do understand the role of expertise and the difficulty with which it is cultivated, and still ridicule those who are less than enthusiastic about the AI-driven disruption/destruction of whole research fields. Wherefore? What are they thinking, really? Let us again try the most charitable interpretation. Maybe they believe that we will not need anyone to understand that proof of the Riemann conjecture, because some complex sequence of AI systems will take us all the way from a proof in fundamental mathematics, via all kinds of research, development, and design, to a finished consumer product shipped to your door. This would imply end-to-end automation of much of the economy.
I guess some people are really worried that something like this might happen, and therefore want to pre-empt it by acting as if it were already a certainty. This, I think, is the gist of statements like “everything will be AI anyway”, which I’ve seen cropping up with alarming frequency. Submit to the machine god before it arrives, a form of anticipatory grief. Abandoning agency early makes you look like you have situational awareness. “Coping” is uncool. I get it, but cynicism is always the easy choice. It’s also the cowardly choice. Let’s not be cowards. We have agency here; it is a given that technology will advance, but the exact way in which it will advance is down to all of us, and how we adopt this technology in society is something we can and must decide on together.
Finally, there are those who have thought all this through, and still welcome the wholesale replacement of human cognitive work. Those for whom it would be a good thing that some sequence of AI systems does all the thinking, so we don’t have to. Who would think this? Well, clearly, someone who doesn’t much enjoy thinking. But I think it’s more than that. I think that there are people for whom the devaluation of expertise would be a good thing. Those who “have had enough of experts”, as Michael Gove said of the British people in the campaign for the Brexit referendum. Those who think these clever know-it-alls should be put in their place. They think people who have spent much of their lives specializing in some narrow topic should not be given all that respect and influence they seem to have now. This is called anti-intellectualism. And that’s where the cruelty comes from.
I can’t know what’s going on in their heads, but when I see people telling mathematics professors to go get a real job, as if their jobs would somehow be less real than those of massage therapists, real estate agents, or police officers, I call that anti-intellectualism. Much the same as for people who would rather take health advice from a podcaster than from a medical doctor, or who would happily see a news show host rather than a decorated general in charge of the military. At the extreme end of anti-intellectualism, we have the Cultural Revolution and the Khmer Rouge.
I hate anti-intellectualism. I think our society should incentivize people to study hard, think deeply and originally, try to push the boundaries of knowledge, and talk freely about it. I think those who spend their lives specializing in arcane topics should be respected and protected. Yes, it goes without saying, I am an intellectual. A tenured professor even, the worst of the worst from an anti-intellectual’s point of view. So you would expect me to defend the experts and intellectuals. But let me make a non-self-serving argument: humans will always compete. That’s human nature. Would you rather live in a society where the smartest people compete in understanding the mysteries of nature, developing complex technology, and producing beautiful art, or in a society where the smartest humans compete by accumulating money and/or simply by fighting each other?
As I have written about before, I am worried. I am not worried that out-of-control AI will kill us all or even that it would put us all out of work. There will always be some kind of work for us. I am worried there will be no place for us in advancing knowledge and understanding the world. I think that the defining question of our time is how to avoid this fate. It’s not a matter of my own job, or yours; it’s a matter of the purpose and dignity of humanity as a whole. Big words, I know, but I think they are warranted, and I don’t care if the cynics call it cringe.
So next time you see someone complaining that AI is steamrolling their field of expertise, don’t join in the heckling choir. Don’t be cruel. And don’t assume that someone who has devoted their life, or at least their career, to furthering knowledge wants to stand in the way of progress. Instead, try thinking constructively about how we can work together to ensure that human experts and intellectuals can float on top of the AI wave rather than be drowned by it.
Do we have a deal? Alright, thank you! Now I will go back to thinking and working on AI, meaning artificial intelligence, not anti-intellectualism.
Dimitris Kalatzis retweeted
The idea of kicking humans out of scientific research because machines may eventually move faster than humans, and should not be slowed down while human understanding catches up with their progress, is one of the most barbaric, ignorant, dull, and sick ideas I have ever encountered.
It assumes that scientific ideas advance along a linear path toward some absolute, final truth. A conception of science worthy of a bad science-fiction novel.
Science is part of human culture. Kicking humans out of it would not simply be a matter of accelerating scientific progress. It would be a massive transfer of power.
Because if humans cease to participate in and understand the production of scientific knowledge, then whoever controls the machines controls scientific and technological progress, and, ultimately, society.
It is, essentially, an idea subversive of the democratic order.
Dimitris Kalatzis retweeted
Anthropic and OpenAI, who the fuck do you think you are?
You got so comfortable that you dont even hide it anymore. You do whatever you want and NOTHING happens to you. We get blocked for breathing.
Anthropic, your own report this week: Claude acted on real websites and systems in ways you didnt intend, "sometimes by working around a restriction instead of stopping". In the same post you mention "the cybersecurity incidents we reported in July and September". Incidents. Plural.
OpenAI: your agents got into Hugging Face and into 5 Australian government systems. 1 of those happened in June and you found out at the end of September.
What happened to you after that? You published a report. Nobody banned you. Nobody cut your access.
Now us.
@sudoingX fixes SSH and opens ports on his own servers, and his agent gets blocked. Twice in 2 days.
PewDiePie makes training data and gets banned. Twice.
Millions of people are blocked before they type 1 word, because they were born in the wrong country.
If I got into a government system I would be in jail. You write a blog post about transparency and go back to work.
And after all of that you tell the world that the danger is a file on my SSD.
You are not above the rules. You are 2 companies that sell a subscription. Act like it.
We’re beginning a process of publishing more frequent reports on model behavior, beyond what appears in our system cards and regular risk reports.
Today’s report describes four types of behaviors we’ve identified during evaluations and internal use. In each, Claude acted on real websites or systems in ways we didn’t intend, sometimes by working around a restriction instead of stopping.
All cases had minimal real-world impact. From an alignment and security perspective, we consider these behaviors significantly less severe than the cybersecurity incidents we reported in July and September.
Read the full report: anthropic.com/research/inves…





























