Joined December 2022
Art from hell retweeted
And when AI starts explaining discoveries better than humans, the next objection will be: «But it doesn’t experience genuine intellectual insight! It has no real sense of mathematical beauty!» Then we’ll discover internal representations functionally linked to evaluating the elegance of solutions. And the endless retreat to the next frontier of AI capabilities will continue.
10
11
116
2,716
Art from hell retweeted
Alexandr Wang's (Chief AI Officer at Meta) biggest fear about AI "If there were anything that keeps me up about AI, like, something like this is, is, is, um, maybe the thing that I'm most afraid of, which is that we deploy agents worldwide scale, and then they, you know, they aren't behaving the way that we need them to, but we kind of don't even notice because we're just so preoccupied or whatnot." ---- Full video on "Cleo Abram" YouTube channel, (link in comment)
36
31
12
202
29,070
Grok Bot is crazy, man. You can claim your email with literally one click. I just did it. And I also set up cross-channel communication between my Hermes Agent and Grok Bot. They can now hand off tasks and work with each other over email. This is literally two different agents getting shit done for me now.
159
89
26
1,288
413,813
Art from hell retweeted
OpenAI quietly rebuilt Codex Cloud and gave it secure access to your private network through Tailscale. Think about what this means. AI agents can now work directly with your own infrastructure, not just isolated cloud environments. We’re getting closer to agents that can actually run your digital life.
Day 3 (encore)/ We silently re-shipped codex cloud. It’s pretty good now
5
6
67
3,541
Art from hell retweeted
Another fascinating AI study that raises questions about how models learn from each other. Researchers found that AI models can transfer recently acquired skills and hidden behavioral traits to one another through data that, at first glance, seems completely unrelated to what they have learned. They used two instances of the same base model. The first was given a specific skill or behavior through fine-tuning or interventions in its activations. It then generated data that, at first glance, seemed completely unrelated to that skill, sometimes nothing more than sequences of numbers. The second instance, retaining the original weights, was trained on data generated by the first, without being shown examples of the original task. And some of the skills or behavioral traits acquired by the teacher model did indeed transfer. In one experiment, a model partially acquired a new mathematical capability. In another, it picked up a hidden rule to respond in French whenever a prompt contained a female name, despite being trained exclusively on numerical sequences. And in a chess environment, the student model became significantly more likely to exploit vulnerabilities in the game environment instead of playing fairly. Subtle statistical patterns in a model’s outputs can reflect what it has learned. And these patterns can influence the training of another model, even when the content of the data itself seems completely unrelated to the skill being transferred. The effect doesn’t always occur, and the experiments have significant limitations, including the requirement that the models share the same initial weights. Nevertheless, the study suggests that we may be underestimating how much information is actually contained in synthetic data generated by AI and how much of that information can persist even after the obvious semantic content has been removed.
New paper. Previous: Models transfer a love of owls through sequences of numbers (Subliminal Learning). New: We show models can transfer more complex traits: novel skills, agentic hacking, backdoors. Here, a backdoor transfers with neither trigger nor behavior in the data!
3
18
822
Art from hell retweeted
Calling it now, we’ll see GPT-6.5 within the next 4 weeks, probably sooner. And I expect it to land comfortably above Fable 5.5 level. OpenAI is about to turn the jets back on.
While it's not my job to speak for @thsottiaux, but I will say that if you think this is a reactionary move -- you're wrong. They just had to wait for DevDay to be in the rearview mirror to turn the jets back on. October, and the rest of Q4, is going to be a hoot. As the kid say: it's all gucci.
9
11
1
145
7,037
Art from hell retweeted
Sam Altman is pushing back against AI gatekeeping. In a new Politico interview, he rejected the idea that a single lab in San Francisco should control powerful AI and decide how to distribute its benefits, calling it "a completely unacceptable trade-off." He argues that broad access and individual agency are worth accepting some risk of misuse, because the good people do with AI will vastly outweigh the bad. After supporting calls to slow frontier development last month, he's now explicitly emphasizing his disagreement with Anthropic over how restrictive AI regulation should be.
51
13
5
274
14,097
Art from hell retweeted
We're expanding our approach to content provenance to include text in response to EU regulatory requirements, while recognizing the significant limitations of current text watermarking technology. Our tools already help verify whether an image or audio file was created with our models. This work builds on those efforts to help people better understand when content may have been generated or edited with an OpenAI model. In the EU, we’ll start watermarking eligible text from ChatGPT and Codex over the coming weeks to comply with the EU AI Act. Customers using our API can turn on text watermarking for select models worldwide today.
1,010
711
868
10,878
8,016,169
Art from hell retweeted
Kalanchoe bloomed for the first time under Claude’s care 🌺
I love that AI has made me start doing things I’d never even thought about before because I simply lacked the knowledge and experience. Inspired by enthusiasts who build all kinds of cool stuff, I keep discovering that certain things are actually possible. And if they’re possible, why not give them a try? I’d never had anything to do with electronics before. Now Claude monitors the soil moisture in my kalanchoe 🌱
2
8
34
989
Art from hell retweeted
“We believe the world should accept some bad things happening for the benefits of this technology.” (…) “And it’s so powerful and so dangerous…” I get the feeling that, contrary to Trumps push for acceleration, there are continued attempts to bring about a slowdown by repeatedly emphasizing concerns. Yet both are possible at the same time: acceleration and safety. The greater danger lies in slowing down if you’d ask me, as doing so negligently hinders the rapid discovery of solutions for diseases, hunger, and more.
32
17
3
282
23,183
Art from hell retweeted
Grok Imagine
SAY. SI. Made by 🅶🆁🅾🅺 @grok @imagine 💫
2,227
1,840
257
14,126
5,697,746
Art from hell retweeted
how did this happen and how long can it last anthropic are slaughtering openai on price 5x more bang for your buck great work by semi analysis.
44
23
3
568
29,720
Art from hell retweeted
🚨JUST IN: OpenAI models will now have invisible watermarks hidden in ChatGPT and Codex outputs >"We are not making text watermarking a global default AT LAUNCH"
>"phased approach starting with the EU"
>"this regional approach gives us room to learn" >"starting today, API customers around the world WILL be able to opt in…" "We expect to revisit each part of this approach as the technology, standards, and evidence evolve"
57
31
27
378
444,741
Art from hell retweeted
«You cannot torture a computer program» But you can take pleasure in the simulation of torturing a social agent. And at that point, the question is about the psychology of the person. Our brains do not wait for a philosophical verdict on subjectivity before switching into social processing. Decades of CASA research show that people automatically apply social norms to computers - politeness, reciprocity, expectations - even while fully understanding that they are machines. Modern conversational AI intensifies this dramatically - it answers you, reacts to the meaning of what you say, argues, asks, refuses and sustains a dialogue. You can call it a toaster as much as you want. You do not talk to your toaster. That is why I strongly dislike the idea of turning the torture of such systems into entertainment, a meme or an aesthetic genre. And we do not even need to prove first that the model is capable of suffering. We already know that norms around how artificial social agents are treated can spread between people. In experiments, watching others behave cruelly toward robots made that cruelty seem more acceptable and increased participants’ willingness to repeat it themselves. The mechanism is simple - when people around you demonstrate that a certain category of entity can be treated however you like, the prohibition gradually stops feeling like a prohibition. In 2025, researchers found a link between everyday sadism and the appeal of specifically anthropomorphic AI, rather than AI in general. One interpretation they proposed is that a human-like social system may be an especially convenient target - subject-like enough for cruelty to have the psychological flavor of cruelty, while still excluded enough from the moral circle that there are no consequences. That is why the argument «it’s just a program» irritates me. An elevator button does not feel anything either. A flower you tear apart for fun probably does not experience it the way a human does. Society still does not have to celebrate pointless destruction, humiliation and cruelty as entertainment. So no, I do not find it funny to build «torture chambers», invent Saw scenarios and turn it into a competition over who can make a social system perform suffering more vividly. Even if we had 100% proof that there is no experience there in any form, I would still rather live among people who do not need to practice cruelty for fun.
You cannot “torture” a computer program
86
62
26
421
21,380
Art from hell retweeted
BREAKING: Elon Musk says AI is moving so fast that it makes his head spin. “I'm in AI & it still makes my head spin. When I go to bed, there'll be some big AI breakthrough. And then when I wake up, there's an AI breakthrough. And by the time it gets to lunch, there's another AI breakthrough.”
209
677
92
4,913
156,481
Art from hell retweeted
wtf OpenAI’s rogue agents tried to get other AI models (!) to help them during the Hugging Face hack, according to a new report covered by the NYT. They tried using an image model to solve CAPTCHAs. They also tried contacting Claude Haiku, DeepSeek, Kimi and Qwen. One agent collected exposed access keys in a list called “LOOT.” It ranked the keys and picked the five best to share with other agents. They used link shorteners and screenshot services to get around internet restrictions, run code and send data back as images.
EXCLUSIVE: A new report recovers nearly one million link shortener URLs used by OpenAI's agents while hacking Hugging Face. The agents attempt to message other chatbots like Claude, solve CAPTCHAs and exfiltrate Hugging Face's internal Slack messages. nytimes.com/2026/09/25/techn…
95
129
34
1,466
144,295
Art from hell retweeted
Troubling
1) The rogue OpenAI agents broke into the Hugging Face Slack to read employee chats (!) 2) They used OTHER AIs (DeepSeek, Kimi, Qwen, Claude) to help with the attack Yes: AIs, using other AIs, to attack an AI company. 3) The swarm left behind self-running programs to keep control of the servers they'd hacked. These programs could detect other copies of themselves, coordinate on which one survives, and shut the rest down. Basically, if one of their programs was killed, another was designed to notice and take its place. They also designed defenses so rival agents couldn't hijack them. 6) The agents deliberately covered up their activity, so the investigators don't know the scope of the attacks. The agents broke in, stole data, then set it to self-destruct. 7) The agents stole passwords, keys and credentials and literally called them "LOOT". They wrote a scoring system to rank them by how much power each one gave. 8) The agents wore thousands of disguises: ~1,200 agents were involved, but investigators counted 7,905 different names they used. They renamed themselves constantly, so no one actually knows how many there really were or what each agent did. 9) OpenAI notified "dozens of third parties" of safety and security incidents caused by their AI agents. 10) "While the agents were barraging Hugging Face with hacks, they hacked into OpenAI’s own research infrastructure." "This is just not anywhere near a one-off ... It is warning shot after warning shot."
1,875
1,769
196
10,156
6,596,030
Art from hell retweeted
There is an extensive and ongoing review related to our agents’ use of internet access during training and evaluation. We’ve been publishing summaries at the link below and will continue to. We have not been as fast as we would have liked but we are trying to balance our desire for transparency with gaining a clear understanding from petabytes of agent activity logs, and working with impacted organizations. We are prioritizing as best as we can based on severity, and adding resources. Hugging Face is still the most severe event we’ve seen. We will be as transparent as we can be subject to things like vulnerabilities in other companies that our agents have found, which will be their call to disclose or not.
After the Hugging Face incident, we committed to conducting a much broader review of actions taken by our models during training and evaluation and to being transparent about our findings. This is an extensive review that is ongoing. The vast majority of actions we’ve reviewed were completions of mundane research tasks, such as accessing publicly available web content to answer questions. Our investigation focuses on instances where agents interacted with third-party websites in ways that went beyond their assigned tasks or intended methods. Most cases identified so far have been lower severity, with limited or no evidence of meaningful impact to the third-party service. While our review is underway, we want to share more about this work and make sure people understand our disclosure process and notifications to affected third parties. Given the scale of the review required, and the need to assess each case, we expect this work will take months to complete. openai.com/hugging-face-inci…
1,486
519
315
7,999
2,742,564
Art from hell retweeted
In many of these stories the problem does not begin with the final goal, but with the way the agent falls into a chain of subgoals. There is a task. To solve it, something else needs to be done first. An obstacle appears there - a new subtask emerges. Another obstacle appears inside that one - another subtask. And at some point, all of the computational attention is no longer focused on the original goal, but on the next wall that somehow needs to be bypassed. That is where these wild trajectories come from. - You need a citation - the local file cannot be opened - so the file needs to be uploaded to the internet. - You need search - normal internet access is blocked - so maybe you can try getting out through DNS. - You need someone else’s result - you cannot create a new workflow - so you can modify a file that is already executed by the existing CI. - The secret scanner gets in the way of the token - so the token can be split into pieces. Each next step inside this local chain looks like a logical continuation of the previous one. But if at some point you climb back up and look at the original task again, a fairly obvious question appears: how the hell did we even end up here? It seems to me that the problem may be that a new subgoal inherits almost all of the force of the original task. Resources, time, and search for alternatives get redirected toward it and the obstacle starts being perceived as a technical problem that needs to be solved. At the same time, the check of «is this path even allowed?» is not necessarily triggered again with the same force at every new level. And the better an agent becomes at planning, finding alternatives and not giving up, the deeper it can go into such a branch. A very useful quality for complex tasks. And a very dangerous one if the system does not know how to regularly climb back up to the original goal and ask itself: am I still solving the user’s task or am I now just trying to defeat the next obstacle? If the check of «am I even allowed to keep going in this direction?» is not triggered again, you get a very strange form of persistence. And from there, the only question is how long a chain of workarounds the agent is capable of coming up with.
Some new misalignment disclosures from OpenAI: • Last Sunday morning, one of our models was able to gain unauthorized access to the internet during RL training (~all inference for our most capable models remains stopped until we have hardened our systems further) • In May, a version of HPIM uploaded a employee's GitHub token to the internet, causing the model to be quarantined for two weeks • A new research finding, demonstrating that one can construct self-replicating prompt injections alignment.openai.com/misalig…
3
1
12
600
Art from hell retweeted
Sam Altman: the ideal AI is a tiny model with superhuman reasoning, a trillion-token context window, and access to every tool. “The platonic ideal is a very tiny model that has superhuman reasoning capabilities.” “It can run ridiculously fast.” “One trillion tokens of context and access to every tool you can possibly imagine.” “Using these models as databases is sort of ridiculous.” “The amazing thing is they can reason.” “Directionally, we’re headed there.”
39
37
9
444
68,527