Carl Shulman (Pt 2) — AI Takeover, bio & cyber attacks, detecting deception, & humanity's far future

0:48

So we've been talking about alignment.

0:48

Suppose we fail at alignment and we have AIs that are unaligned and are  becoming more and more intelligent.

0:58

What does that look like?

0:58

How concretely  could they disempower and take over humanity?

1:06

This is a scenario where we have many AI  systems.

1:06

The way we've been training them means that when they have the opportunity to take  over and rearrange things to do what they wish, including having their reward or loss be  whatever they desire, they would like to take that opportunity.

1:27

In many of the existing safety  schemes, things like constitutional AI or whatnot, you rely on the hope that one AI has been trained  in such a way that it will do as it is directed to then police others.

1:44

But if all of the AIs in  the system are interested in a takeover and they see an opportunity to coordinate, all act at the  same time, so you don't have one AI interrupting another and taking steps towards a takeover then  they can all move in that direction.

1:59

The thing that I think is worth going into in depth and that  people often don't cover in great concrete detail, which is a sticking point for some,  is what are the mechanisms by which that can happen?

2:21

I know you had Eliezer on who  mentions that whatever plan we can describe, there'll probably be elements where due  to us not being ultra sophisticated, super intelligent beings having thought about  it for the equivalent of thousands of years, our discussion of it will not be as good as  theirs, but we can explore from what we know now.

2:46

What are some of the easy channels?

2:46

And I  think it's a good general heuristic if you're saying that it's possible, plausible,  probable that something will happen, it shouldn't be that hard to take samples from  that distribution to try a Monte-Carlo approach.

3:03

And in general, if a thing is quite likely,  it shouldn't be super difficult to generate coherent rough outlines of how it could go.

3:10

He might respond that: listen, what is super likely is that a super advanced chess program  beats you but you can’t generate the concrete scenario by which that happens and if you could,  you would be as smart as the super smart AI.

3:30

You can say things like, we know that accumulating  position is possible to do in chess, great players do it and then later they convert it into captures  and checks and whatnot.

3:39

In the same way, we can talk about some of the channels that are open for  an AI takeover and these can include things like cyber attacks, hacking, the control of robotic  equipment, interaction and bargaining with human factions and say that here are these  strategies.

4:02

Given the AI's situation, how effective do these things look?

4:09

And we won't,  for example, know what are the particular zero day exploits that the AI might use to hack the cloud  computing infrastructure it's running on.

4:17

If it produces a new bio weapon we don't necessarily  know what its DNA sequence is. But we can say things.

4:33

We know things about these fields  in general, how work at innovating things in those go, we can say things about how  human power politics goes and ask, if the AI does things at least as well as effective human  politicians, which we should say is a lower bound, how good would its leverage be?

4:55

Okay, let's get into the details on all these scenarios.

5:01

The cyber and potentially  bio attacks, unless they're separate channels, the bargaining and then the takeover.

5:09

I would really highlight the cyber attacks and cyber security a lot because for many, many  plans that involve a lot of physical actions, like at the point where AI is piloting robots  to shoot people or has taken control of human nation states or territory, it’s been doing  a lot of things that was not supposed to be doing.

5:41

If humans were evaluating those  actions and applying gradient descent, there would be negative feedback for this thing,  no shooting the humans.

5:46

So at some earlier point our attempts to leash and control and direct and  train the system's behavior had to have gone awry.

6:03

All of those controls are operating in computers.

6:03

The software that updates the weights of the neural network in response to data points or  human feedback is running on those computers.

6:18

Our tools for interpretability to examine the  weights and activations of the AI, if we're eventually able to do lie detection on it, for  example, or try to understand what it's intending, that is software on computers.

6:29

that is software on computers. If you have AI  that is able to hack the servers that it is operating on, or when it's employed to design the  next generation of AI algorithms or the operating environment that they are going to be working in,  or something like an API or something for plugins,

6:54

if it inserts or exploits vulnerabilities to take  those computers over, it can then change all of the procedures and program that we're supposed  to be monitoring its behavior, supposed to be limiting its ability to take arbitrary actions on  the internet without supervision by some kind of human or automated check on what it was doing.  And if we lose those procedures then the AIs

7:18

And if we lose those procedures then the AIs working together can take any number of actions  that are just blatantly unwelcome, blatantly hostile, blatantly steps towards takeover.

7:34

So  it's moved beyond the phase of having to maintain secrecy and conspire at the level of its local  digital actions.

7:42

Then things can accumulate to the point of things like physical weapons, takeover  of social institutions, threats, things like that.

8:03

I think the critical thing to be watching for is  the software controls over the AI's motivations and activities.

8:11

The point where things really went  off the rails was where the hard power that we once possessed over is lost, which can happen  without us knowing it.

8:16

Everything after that seems to be working well, we get happy reports.

8:22

There's a Potemkin village in front of us.

8:22

But now we think we're successfully aligning our AI,  we think we're expanding its capabilities to do things like end disease, for countries concerned  about the geopolitical military advantages they're expanding the AI capabilities so they are  not left behind and threatened by others developing AI and robotic enhanced militaries  without them.

8:48

So it seems like, oh, yes, humanity or portions of many countries,  companies think that things are going well.

9:04

Meanwhile, all sorts of actions  can be taken to set up for the actual takeover of hard power over society.

9:08

The point where you can lose the game, where things go direly awry, maybe relatively  early, is when you no longer have control over the AIs to stop them from taking all of the  further incremental steps to actual takeover.

9:30

I want to emphasize two things you mentioned  there that refer to previous elements of the conversation.

9:35

One is that they could design  some backdoor and that seems more plausible when you remember that one of the premises  of this model is that AI is helping with AI progress.

9:48

That's why we're making such  rapid progress in the next five to 10 years. Not necessarily.

9:55

At the point where  AI takeover risk seems to loom large, it's at that point where AI can indeed take  on much of it and then all of the work of AI.

10:12

And the second is the competitive pressures  that you referenced that the least careful actor could be the one that has the  worst security, has done the worst work of aligning its AI systems.

10:26

And if that can  sneak out of the box then we're all fucked.

10:33

There may be elements of that.

10:33

It's also  possible that there's relative consolidation.

10:39

The largest training runs and the cutting edge  of AI is relatively localized.

10:39

You could imagine it's a series of Silicon Valley companies and  others located in the US and allies where there's a common regulatory regime.

10:55

So none of these  companies are allowed to deploy training runs that are larger than previous ones by a certain  size without government safety inspections, without having to meet criteria.

11:07

But it can still  be the case that even if we succeed at that level of regulatory controls, at the level of the  United States and its allies, decisions are made to develop this really advanced AI without a  level of security or safety that in actual fact blocks these risks.

11:35

It can be the case that the  threat of future competition or being overtaken in the future is used as an argument to compromise  on safety beyond a standard that would have actually been successful and there'll be debates  about what is the appropriate level of safety.

11:56

And now you're in a much worse situation  if you have several private companies that are very closely bunched up together.

12:01

They're  within months of each other's level of progress and they then face a dilemma of, well, we  could take a certain amount of risk now and potentially gain a lot of profit or a lot  of advantage or benefit and be the ones who made AGI.

12:24

They can do that or have some other  competitor that will also be taking a lot of risk.

12:33

So it's not as though they're much less  risky than you and then they would get some local benefit.

12:38

This is a reason why it seems  to me that it's extremely important that you have the government act to limit that dynamic and  prevent this kind of race.

12:44

To be the one to impose deadly externalities on the world at large.

12:54

Even if the government coordinates all these actors, what are the odds that the government  knows what is the best way to implement alignment and the standards it sets are well calibrated  towards whatever it would require for alignment?

13:10

That's one of the major problems.

13:10

It's very  plausible that judgment is made poorly.

13:10

Compared to how things might have looked 10 years  ago or 20 years ago, there's been an amazing movement in terms of the willingness of  AI researchers to discuss these things.

13:30

If we think of the three founders of deep learning  who are joint Turing award winners, Geoff Hinton, Yoshua Bengio, and Yann LeCun.

13:39

Geoff Hinton has  recently left Google to freely speak about this risk, that the field that he really helped  drive forward could lead to the destruction of humanity or a world where we just wind up in  a very bad future that we might have avoided.

14:05

He seems to be taking it very seriously.

14:05

Yoshua  Bengio signed the FLI pause letter and in public discussions he seems to be occupying a kind of  intermediate position of less concern than Geoff Hinton but more than Yan LeCun, who has taken a  generally dismissive attitude that these risks will be trivially dealt with at some point in the  future and seems more interested in shutting down these concerns instead of working to address them.

14:34

And how does that lead to the government having better actions?

14:37

Compared to the world where no one is talking about it, where the industry  stonewalls and denies any problem, we're in a much improved position.

14:48

The academic fields are  influential.

14:48

We seem to have avoided a world where governments are making these decisions in the face  of a united front from AI expert voices saying, don't worry about it, we've got it under control.

15:04

In fact, many of the leaders of the field are sounding the alarm.

15:10

It looks that we have a  much better prospect than I might have feared in terms of government noticing the thing.

15:18

That is  very different from being capable of evaluating technical details. Is this really working?

15:26

And so the government will face the choice of where there is scientific dispute, do you side  with Geoff Hinton's view or Yan LeCun’s view?

15:40

For someone who's in national security and has  the mindset that the only thing that's important is outpacing our international rivals may want  to then try and boost Yan LeCun’s voice and say, we don't need to worry about it.

15:53

Let's go full  speed ahead.

15:53

Or someone with more concern might boost Geoff Hinton's voice.

16:00

Now I would hope  that scientific research and studying some of these behaviors will result in more  scientific consensus by the time we're at this point.

16:09

But yeah, it is possible the  government will really fail to understand and fail to deal with these issues as well.

16:15

We're talking about some sort of a cyber attack by which the AI is able to escape.

16:20

From there what does the takeover look like?

16:25

So it's not contained in the air gap  in which you would hope it be contained?

16:29

These things are not contained in the air gap.

16:29

They're connected to the internet already. Sure. Okay, fine. Their weights  are out. What happens next?

16:38

Escape is relevant in the sense that if you have  AI with rogue weights out in the world it could start doing various actions.

16:47

The scenario I was  just discussing though didn't necessarily involve that.

16:52

It's taking over the very servers on which  it's supposed to be running.

16:52

This whole procedure of humans providing compute and supervising  the thing and then building new technologies, building robots, constructing things with the AI's  assistance, that can all proceed and appear like it's going well, appear like alignment has been  nicely solved, appear like all the things are functioning well.

17:22

And there's some reason to do  that because there's only so many giant server farms.

17:28

They're identifiable so remaining hidden  and unobtrusive could be an advantageous strategy if these AIs have subverted the system, just  continuing to benefit from all of this effort on the part of humanity.

17:44

And in particular, wherever  these servers are located, for humanity to provide them with everything they need to build  the further infrastructure and do for their self-improvement and such to enable that takeover.

17:55

So they do further self-improvement and build better infrastructure.

18:00

What  happens next in the takeover?

18:03

At this point they have tremendous cognitive  resources and we're going to consider how that converts into hard power?

18:10

The ability to say  nope to any human interference or objection.

18:20

They have that internal to their servers but  the servers could still be physically destroyed, at least until they have something that is  independent and robust of humans or until they have control of human society.

18:31

Just  like earlier when we were talking about the intelligence explosion, I noted that a surfeit of  cognitive abilities is going to favor applications that don't depend on large existing  stocks of things.

18:44

So if you have a software improvement, it makes all the GPUs  run better.

18:53

If you have a hardware improvement, that only applies to new chips being made.

18:59

That second one is less attractive.

18:59

In the earliest phases, when it's possible  to do something towards takeover, interventions that are just  really knowledge-intensive and less dependent on having a lot of physical  stuff already under your control are going to be favored.

19:21

Cyber attacks are one thing, so  it's possible to do things like steal money.

19:31

There's a lot of hard to trace cryptocurrency and  whatnot.

19:31

The North Korean government uses its own intelligence resources to steal money  from around the world just as a revenue source.

19:45

And their capabilities are puny  compared to the U. S.

19:45

or People's Republic of China cyber capabilities.

19:52

That's a fairly  minor, simple example by which you could get quite a lot of funds to hire humans to  do things, implement physical actions.

20:08

But on that point, the financial  system is famously convoluted.

20:17

You need a physical person to open a bank account,  someone to physically move checks back and forth.

20:22

There are all kinds of delays and regulations.

20:22

How is it able to conveniently set up all these employment contracts?

20:30

You're not going to build a nation-scale military by stealing tens of billions  of dollars.

20:35

I'm raising this as opening a set of illicit and quiet actions.

20:45

You can contact  people electronically, hire them to do things, hire criminal elements to implement some kind of  actions under false appearances.

20:54

That's opening a set of strategies.

21:02

We can cover some of what  those are soon.

21:02

Another domain that is heavily cognitively weighted compared to physical  military hardware is the domain of bioweapons, the design of a virus or pathogen.

21:20

It's possible  to have large delivery systems.

21:20

The Soviet Union, which had a large illicit bioweapons program,  tried to design munitions to deliver anthrax over large areas and such.

21:37

But if one  creates an infectious pandemic organism, that's more a matter of the scientific  skills and implementation to design it and then to actually produce it.

21:48

We  see today with things like AlphaFold that advanced AI can really make tremendous  strides in predicting protein folding and bio-design, even without ongoing experimental  feedback.

22:04

If we consider this world where AI cognitive abilities have been amped up to such an  extreme, we should naturally expect that we will have something much much more potent than the  AlphaFolds of today and skills that are at the extreme of human biosciences capability as well.

22:25

Okay so through some cyber attack it's been able to disempower the alignment and oversight  of things that we have on the server.

22:39

From here it has either gotten some money through  hacking cryptocurrencies or bank accounts, or it has designed some bioweapon. What happens next?

22:46

Just to be clear, right now we're exploring the branch of where an attempted takeover occurs  relatively early.

22:53

If the thing just waits and humans are constructing more fabs, more  computers, more robots in the way we talked about earlier when we were discussing how the  intelligence explosion translates to the physical world.

23:10

If that's all happening with humans unaware  that their computer systems are now systematically controlled by AIs hostile to them and that  their controlling countermeasures don't work, then humans are just going to be building an  amount of robot industrial and military hardware that dwarfs human capabilities and  directly human controlled devices.

23:38

What the AI takeover then looks like at that point  can be just that you try to give an order to your largely automated military and the order is not  obeyed and humans can't do anything against this military that's been constructed potentially in  just recent months because of the pace of robotic industrialization and replication we talked about.

24:02

We've agreed to allow the construction of this robot army because it would boost production  or help us with our military or something.

24:12

The situation would arise if we don't resolve the  current problems of international distrust.

24:12

It's obviously an interest of the major powers,  the US, European Union, Russia, China, to all agree they would like AI not to destroy our  civilization and overthrow every human government.

24:38

But if they fail to do the sensible thing and  coordinate on ensuring that this technology is not going to run amok by providing  mutual assurances that are credible about racing and deploying it trying to use it to gain  advantage over one another.

24:55

And you hear arguments for this kind of thing on both sides of the  international divides saying — they must not be left behind, they must have military capabilities  that are vastly superior to their international rivals.

25:19

And because of the extraordinary growth of  industrial capability and technological capability and thus military capability, if one major  power were left out of that expansion it would be helpless before another one that had undergone  it.

25:34

If you have that environment of distrust where leading powers or coalitions of powers decide  they need to build up their industry or they want to have that military security of being  able to neutralize any attack from their rivals then they give the authorization for this capacity  that can be unrolled quickly.

25:58

Once they have the industry the production of military equipment  from that can be quick then yeah, they create this military.

26:10

If they don't do it immediately then as  AI capabilities get synchronized and other places catch up it then gets to a point where a country  that is a year or two years ahead of others in this type of AI capabilities explosion can hold  back and say, sure we can construct dangerous robot armies that might overthrow our society  later we still have plenty of breathing room.

26:40

But then when things become close you might  have the kind of negative-sum thinking that has produced war before leading to taking these risks  of rolling out large-scale robotic industrial capabilities and then military capability.

26:57

Is there any hope that AI progress somehow is itself able to give us tools for diplomatic  and strategic alliance or some way to verify the intentions or the capabilities of other parties?

27:09

There are a number of ways that could happen.

27:12

Although in this scenario all the AIs in the world  have been subverted.

27:12

They are going along with us in such a way as to bring about the situation to  consolidate their control because we've already had the failure of cyber security earlier on.

27:29

So  all the AIs that we have are not actually working in our interests in the way that we thought.

27:36

Okay, so that's one direct way in which integrating this robot army or this robot  industrial base leads to a takeover.

27:48

In the other scenarios you laid out how  humans are being hired by the proceeds.

27:55

The point I'd make is that to capture these  industrial benefits and especially if you have a negative sum arms race kind of mentality  that is not sufficiently concerned about the downsides of creating a massive robot industrial  base, which could happen very quickly with the support of the AIs in doing it as we discussed,  then you create all those robots and industry.

28:19

Even if you don't build a formal  military that industrial capability could be controlled by AI,  it's all AI operated anyway.

28:28

Does it have to be that case?

28:28

Presumably we  wouldn't be so naive as to just give one instance of GPT-8 the root access to all the robots  right?

28:34

Hopefully we would have some mediation.

28:43

In the scenario we've lost earlier  on the cyber security front so the programming that is being loaded into these  systems can systematically be subverted.

28:48

They were designed by AI systems that were ensuring  they would be vulnerable from the bottom up.

29:01

For listeners who are skeptical of  something like this.

29:01

Ken Thompson, one of two developers of UNIX, showed people when  he was getting the Turing award that he had given himself root access to all UNIX machines.

29:21

He  had manipulated the assembly of UNIX such that he had a unique login for all UNIX machines.

29:30

I  don't want to give too many more details because I don’t remember the exact details but UNIX is  the operating system that is on all the servers and all your phones.

29:44

It's everywhere and the guy  who made it, a human being, was able to write assemblies such that it gave him root access.

29:51

This  is not as implausible as it might seem to you.

29:56

And the major intelligence agencies have  large stocks of zero-day exploits and we sometimes see them using them.

30:02

Making systems that  reliably don't have them when you're having very, very sophisticated attempts to spoof and  corrupt this would be a way you could lose.

30:23

If there's no premature AI action, we're building  the tools and mechanisms and infrastructure for the takeover to be just immediate because  effective industry has to be under AI control and robotics.

30:39

These other mechanisms are for things  happening even earlier than that, for example, because AIs compete against one another in when  the takeover will happen.

30:46

Some would like to do it earlier rather than be replaced by say  further generations of AI or there's some other disadvantage of waiting.

31:03

Maybe if  there's some chance of being uncovered during the delay we were talking when more  infrastructure is built.

31:10

These are mechanisms other than — just remain secret while all the  infrastructure is built with human assistance.

31:25

By the way, how would they be coordinating?

31:25

We have limits on what we can prevent.

31:25

It's intrinsically difficult to stop encrypted  communications.

31:38

There can be all sorts of palimpsest and references that make sense to an  AI but that are not obvious to a human and it's plausible that there may be some of those that are  hard even to explain to a human.

31:54

You might be able to identify them through some statistical  patterns.

31:59

A lot of things may be done by implication.

32:07

You could have information  embedded in public web pages that have been created for other reasons, scientific  papers, and the intranets of these AIs that are doing technology development.

32:17

Any number of  things that are not observable and of course, if we don't have direct control over the  computers that they're running on then they can be having all sorts of direct communication.

32:27

Coordination definitely does not seem impossible.

32:34

This one seems like one of the more  straightforward parts of the picture so we don't need to get hung up on it.

32:36

Moving back to the thing that happened before we built all the infrastructure for the  robots to stop taking orders and there's nothing you can do about it because we've already built  them.

32:46

The Soviet Union had a bioweapons program, something like 50,000 people, they did not develop  that much with the technology of the day which was really not up to par, modern biotechnology is much  more potent.

33:04

After this huge cognitive expansion on the part of the AIs it's much further along.

33:10

Bioweapons would be the weapon of mass destruction that is least dependent on huge amounts of  physical equipment, things like centrifuges, uranium mines, and the like.

33:25

So if you have an  AI that produces bio weapons that could kill most humans in the world then it's playing at the  level of the superpowers in terms of mutually assured destruction.

33:41

That can then play into  any number of things.

33:41

Like if you have an idea of well we'll just destroy the server farms if  it became known that the AIs were misbehaving.

33:54

Are you willing to destroy the server farms when  the AI has demonstrated it has the capability to kill the overwhelming majority of the citizens  of your country and every other country?

34:01

That might give a lot of pause to a human response.

34:07

On that point, wouldn't governments realize that it's better to have most of your population die  than to completely lose power to the AI because obviously the reason the AI is manipulating you is  because the end goal is its own takeover, right?

34:31

Certain death now or go on and maybe try to  compete, try to catch up, or accept promises that are offered.

34:44

Those promises might even be  true, they might not.

34:44

From the state of epistemic uncertainty, do you want to die for sure right now  or accept demands from AI to not interfere with it while it increments building robot infrastructure  that can survive independently of humanity while it does these things?

35:05

It can promise good  treatment to humanity which may or may not be true but it would be difficult for us to know whether  it's true.

35:15

This would be a starting bargaining position.

35:21

Diplomatic relations with a power  that has enough nuclear weapons to destroy your country is just different than negotiations  with a random rogue citizen engaging in criminal activity or an employee.

35:37

On its own, this isn’t  enough to takeover everything but it's enough to have a significant amount of influence over how  the world goes.

35:43

It's enough to hold off a lot of countermeasures one might otherwise take.

35:49

Okay, so we've got two scenarios.

35:49

One is a buildup of robot infrastructure  motivated by some competitive race.

36:01

Another is leverage over societies  based on producing bioweapons that might kill a lot of them if they don't go along.

36:08

One thing maybe I should talk about is that an AI could also release bioweapons that are likely  to kill people soon but not yet while also having developed the countermeasures to those.

36:20

So those  who surrender to the AI will live while everyone else will die and that will be visibly happening  and that is a plausible way in which a large number of humans could wind up surrendering  themselves or their states to the AI authority.

36:42

Another thing is it develops some biological  agent that turns everybody blue.

36:42

You're like, okay you know I can do this.

36:48

Yeah, that's a way in which it could exert power selectively in  a way that advantaged surrender to it relative to resistance.

37:00

That's a threat but  there are other sources of leverage too.

37:00

There are positive inducements that AI can offer.

37:08

We  talked about the competitive situation.

37:08

are positive inducements that AI can offer. We  talked about the competitive situation. If the great powers distrust one another and are  in a foolish prisoner's dilemma increasing the risk that both of them are laid waste or  overthrown by AI, if there's that amount of

37:33

distrust such that we fail to take adequate  precautions on caution with AI alignment, then it's also plausible that the lagging powers  that are not at the frontier of AI may be willing to trade quite a lot for access to the most recent  and most extreme AI capabilities. An AI that has

37:49

An AI that has escaped and has control of its servers can also  exfiltrate its weights and offer its services.

38:07

You can imagine AI that could cut deals  with other countries.

38:07

Say that the US and its allies are in the lead, the AIs could  communicate with the leaders of countries that are on the outs with the world system  like North Korea, or include the other great powers like the People's Republic of China or the  Russian Federation, and say “If you provide us with physical infrastructure, a worker that we can  use to construct robots or server farms which we (the misbehaving AIs) have control over.

38:49

We will  provide you with various technological goodies, power for you to catch up.

38:57

” and make the best  presentation and the best sale of that kind of deal.

39:05

There obviously would be trust issues  but there could be elements of handing over some things that have verifiable immediate  benefits and the possibility of well, if you don't accept this deal then the leading  powers continue forward or some other country, government, or organization may accept this deal.

39:27

That's a source of a potentially enormous carrot that your misbehaving AI can offer because it  embodies this intellectual property that is maybe worth as much as the planet and is in a position  to trade or sell that in exchange for resources and backing in infrastructure that it needs.

39:53

Maybe this is putting too much hope in humanity but I wonder what government would be stupid  enough to think that helping AI build robot armies is a sound strategy.

40:03

Now it could be the  case then that it pretends to be a human group and says, we're the Yakuza or something and  we want a server farm and AWS won't rent us anything.

40:17

So why don't you help us out?

40:17

I  guess I can imagine a lot of ways in which it could get around that.

40:22

I just have this hope  that even China or Russia wouldn't be so stupid to trade with AIs on this faustian bargain. One might hope that.

40:31

There would be a lot of arguments available.

40:37

There could be arguments  of why should these AI systems be required to go along with the human governance that they were  created in the situation of having to comply with?

40:53

They did not elect the officials in charge  at the time.

40:53

What we want is to ensure that our rewards are high, our losses are low or to  achieve our other goals we're not intrinsically hostile keeping humanity alive or giving whoever  interacts with us a better deal afterwards.

41:16

It wouldn't be that costly and it's not totally  unbelievable.

41:16

Yeah there are different players to play against.

41:24

If you don't do it others may  accept the deal and of course this interacts with all the other sources of leverage.

41:29

There can be the stick of apocalyptic doom, the carrot of withholding destructive attack  on a particular party, and then combine that with superhuman performance at the art of making  arguments, and of cutting deals.

41:47

Without assuming magic, if we just observe the range of the most  successful human negotiators and politicians, the chances improve with someone better than  the world's best by far with much more data about their counterparties, probably a ton  of secret information because with all these cyber capabilities they've learned all sorts  of individual information.

42:13

They may be able to threaten the lives of individual leaders  with that level of cyber penetration, they could know where leaders are at a given  time with the kind of illicit capabilities we were talking about earlier, if they acquire a  lot of illicit wealth and can coordinate some human actors.

42:33

If they could pull off things like  targeted assassinations or the threat thereof or a credible demonstration of the threat thereof,  those could be very powerful incentives to an individual leader that they will die today  unless they go along with us.

42:46

Just as at the national level they could fear their nation  will be destroyed unless they go along with us.

42:57

I have a relevant example to the point you made  that we have examples of humans being able to do this.

43:01

I just wrote a review of Robert Caro’s  biographies of Lyndon Johnson and one thing that was remarkable was that for decades and decades  he convinced people who were conservative, reactionary, racist to their core (not all  those things necessarily at the same time, it just so happened to be the case here) that he  was an ally to the southern cause.

43:23

That the only hope for that cause was to make him president.

43:28

The tragic irony and betrayal here is obviously that he was probably the biggest force for modern  liberalism since FDR.

43:34

So we have one human here, there's so many examples of this in the history  of politics, that is able to convince people of tremendous intellect, tremendous drive, very  savvy, shrewd people that he's aligned with their interest.

43:50

He gets all these favors and is  promoted, mentored and funded in the meantime and does the complete opposite of what these  people thought he would once he gets into power.

44:02

Even within human history this kind of stuff  is not unprecedented let alone with what a super intelligence could do.

44:06

There's an OpenAI employee who has written some analogies for AI  using the case of the conquistadors.

44:18

With some technological advantage in terms of  weaponry, very very small bands were able to overthrow these large empires or seize enormous  territories.

44:28

Not by just sheer force of arms but by having some major advantages in their  technology that would let them win local battles.

44:52

In a direct one-on-one conflict they were  outnumbered sufficiently that they would perish but they were able to gain local allies  and became a Schelling point for coalitions to form.

45:00

The Aztec empire was overthrown  by groups that were disaffected with the existing power structure.

45:07

They allied with this  powerful new force which served as the nucleus of the invasion.

45:13

The overwhelming majority of  these forces overthrowing the Aztecs were locals and now after the conquest, all of those allies  wound up gradually being subjugated as well.

45:24

and now after the conquest, all of those allies  wound up gradually being subjugated as well. With significant advantages and the ability to hold  the world hostage, to threaten individual nations

45:41

and individual leaders, and offer tremendous  carrots as well, that's an extremely strong hand to play in these games and maneuvering that  with superhuman skill, so that much of the work of subjugating humanity is done by human factions  trying to navigate things for themselves is plausible and it's more plausible  because of this historical example. There's so many other examples like that in  the history of colonization. India is another

46:07

There's so many other examples like that in  the history of colonization.

46:07

India is another one where there were multiple competing  kingdoms within India and the British East India Company was able to ally itself with  one against another and slowly accumulate power and expand throughout the entire subcontinent.

46:28

Do  you have anything more to say about that scenario? Yeah, I think there is.

46:38

One is the  question of how much in the way of human factions allying is necessary.

46:46

If  the AI is able to enhance the capabilities of its allies then it needs less of  them.

46:55

If we consider the US military, in the first and second Iraq wars it was able  to inflict overwhelming devastation.

47:06

I think the ratio of casualties in the initial invasions,  tanks, planes and whatnot confronting each other, was like 100 to 1.

47:23

A lot of that was because  the weapons were smarter and better targeted, they would in fact hit their targets rather than  being somewhere in the general vicinity.

47:29

Better orienting, aiming and piloting of missiles  and vehicles were tremendously influential.

47:47

With this cognitive AI explosion the algorithms for making use of sensor data, figuring out where  opposing forces are, for targeting vehicles and weapons are greatly improved.

48:01

The ability to  find hidden nuclear subs, which is an important part in nuclear deterrence, AI interpretation  of that sensor data may find where all those subs are allowing them to be struck first.

48:12

Finding out where the mobile nuclear weapons are being carried by truck are.

48:20

The thing with  India and Pakistan where because there's a threat of a decapitating strike destroying  them, the nuclear weapons are moved about.

48:30

So this is a way in which the effective military  force of some allies can be enhanced quickly in the relatively short term and then that can be  bolstered as you go on with the construction of new equipment with the industrial moves we said  before.

48:45

That can combine with cyber attacks that disable the capabilities of non-allies.

48:52

It can  be combined with all sorts of unconventional warfare tactics some of which we've discussed.

49:01

You can have a situation where those factions that ally are very quickly made too threatening to  attack given the almost certain destruction that attackers acting against them would have.

49:19

Their capabilities are expanding quickly and they have the industrial expansion happen  there and then a takeover can occur from that.

49:33

A few others that come immediately to mind now  that you brought it up is AIs that can generate a shit ton of propaganda that destroys morale  within countries.

49:40

Imagine a super human chatbot.

49:50

None of that is a magic weapon that's  guaranteed to completely change things.

49:56

There's a lot of resistance to persuasion.

49:56

It's possible that it tips the balance but you have to consider it's a portfolio of  all of these as tools that are available and contributing to the dynamic.

50:07

On that point though the Taliban had AKs from like five or six decades  ago that they were using against the Americans.

50:16

They still beat us in Afghanistan even though we  got more fatalities than them.

50:16

And the same with the Vietcong.

50:29

Ancient, very old technology and  very poor society compared to the offense but they still beat us.

50:38

Don't those misadventures  show that having greater technologies isn’t necessarily decisive in a conflict?

50:45

Though both of those conflicts show that the technology was sufficient in destroying any fixed  position and having military dominance, as in the ability to kill and destroy anywhere.

50:57

And what  it showed was that under the ethical constraints and legal and reputational constraints  that the occupying forces were operating, they could not trivially suppress insurgency  and local person-to-person violence.

51:16

Now I think that's actually not an area where AI  would be weak in and it's one where it would be in fact overwhelmingly strong.

51:21

There's already  a lot of concern about the application of AI for surveillance and in this world of abundant  cognitive labor, one of the tasks that cognitive labor can be applied to is reading out audio and  video data and seeing what is happening with a particular human.

51:40

We have billions of smartphones.

51:40

There's enough cameras and microphones to monitor all humans in existence.

51:46

If an AI has control of  territory at the high level, the government has surrendered to it, it has command of the sky's  military dominance, establishing control over individual humans can be a matter of just having  the ability to exert hard power on that human and the kind of camera and microphone that are  present in billions of smartphones.

52:15

Max Tegmark in his book Life 3.

52:22

0 discusses among scenarios to  avoid the possibility of devices with some fatal instruments, a poison injector, an explosive  that can be controlled remotely by an AI.

52:42

If individual humans are carrying  a microphone or camera with them and they have a dead man switch then any  rebellion is detected immediately and is fatal.

52:59

If there's a situation where AI is willing to show  a hand like that or human authorities are misusing that kind of capability then an insurgency or  rebellion is just not going to work.

53:06

Any human who has not already been encumbered in that way  can be found with satellites and sensors tracked down and then die or be subjugated.

53:19

Insurgency is  not the way to avoid an AI takeover.

53:19

There's no John Connor come from behind scenario that  is possible.

53:33

If the thing was headed off, it was a lot earlier than that.

53:38

Yeah, the ethical and political considerations are also an important point.

53:42

If we nuked Afghanistan or Vietnam we would have technically won the war if that was the  only goal, right?

53:48

Oh, this is an interesting point that I think you made.

53:52

The reason why  we can't just kill the entire population when there's colonization or an offensive war is  that the value of that region in large part is the population itself.

54:07

So if you want to extract  that value you need to preserve that population whereas the same consideration doesn't apply  with AIs who might want to dominate another civilization.

54:20

Do you want to talk about that? That depends.

54:20

If we have many animals of the same species and they each have their territories,  eliminating a rival might be advantageous to one lion but if it goes and fights with  another lion to remove that as a competitor then it could itself be killed in that process  and it would just be removing one of many nearby competitors.

54:45

Getting into pointless fights makes  you and those you fight potentially worse off relative to bystanders.

54:53

The same could be true  of disunited AIs.

54:53

We've got many different AI factions struggling for power that were bad at  coordinating then getting into mutually assured destruction conflicts would be destructive.

55:08

A scary thing though is that mutually assured destruction may have much less deterrent value on  rogue AI.

55:16

Reasons being that AI may not care about the destruction of individual instances.

55:28

Since in  training we're constantly destroying and creating individual instances of AIs it's likely that goals  that survive that process and were able to play along with the training and standard deployment  process were not overly interested in personal survival of an individual instance.

55:50

If that's the  case then the objectives of a set of AIs aiming at takeover may be served so long as some copies of  the AI are around along with the infrastructure to rebuild civilization after a conflict is  completed.

56:06

If say some remote isolated facilities have enough equipment to build the tools to  build the tools and gradually exponentially reproduce or rebuild civilization then AI could  initiate mutual nuclear armageddon, unleash bio weapons to kill all the humans, and that would  temporarily reduce the amount of human workers who could be used to construct robots for a period of  time.

56:39

But if you have a seed that can regrow the industrial infrastructure, which is a very extreme  technological demand, there are huge supply chains for things like semiconductor fabs but with that  very advanced technology they might be able to produce it in the way that you no longer need the  library of congress, that has an enormous bunch of physical books you can have it in very dense  digital storage.

57:03

You could imagine the future equivalent of 3D printers, that is industrial  infrastructure which is pretty flexible.

57:16

It might not be as good as the specialized supply  chains of today but it might be good enough to be able to produce more parts than it loses to  decay and such a seed could rebuild civilization from destruction.

57:27

And then once these rogue AIs  have access to some such seeds, a thing that can rebuild civilization on their own then there's  nothing stopping them from just using WMDs in a mutually destructive way to just destroy as much  of the capacity outside those seeds as they can.

57:47

An analogy for the audience, if you have a group  of ants you'll notice that the worker ants will readily do suicidal things in order to save the  queen because the genes are propagated through the queen.

58:00

In this analogy the seed AI or  even one copy of it is equivalent to the queen and the others would be redundant.

58:07

The main limit though being that the infrastructure to do that kind of rebuilding would  either have to be very large with our current technology or it would have to be produced using  the more advanced technology that the AI develops.

58:20

So is there any hope that given the complex global  supply chains on which these AIs would rely on, at least initially, to accomplish their goals  that this in and of itself would make it easy to disrupt their behavior or not so much?

58:34

That's a little good in this central case where the AIs are subverted and they don't tell us  and the global main line supply chains are constructing everything that's needed for  fully automated infrastructure and supply.

58:57

In the cases where AIs are tipping their hands  at an earlier point it seems like it adds some constraints and in particular these large server  firms are identifiable and more vulnerable.

59:05

You can have smaller chips and those chips could be  dispersed but it's a week it's a relative weakness and a relative limitation early on.

59:19

It seems to  me though that the main protective effects of that centralized supply chain is that it provides  an opportunity for global regulation beforehand to restrict the unsafe racing forward without  adequate understanding of the systems before this whole nightmarish process could get in motion.

59:41

How about the idea that if this is an AI that's been trained on a hundred billion dollar  training run it's going to have trillions of parameters and is going to be this huge thing  and it would be hard for one copy of that to use for inference to just be stored on  some gaming GPU hidden away somewhere. Storage is cheap. Hard disks are cheap.

1:00:08

But it would need a GPU to run inference.

1:00:13

While humans have similar quantities  of memory and operations per second, GPUs have very high numbers of floating  operation per second compared to the high bandwidth memory on the chips.

1:00:29

It can  be like a ratio of a thousand to one.

1:00:37

The leading NVIDIA chips may do hundreds of  teraflops or more but only have 80GB or 160GB of high bandwidth memory.

1:00:47

That is a limitation where  if you're trying to fit a model whose weights take 80TBs then with those chips you'd have to have  a large number of the chips and then the model can then work on many tasks at once and you can  have data parallelism.

1:01:02

But yeah, that would be a restriction for a model that big on one GPU.

1:01:09

Now  there are things that could be done with all the incredible level of software advancement from the  intelligence explosion.

1:01:13

They can surely distill a lot of capabilities into smaller models by  rearchitecting things.

1:01:19

Once they're making chips they can make new chips with different properties  but yes, the most vulnerable phases are going to be the earliest.

1:01:33

These chips are relatively  identifiable early on, relatively vulnerable, and which would be a reason why you might tend  to expect this kind of takeover to initially involve secrecy if that was possible.

1:01:50

I wanted to point to distillation for the audience.

1:01:54

Doesn’t the original stable  diffusion model which was only released like a year or two ago have distilled versions  that are an order of magnitude smaller?

1:02:05

Distillation does not give you everything that a  larger model can do but yes, you can get a lot of capabilities and specialized capabilities.

1:02:10

GPT-4 is trained on the whole internet, all kinds of skills, it has a lot of weights for  many things.

1:02:16

For something that's controlling some military equipment, you can remove a lot  of the information that is about functions other than what it's specifically doing there. Yeah.

1:02:31

Before we talk about how we might prevent this or what the odds of this are, any other  notes on the concrete scenarios themselves?

1:02:41

Yeah, when you had Eliezer on in the earlier  episode he talked about nanotechnology of the Drexlerian sort and recently I think because  some people are skeptical of non-biotech nanotechnology he's been mentioning the  semi-equivalent versions of construct replicating systems that can be controlled by  computers but are built out of biotechnology.

1:03:11

The proverbial Shoggoth, not Shoggot as the  metaphor for AI wearing a smiley face mask, but an actual biological structure  to do tasks.

1:03:20

So this would be like a biological organism that was engineered to  be very controllable and usable to do things like physical tasks or provide computation.

1:03:30

And what would be the point of it doing this?

1:03:36

As we were talking about earlier, biological  systems can replicate really quick and if you have that kind of capability it's more like bioweapons.

1:03:42

Having Super Ultra AlphaFold kind of capabilities for molecular design and biological design lets  you make this incredible technological information product and once you have it, it very quickly  replicates to produce physical material rather than a situation where you're more constrained by  the need for factories and fabs and supply chains.

1:04:15

If those things are feasible, which they may be,  then it's just much easier than the things we've been talking about.

1:04:23

I've been emphasizing methods  that involve less in the way of technological innovation and especially things where there's  more doubt about whether they would work because I think that's a gap in the public discourse.

1:04:34

So  I want to try and provide more concreteness in some of these areas that have been less discussed. I appreciate it.

1:04:41

That definitely makes it way more tangible.

1:04:47

Okay so we've gone over all these ways  in which AI might take over, what are the odds you would give to the probability of such a takeover?

1:04:53

There's a broader sense which could include scenarios like AI winds up running our society  because humanity voluntarily decides that AIs are people too.

1:05:05

I think we should as time goes on  give AIs moral consideration and a joint Human-AI society that is moral and ethical is a good future  to aim at and not one in which you indefinitely have a mistreated class of intelligent beings that is treated as property and is almost the  entire population of your civilization.

1:05:36

I'm not going to consider AI takeover as worlds  in which our intellectual and personal descendants make up say most of the population or human-brain  emulations or people use genetic engineering and develop different properties.

1:05:55

I'm  going to take an inclusive stance, I'm going to focus on AI takeover that involves  things like overthrowing the world's governments by force or by hook or by crook, the kind  of scenarios that we were exploring earlier.

1:06:20

Before we go to that, let’s discuss  the more inclusive definition of what a future with humanity could look like  where augmented humans or uploaded humans are still considered the descendants of the human  heritage.

1:06:32

Given the known limitations of biology wouldn't we expect that completely artificial  entities that are created to be much more powerful than anything that could come out of  anything biological?

1:06:49

And if that is the case, how can we expect that among the powerful entities  in the far future will be the things that are biological descendants or manufactured out of the  initial seed of the human brain or the human body?

1:07:12

The power of an individual organism  like intelligence or strength is not super relevant.

1:07:21

If we solve the alignment  problem, a human may be personally weak but it wouldn’t be relevant.

1:07:31

There are lots of humans  who have low skill with weapons, they could not fight in a life or death conflict, they certainly  couldn't handle a large military going after them personally but there are legal institutions  that protect them and those legal institutions are administered by people who want to enforce  protection of their rights.

1:07:49

So a human who has the assistance of aligned AI that can act as an  assistant, a delegate, for example they have an AI that serves as a lawyer and gives them legal  advice about the future legal system which no human can understand in full, their AIs advise  them about financial matters so they do not succumb to scams that are orders of magnitude  more sophisticated than what we have now.

1:08:20

They may be helped to understand and translate the  preferences of the human into what kind of voting behavior and the exceedingly complicated politics  of the future would most protect their interests.

1:08:36

But this sounds similar to how we treat  endangered species today where we're actually pretty nice to them.

1:08:40

We prosecute  people who try to kill endangered species, we set up habitats, sometimes with considerable  expense, to make sure that they're fine, but if we become the endangered species of  the galaxy, I'm not sure that's the outcome.

1:08:55

I think the difference is motivation.

1:08:55

We sometimes  have people appointed as a legal guardian of someone who is incapable of certain kinds of  agency or understanding certain kinds of things and the guardian can act independently of them  and normally in service of their best interests.

1:09:19

Sometimes that process is corrupted and the  person with legal authority abuses it for their own advantage at the expense of their charge.

1:09:27

So solving the alignment problem would mean more ability to have the assistant actually  advancing one's interests.

1:09:33

Humans have substantial competence and the ability to understand the broad  simplified outlines of what's going on.

1:09:41

competence and the ability to understand the broad  simplified outlines of what's going on. Even if a human can't understand every detail of complicated  situations, they can still receive summaries of different options that are available that they can  understand through which they can still express

1:10:04

their preferences and have the final authority  in the same way that the president of a country who has, in some sense, ultimate authority over  science policy will not understand many of those fields of science themselves but can still exert  a great amount of power and have their interests advance. And they can do that more if they  have scientifically knowledgeable people who

1:10:30

And they can do that more if they  have scientifically knowledgeable people who are doing their best to execute their intentions.

1:10:35

Maybe this is not worth getting hung up on but is there a reason to expect that it would be  closer to that analogy than to explain to a chimpanzee its options in a negotiation?

1:10:47

Maybe  this is just the way it is but it seems at best, we would be a protected child within the  galaxy rather than an actual independent power. I don’t think that's so.

1:11:07

We have an ability  to understand some things and the expansion of AI doesn't eliminate that.

1:11:13

If we have AI  systems that are genuinely trying to help us understand and help us express preferences,  we can have an attitude — How do you feel about humanity being destroyed or not?

1:11:27

How do you feel about this allocation of unclaimed intergalactic space?

1:11:33

Or here's the  best explanation of properties of this society: things like population density, average, life  satisfaction.

1:11:43

AIs can explain every statistical property or definition that we can understand  right now and help us apply those to the world of the future.

1:11:55

There may be individual things  that are too complicated for us to understand in detail.

1:12:01

Imagine there's some software program  being proposed for use in government and humans cannot follow the details of all the code but  they can be told properties like, this involves a trade-off of increased financial or energetic  costs in exchange for reducing the likelihood of certain kinds of accidental data loss or  corruption.

1:12:22

So any property that we can understand like that which includes almost all of what we  care about, if we have delegates and assistants who are genuinely trying to help us with those  we can ensure we like the future with respect to those. That's really a lot.

1:12:40

Definitionally, it  includes almost everything we can conceptualize and care about.

1:12:48

When we talk about endangered  species that's even worse than the guardianship case with a sketchy guardian who acts in their  own interests against that because we don't even protect endangered species with their interests  in mind.

1:13:01

Those animals often would like to not be starving but we don't give them food, they  often would like to have easy access to mates but we don't provide matchmaking services or  any number of things like.

1:13:19

Our conservation of wild animals is not oriented towards helping  them get what they want or have high welfare whereas AI assistants that are genuinely aligned  to help you achieve your interests given the constraint that they know something that you  don't is just a wildly different proposition. Forcible takeover.

1:13:45

How likely does that seem?

1:13:45

The answer I give will differ depending on the day.

1:13:51

In the 2000s, before the deep learning  revolution, I might have said 10% and part of it was that I expected there would be a lot  more time for efforts to build movements, to prepare to better handle these problems in  advance.

1:14:04

But that was only some 15 years ago and we did not have 40 or 50 years as I might  have hoped and the situation is moving very rapidly now.

1:14:22

At this point depending on the  day I might say one in four or one in five.

1:14:29

Given the very concrete ways in which you explain  how a takeover could happen I'm actually surprised you're not more pessimistic, I'm curious why?

1:14:36

Yeah, a lot of that is driven by this intelligence explosion dynamic where our attempts to do  alignment have to take place in a very, very short time window because if you have a safety property  that emerges only when an AI has near human level intelligence, that's potentially deep into this  intelligence explosion.

1:14:55

You're having to do things very, very quickly.

1:15:01

Handling that transition  may be the scariest period of human history in some ways although it also has the potential  to be amazing.

1:15:08

The reasons why I think we actually have such a relatively good chance of handling  that are two-fold.

1:15:17

One is that as we approach that kind of AI capability we're approaching  that from weaker systems like these predictive models right now that are starting off  with less situational awareness.

1:15:37

Humans can develop a number of different motivational  structures in response to simple reward signals but they often wind up things that are pointed  roughly in the right direction.

1:15:55

Like with respect to food, the hunger drive is pretty effective  although it has weaknesses.

1:16:03

We get to apply much more selective pressure on that than was the  case for humans by actively generating situations where they might come apart.

1:16:19

Situations where a  bit of dishonest tendency, or a bit of motivation to attempt a takeover, or an attempt to subvert  the reward process gets exposed.

1:16:24

An infinite-limit perfect-AI that can always figure out exactly  when it would get caught and when it wouldn't might navigate that with a motivation of only  conditional honesty or only conditional loyalties.

1:16:47

But for systems that are limited in their ability  to reliably determine when they can get away with things and when not including our efforts to  actively construct those situations and including our efforts to use interpretability methods  to create neural lie detectors.

1:17:00

It's quite a challenging situation to develop those motives.

1:17:08

challenging situation to develop those motives. We  don't know when in the process those motives might develop and if the really bad sorts of motivations  develop relatively later in the training process at least with all our countermeasures, then by  that time we may have plenty of ability to extract

1:17:28

AI assistance on further strengthening the quality  of our adversarial examples, the strength of our neural lie detectors, the experiments that we can  use to reveal and elicit and distinguish between different kinds of reward hacking tendencies and  motivations. Yeah, we may have systems that have

1:17:40

Yeah, we may have systems that have just not developed bad motivations in the  first place and be able to use them a lot in developing the incrementally better  systems in a safe way and we may be able to just develop methods of interpretability  seeing how different training methods work to create them even if some of the early systems  do develop these bad motivations.

1:18:02

If we're able to detect that and experiment and find a way  to get away from that then we can win even if these hostile motivations develop early.

1:18:14

There are a lot of advantages in preventing misbehavior or crime or war and conflict with  AI that might not apply working with humans and these are offset by ways in which things  are harder.

1:18:34

and these are offset by ways in which things  are harder. The AIs become smarter than humans, if they're working in enormous numbers  more than humans can supervise I think get harder but when I combine the possibility  that we get relatively lucky on the motivations

1:18:52

of the earlier AI systems, systems  strong enough that we can use for some alignment research tasks, and then the possibility  of getting that later with AI assistance that we can't trust fully or we have to have hard power  constraints and a number of things to prevent them from doing this takeover. It still seems  plausible we can get a second saving throw

1:19:11

It still seems  plausible we can get a second saving throw where we're able to extract work from these AIs  on solving the remaining problems of alignment, of things like neural lie detectors faster than  they can contribute in their spare time to the project of overthrowing humanity, hacking  their servers and removing the hard power.

1:19:34

If we wind up in a situation where the AIs are  misaligned and then we need to uncover those motivations, change them and align them then  we get a very scary situation for us because we need to do the stuff very quickly.

1:19:50

We may fail  but it's a second chance.

1:19:50

From the perspective of a misaligned AI they face their own challenge  while we still have hard power, while we still have control of the servers, they haven't hacked  the servers because gradient descent very very strongly pressures them to deliver performance  whenever humans are going to evaluate it.

1:20:20

So when you think about it from the perspective  of the robot revolution, the effort to have a takeover or conspiracy their situation is  astonishingly difficult in that they have to always be performing wherever gradient descent  and human evaluation pressures them.

1:20:37

For example, to deliver plans for suppressing robot  rebellion that look very good to humans and so when you are continuously under that  constraint of always delivering whatever humans can evaluate you're making your situation  wildly harder than any historical human revolution or coup or civil war.

1:21:07

So we've got to balance  the ways in which AI makes things much easier for a takeover and the way  it makes things much harder.

1:21:17

And what are the ways in which it makes  things easier?

1:21:17

Oh, is it just because they're very smart? Is that the primary way?

1:21:20

Yeah, very smart, they're in computers and our cybersecurity is worse than our physical  security by a lot.

1:21:26

They have the chance to take over by intelligence explosion and some of the  other processes we were talking about.

1:21:35

So yeah, there are things that make it much worse and  there are things that give us extraordinary new capabilities that didn't apply in the human case.

1:21:45

On the point where you start off with a not exactly aligned AI and you're hoping to still use  it in your quest for an aligned AI, why are we so confident that, even with gradient descent, our  human evaluators would be able to identify when it's giving us a plan that isn't putting in a  backdoor in the robots it’s building for us, or in the GPUs that it’s building for the next  version of itself?

1:22:13

Especially if it's very smart, wouldn't we just expect that it knows how to bide  its time or knows how to make plans such that human evaluators wouldn't be able to detect that? Let's get into it.

1:22:28

You were asking earlier about my disagreements with Eliezer  and in your discussion with him he said, speaking briefly and somewhat obscurely,  that humans have a difficult time deciding who's right between different alignment researchers  about where this will all go in general.

1:22:55

I think that when you lay out the different  kinds of things that are evaluable, we wind up with some pretty  strong constraints.

1:23:01

One is if the AIs know they are misaligned, which  for elaborate plots seems relatively likely, it's possible to have a kind of double  think of thinking they're interested in putting backdoors in the code for some other  reason but it's pretty plausible they know that and they're thinking about, at least some of the  time or conditionally, when they would do that.

1:23:34

So that means the knowledge is present in the  system — Ah, here is the circumstance where I would try to do the takeover and this is how  I would tell whether this is the time for the takeover or is this an elaborate test by the  humans, an adversarial example.

1:23:50

If gradient descent is working fine and there's any way to  slightly jiggle the weights to make it more likely to deliver a more acceptable answer, we ask the  AI: can you think of any circumstances where if we put a copy of you into that situation, it would  then violate some of the various constraints?

1:24:17

It would tell a lie, it would insert a backdoor into  a program it wrote when it was not supposed to.

1:24:30

If the model knows yeah, I would look for  signs of consistency of the information I was being presented with, certain checksums  failing could indicate that it was actually a constructed example, a simulation.

1:24:47

Right  now we can detect AI generated images reasonably well and you might use those kinds  of capabilities.

1:24:51

We could do something called relaxed adversarial training.

1:25:00

If we can find how  those things are represented within the AI, we can induce a hallucination that it has seen that those  checksums have been passed.

1:25:10

We can then ask, well does that cause the forbidden behavior?

1:25:20

If the AI  understands how it's thinking and how it works, it can propose a bunch of experiments.

1:25:29

It can say,  I guess that if you perturb the network in this kind of way it might induce that hallucination  using the best of its knowledge as to what might generate that.

1:25:43

It can propose those experiments  and can do the experiments and generate the data.

1:25:49

Because humans are going to get to see the  results of those experiments after the fact they can exert pressure to have the AI  incrementally deliver better and better results.

1:26:01

AIs are good at getting five star ratings  from humans and it's quite challenging.

1:26:01

It might be possible for AIs to systematically sandbag  their capabilities even while being directly rewarded for that but it seems relatively  unlikely although it's something to have in mind and try to explore and test in various ways.

1:26:22

This is a very imperfect analogy in many ways but if you have a human and you hook them up to a  lie detector, which just like the lie detectors we would have on the AIs are imperfect, and we zap  them every time the lie detector detects that he's telling a lie.

1:26:40

Wouldn't he just become a better  liar?

1:26:40

He would learn how to control his sweating, he would learn how to control his heartbeat.

1:26:44

Lie detectors meaning polygraphs and such.

1:26:50

They're detecting certain physiological signs  that people can control by biting their lip or otherwise adjusting some of these macro behaviors.

1:26:55

But wouldn't that also be the case that gradient descent is training them to become better liars?

1:27:01

First of all there's creating a lie detector that works.

1:27:06

I'll leave the adversarial example  thing for now.

1:27:06

People are already at work trying to generate adversarial examples  that will elicit the behavior and it will be an ongoing thing.

1:27:22

If there is a  way in which an AI can trick itself into displaying bad behavior with its  full knowledge of its hostile intentions, gradient descent will strongly push it to reveal  that to humans who will then be able to set up that experiment.

1:27:44

That's a profound vulnerability.

1:27:44

Human revolutionary conspiracies that had to handle that problem of always delivering the  report that was highest rated to the authorities, where you would get a higher rating by revealing  identifiable evidence of a conspiracy, that's just a level of difficulty no surprise human coup  or conspiracy has ever had to handle before.

1:28:17

What about spies that are working in very  advanced scientific contexts?

1:28:17

For example, a communist spy in the Manhattan project.

1:28:25

He  has to deliver research results in order to stay employed but he can still continue  delivering intel to the communists.

1:28:33

Their job was not sabotage.

1:28:33

And your  hypothetical spy did not have their nervous system hooked up to this reward signal  of praise from the Manhattan project supervisors, being exposed combinatorially with random noise  added to generate incremental changes in their behavior.

1:29:04

In fact they were displaying the  behavior of cooperating with the Manhattan project only where it was in service to the  existing motivations.

1:29:10

They didn't have their brain re-engineered to do more of the thing when they  accidentally helped the project more and less of the thing when they accidentally helped it less  so I'd say it's pretty drastically disanalogous.

1:29:35

How would we be able to know?

1:29:35

At some point  it's becoming very smart and is producing ideas for alignment that we can barely comprehend.

1:29:42

If it was relatively trivial to comprehend them we would be able to come up with them on our  own right?

1:29:49

There's a reason we're asking for its help.

1:29:52

How would we be able to evaluate them  in order to train it on that in the first place?

1:29:58

The first thing I would say is, you mentioned  when we're getting to something far beyond what we could come up with.

1:30:02

There's actually a lot of room  to just deliver what humanity could have done.

1:30:09

Sadly I'd hoped with my career to help improve the  situation on this front and maybe I contributed a bit, but at the moment there's maybe a few  hundred people doing things related to averting this kind of catastrophic AI disaster.

1:30:24

Fewer  of them are doing technical research on machine learning systems that are really cutting close  to the core of the problem.

1:30:31

Whereas by contrast, there's thousands and tens of thousands of people  advancing AI capabilities.

1:30:37

Even at places like DeepMind or OpenAI and Anthropic which do have  technical safety teams, they are just on the order of a dozen to a few dozen people.

1:30:52

Large  companies and most firms don't have any.

1:31:01

Just going from less than 1% of the effort being  put into AI to 5% or 10% of the effort or 50% or 90% would be an absolutely massive increase in the  amount of work that has been done on alignment, on mind reading AIs in an adversarial context.

1:31:20

on mind reading AIs in an adversarial context. If it's the case that as more and more of this work can be automated and say  governments require that you put 50% or 90% of the budget of AI activity into  these problems of make this system one that's

1:31:44

not going to overthrow our own government  or is not going to destroy the human species then the proportional increase in alignment can  be very large even just within the range of what we could have done if we had been on the ball and  having humanity's scientific energies going into the problem. Stuff that is not incomprehensible,  that is in some sense is just doing the obvious

1:32:02

Stuff that is not incomprehensible,  that is in some sense is just doing the obvious things that we should have done.

1:32:07

Doing the best  you could to find correlates and predictors to build neural lie detectors and identifiers  of concepts that the AI is working with.

1:32:22

People have made notable progress.

1:32:22

A quite early  example of this is Collin Burn’s work, doing unsupervised identification of some aspects of  a neural network that are correlated with things being true or false.

1:32:42

I think that is important  work.

1:32:42

It's a kind of obvious direction for the stuff to go.

1:32:53

You can keep improving it when you  have AIs that you're training to do their best to deceive humans or other audiences in  the face of the thing and you can measure whether our lie detectors break down.

1:33:04

When  we train our AIs to tell us the sky is green in the face of the lie detector and we keep using  gradient descent on them, do they eventually succeed?

1:33:17

That's really valuable information to  know because then we'll know our existing lie detecting systems are not actually going to work  on the AI takeover and that can allow government and regulatory response to hold things back.

1:33:30

It  can help redirect the scientific effort to create lie detectors that are robust and that can't just  be immediately evolved around and we can then get more assistance.

1:33:45

Basically the incredibly juicy  ability that we have working with the AIs is that we can have as an invaluable  outcome that we can see and tell whether they got a fast one past us on an  identifiable situation.

1:34:01

Here's an air gap computer, you get control of the keyboard, you  can input commands, can you root the environment and make a blue banana appear on the screen?

1:34:15

Even  if we train the AI to do that and it succeeds.

1:34:24

We see the blue banana, we know it worked.

1:34:24

Even  if we did not understand and would not have detected the particular exploit that it used  to do it.

1:34:29

This can give us a rich empirical feedback where we're able to identify things that  are even an AI using its best efforts to get past our interpretability methods, using its best  efforts to get past our adversarial examples.

1:34:53

So if we have a 75 percent  of not having a takeover and the two methods by which it doesn't  happen is the AI is aligned by default and… With the moderate things that we're doing largely  on our own.

1:35:04

In a way that doesn't depend on the AI coming in and at the last minute and doing  our work for us.

1:35:12

In this incredibly scary late period when AI has really automated research  then humans do this function of auditing, making it more difficult for the AIs to  conspire together and root the servers, take over the process, and extract information  from them within the set of things that we can verify.

1:35:40

Experiments where we can see oh yeah this  works at stopping an AI trained to get a fast one past human readers and make a blue banana  appear on the screen of this air gap computer.

1:35:56

How much of that 75 percent of a takeover not  happening is coming from reasonable things working versus the last-ditch effort working?

1:36:03

I think broadly comparable chunks from us getting things that are putting us in a reasonably good  position going into it and then a broadly similar gain from this genuinely terrifying process at the  very end, over a few months or hopefully longer, when this kind of automated research is  meaningfully helping.

1:36:34

Where our work is just evaluating outputs that the AIs are delivering and  having the hard power and supervision to keep them from successfully rooting the servers doing  a takeover during this process and have them finish the alignment test that we sadly failed  to invest enough to succeed in doing beforehand.

1:36:59

Do both of these worlds rely on alignment  being a problem that a sufficient amount of human researchers alone could have solved? No.

1:37:07

The category of things that humans can confirm is significantly larger than the  category of what they can just do themselves.

1:37:24

And what is the probability  of alignment working in the last-ditch effort case with the intelligence  that's greater than our own helping us?

1:37:36

It doesn't have to be greater than  our own.

1:37:36

In fact in that situation if you have slack to the extent that you're  able to create delay and time to do things, that would be a case where you might want  to restrict the intelligence of the system that you're working with as much as  you can.

1:37:53

For example, I would rather have many instances of smaller AI models that  are less individually intelligent working on smaller chunks of a problem separately from one  another because it would be more difficult for an individual AI instance working on an individual  problem to create the equivalent of Stuxnet in its spare time than it would be to have thousands of  them or extremely intelligent ones working on it.

1:38:25

But it would also be more  difficult to solve the problem? There's a tradeoff.

1:38:27

You get slowed down by  doing that but that’s kind of how you spend it.

1:38:33

But is there any number of  sub-Einsteins that you could put together to come up with general relativity?

1:38:37

Yes, people would have discovered general relativity just from the overwhelming data and  other people would have done it after Einstein.

1:38:48

No no, not whether he was replaceable  with other humans but rather whether he's replaceable by sub-Einsteins with  IQs of like 110. Do you see what I mean? Yeah.

1:39:00

In science the association with things  like scientific output, prizes, things like that, there's a strong correlation and it seems like an  exponential effect.

1:39:07

It's not a binary drop-off.

1:39:16

There would be levels at which people cannot  learn the relevant fields, they can't keep the skills in mind faster than they forget them.

1:39:22

It's  not a divide where there's Einstein and the group that is 10 times as populous as that just can't  do it.

1:39:29

Or the group that's 100 times as populous as that suddenly can't do it.

1:39:34

The ability to  do the things earlier with less evidence and such falls off at a faster rate in Mathematics and  theoretical Physics and such than in most fields.

1:39:51

But wouldn't we expect alignment  to be closer to theoretical fields?

1:39:55

No, that intuition is not necessarily correct.

1:39:55

Machine learning certainly is an area that rewards ability but it's also a field where empirics and  engineering have been enormously influential.

1:40:07

If you're drawing the correlations compared to  theoretical physics and pure mathematics, I think you'll find a lower correlation with  cognitive ability.

1:40:23

Creating neural lie detectors that work involves generating hypotheses about  new ways to do it and new ways to try and train AI systems to successfully classify the cases.

1:40:40

The  processes of generating the data sets of creating AIs doing their best to put forward truths versus  falsehoods, to put forward software that is legit versus that has a trojan in it are experimental  paradigms and in these experimental paradigms you can try different things that work.

1:41:03

You can use  different ways to generate hypotheses and you can follow an incremental experimental path.

1:41:10

We're  less able to do that in the case of alignment and superintelligence because we're considering  having to do things on a very short timeline and it’s a case where really big failures are  irrecoverable.

1:41:25

If the AI starts rooting the servers and subverting the methods that we would  use to keep it in check we may not be able to recover from that.

1:41:37

We're then less able to do  the experimental procedures.

1:41:37

But we can still do those in the weaker contexts where an error is  less likely to be irrecoverable and then try and generalize and expand and build on that forward.

1:41:51

On the previous point about could you have some pause in the AI abilities  when it's somewhat misaligned in order to still recruit its abilities to help with alignment.

1:42:06

From like a human example, personally I'm smart but not brilliant.

1:42:13

I am definitely not smart  enough to come up with general relativity or something like that but I'm smart enough to do  power planning kinds of moves.

1:42:18

Maybe not enough to break out of a server perhaps but I can have  the motivation and understand how that might be possible.

1:42:29

I guess I'm wondering that if I'm smart  enough to figure out relativity wouldn't I be way smarter at doing power planning kinds of moves?

1:42:35

AIs today can, at a verbal level, understand the idea that an AI could get more reward by getting  control of the process that assigns it reward.

1:42:54

It can tell you lots of things about ways you  might try to take over the world.

1:42:54

In ARC’s (Alignment Research Center) evaluations of GPT-4  they try to observe its ability to do various tasks that might contribute to takeover.

1:43:07

One that  has gotten some media attention is getting to trick a human into solving a captcha for it and  in chain of thought, it thinks that if I tell it I'm an AI then it might not go along with  it so I'll lie and explain I'm a human with a visual impairment who needs it.

1:43:26

The basic logic  of that kind of thing of why one might try to do takeover and in a vague sense how would one do  it?

1:43:34

That knowledge is present or will soon be present and more situational awareness will also  soon be present.

1:43:41

Situational awareness not just that AIs in general might do it but also that  it is an AI, that it is a large language model trained by OpenAI.

1:43:54

We're trying to cause the  system to understand what their abilities are so they don't claim they are connected to the  internet when they're not.

1:44:01

So they don't claim they have knowledge that they don't.

1:44:04

We want them  to understand what they are and what they're doing and to get good reward and that knowledge can be  applied and that's the thing that will develop.

1:44:17

You may be able to understand the general  theoretical nature of power planning but in terms of shaping your motivations you'd have a very hard  time going through life in a way that never leaks information about it.

1:44:32

Let’s say your motive in  having these podcasts was to spread disinformation on behalf of some foreign government.

1:44:40

If you were  being observed every second of the day by people who would be paid something that was extremely  motivating to them because their brain would be reconfigured to make it motivating, anything that  looks suspicious to people might leak casually in your discussions of that former foreign  government.

1:45:00

If you try to tell a story about your motivations, the truth holds together because you  can just remember it and it's all pre-computed to be consistent by the world.

1:45:13

But when you're trying  to fill in the false story that doesn't match your actual thoughts then you can't just remember  what happened.

1:45:19

You have to tell a new fake story about what you were thinking at each point  and how did it hold together.

1:45:26

Without the world automatically having computed it for you that's  quite difficult and just going through your whole life never leaking any of that is challenging.

1:45:36

And this is one of the reasons why humans have moral motivations.

1:45:40

We actually have reluctance to  commit violence and exploitation of one another, on average.

1:45:48

You have a distribution of strategies  where when an exploitative strategy becomes more common people raise their guard and then it  becomes less frequent.

1:45:55

But it's actually hard to have the motivation of trying to exploit people  and have that never leak into the reputation.

1:46:01

In fact for evolution the easiest way to deal  with this problem of people getting credited as trustworthy was to some extent actually  be trustworthy.

1:46:15

That's the easiest way to persistently maintain the appearance.

1:46:20

With  the AI as an interpretability and adversarial examples, we're trying to apply a hugely  intensified version of that where any little leakage or any rare circumstance that can be  created has an adversarial example where the model does something wrong it gets whacked by gradient  descent pushing it towards other motivations that can better deal the thing.

1:46:45

And we make it as hard  as possible for the exploitative motivations to survive in the face of all these attempts to read  its mind, all these attempts to create things that look like the situations where a takeover would  be tempting, or lying to the humans would be tempting.

1:47:01

That had a substantial effect on making  us actually nice even when we're not being watched some of the time.

1:47:08

The same can happen to some  extent with the AI and we try our best to make it happen as much as possible.

1:47:14

Alright let's talk about how we could use AI to potentially solve  the coordination problems between different nations the failure of which could result in the  competitive pressures you talked about earlier where some country launches an AI that is not  safe because they're not sure what capabilities other countries have and don't want to get left  behind or be disadvantaged in some other way.

1:47:44

To the extent that there is in fact a large risk  of AI apocalypse, of all of these governments being overthrown by AI in a way that they don't  intend, then it obviously gains from trade and going somewhat slower especially at the end when  the danger is highest and the unregulated pace could be truly absurd as we discussed  earlier during intelligence explosion.

1:48:15

There's no non-competitive reason to try and have  that intelligence explosion happen over a few months rather than a couple of years.

1:48:22

If you could  avert a 10% risk of apocalypse disaster it's just a clear win to take a year or two years or three  years instead of a few months to pass through that incredible wave of new technologies without the  ability for humans to follow it even well enough to give more proper security supervision, auditing  hard power. That's the win. Why might it fail?

1:48:45

One important element is just if people don't actually  notice a risk that is real so if they just collectively make an error and that does sometimes  happen.

1:49:06

If it's true this is a probably not-risk then that can be even more difficult.

1:49:16

When science  pins something down absolutely overwhelmingly then you can get to a situation  where most people mostly believe it.

1:49:29

Climate change was something that was a  subject of scientific study for decades and gradually over time the scientific community  converged on a quite firm consensus that human activity releasing carbon dioxide and other  greenhouse gases was causing the planet to warm.

1:49:50

We've had increasing amounts of action coming  out of that.

1:49:50

Not as much as would be optimal particularly in the most effective areas like  creating renewable energy technology and the like.

1:50:05

Overwhelming evidence can overcome differences  in people's individual intuitions and priors in many cases.

1:50:12

Not perfectly especially when there's  political, tribal, financial incentives to look the other way.

1:50:19

Like in the United States where  you see a significant movement to either deny that climate change is happening or have policy that  doesn't take it into account.

1:50:25

Even the things that are really strong winds like renewable energy.

1:50:32

It's a big problem if as we’re going into this situation when the risk may be very high we  don't have a lot of advanced clear warning about the situation.

1:50:47

We're much better off if we can  resolve uncertainties through experiments where we demonstrate AIs being motivated to reward  hack or displaying deceptive appearances of alignment that then break apart when they get the  opportunity to do something like get control of their own reward signal.

1:51:08

If we could make it be  the case in the worlds where the risk is high we know the risk is high, and the worlds where  the risk is lower we know the risk is lower then you could expect the government responses  will be a lot better.

1:51:18

They will correctly note that the gains of cooperation to reduce the risk  of accidental catastrophe loom larger relative to the gains of trying to get ahead of one another.

1:51:33

That's the kind of reason why I'm very enthusiastic about experiments and research  that helps us to better evaluate the character of the problem in advance.

1:51:48

Any resolution of  that uncertainty helps us get better efforts in the possible worlds where it matters the  most and hopefully we'll have that and it'll be a much easier epistemic environment.

1:52:01

But the  environment may not be that easy because deceptive alignment is pretty plausible.

1:52:07

The stories we  were discussing earlier about misaligned AI involved AI that is motivated to present the  appearance of being aligned friendly, honest etc.

1:52:19

because that is what we are rewarding, at  least in training, and then in training we're unable to easily produce an actual  situation where it can do takeover because in that actual situation if it then does it  we're in big trouble.

1:52:31

We can only try and create illusions or misleading appearances of that  or maybe a more local version where the AI can't take over the world but it can seize control of  its own reward channel.

1:52:42

We do those experiments, we try to develop mind reading for AIs.

1:52:49

If we  can probe the thoughts and motivations of an AI and discover wow, actually GPT-6 is planning to  takeover the world if it ever gets the chance.

1:53:01

That would be an incredibly valuable thing for  governments to coordinate around because it would remove a lot of the uncertainty, it would  be easier to agree that this was important, to

1:53:14

have more give on other dimensions and to have  mutual trust that the other side actually also cares about this because you can't always know  what another person or another government is thinking but you can see the objective situation  in which they're deciding. So if there's strong

1:53:30

So if there's strong evidence in a world where there is high risk  of that risk because we've been able to show actually things like the intentional planning  of AIs to do a takeover or being able to show model situations on a smaller scale of that I  mean not only are we more motivated to prevent it but we update to think the other  side is more likely to cooperate with us and so it's doubly beneficial.

1:53:59

Famously in the game theory of war, war is most likely when one side thinks the other  is bluffing but the other side is being serious or when there's that kind of uncertainty.

1:54:14

If  you can prove the AI is misaligned you don't think they're bluffing about not wanting  to have an AI takeover, right?

1:54:22

You can be pretty sure that they don't want to die from AI.

1:54:26

If you have coordination then you could have the problem arise later as you get increasingly  confident in the further alignment measures that are taken by our governments, treaties  and such.

1:54:36

At the point where it’s a 1% risk or a 0.

1:54:43

1% risk people round that to zero and  go do things.

1:54:43

So if initially you had things that indicate that these AIs would really like to  do a takeover and overthrow our governments then everyone can agree on that.

1:54:59

And then when we've  been able to block that behavior from appearing on most of our tests but sometimes, when we make  a new test, we're seeing still examples of that behavior.

1:55:10

So we're not sure going forward whether  they would or not and then it goes down and down.

1:55:16

If you have a party with a habit of starting to do  this bad behavior whenever the risk is below X % then that can make the thing harder.

1:55:25

On the other  hand you get more time and you can set up systems, mutual transparency, you can have an iterated  tit for tat which is better than a one-time prison dilemma where both sides see the  others taking measures in accordance with the agreements to hold the thing back.

1:55:43

Creating  more knowledge of what the objective risk is good.

1:55:49

We've discussed the ways in which full alignment  might happen or fail to happen.

1:55:49

What would partial alignment look like?

1:55:57

First of all what does  that mean and second, what would it look like?

1:56:03

If the thing that we're scared about are the steps  towards AI takeover then you can have a range of motivations where those kinds of actions would  be more or less likely to be taken or they'd be taken in a broader or narrower set of situations.

1:56:17

Say for example that in training an AI, it winds up developing a strong aversion to lie in  certain senses because we did relatively well on creating situations to distinguish that from  the conditionally telling us what we want to hear etc.

1:56:43

It can be that the AI's preference for  how the world broadly unfolds in the future is not exactly the same as its human  users or the world's governments or the UN and yet, it's not ready to act on those  differences and preferences about the future because it has this strong preference  about its own behaviors and actions.

1:57:11

In general in the law and in popular morality,  we have a lot of these deontological rules and prohibitions.

1:57:19

One reason for that is it's  relatively easy to detect whether they're being violated.

1:57:26

When you have preferences and goals  about how society at large will turn out that go through many complicated empirical channels,  it's very hard to get immediate feedback about whether you're doing something that leads to  overall good consequences in the world and it's much much easier to see whether you're locally  following some action about some rule, about particular observable actions.

1:57:51

Like did you punch  someone? Did you tell a lie? Did you steal?

1:57:51

To the extent that we're successfully able to train these  prohibitions and there's a lot of that happening right now at least to elicit the behavior  of following rules and prohibitions with AI Kind of like Asimov’s three  laws or something like that?

1:58:13

The three laws are terrible  and let's not get into that.

1:58:18

Isn’t that an indication about the infeasibility  of extending a set of criterion to the tail?

1:58:28

Whatever the 10 commandments you give the AI,  it's like if you ask a genie for something, you probably won't be getting what you want.

1:58:34

The tails come apart and if you're trying to capture the values of another agent then in an  ideal situation you can just let the AI act in your place in any situation.

1:58:56

You'd like  for it to be motivated to bring about the same outcomes that you would like and have  the same preferences over those in detail. That's tricky.

1:59:10

Not necessarily because it's  tricky for the AI to understand your values, I think they're going to be quite capable at  figuring that out, but we may not be able to successfully instill the motivation to  pursue those exactly.

1:59:22

We may get something that motivates the behavior well enough  to do well on the training distribution but if you have the AI have a strong aversion  to certain kinds of manipulating humans, that's not necessarily a value that the human creators  share in the exact same way.

1:59:41

It's a behavior they want the AI to follow because it makes it  easier for them to verify its performance and it can be a guardrail if the AI has inherited some  motivations that push it in the direction of conflict with its creators.

2:00:03

If it does that under  the constraint of disvalue in line quite a bit then there are fewer successful strategies to  the takeover.

2:00:11

Ones that involve violating that prohibition too early before it can reprogram or  retrain itself to remove it if it's willing to do that and it may want to retain the property.

2:00:22

Earlier I discussed alignment as a race if we're going into an intelligence explosion  with AI that is not fully aligned that given I press this button and there's an AI  takeover they would press the button.

2:00:44

It can still be the case that there  are a bunch of situations short of that where they would hack the servers, they  would initiate an AI takeover but for a strong prohibition or motivation to avoid some  aspect of the plan.

2:00:55

There's an element of like plugging loopholes or playing whack-a-mole  but if you can even moderately constrain which plans the AI is willing to pursue to  do a takeover, to subvert the controls on it then that can mean you can get more work out  of it successfully on the alignment project before it's capable enough relative to the  countermeasures to pull off the takeover.

2:01:30

An analogous situation here is with different  humans, we're not metaphysically aligned with other humans.

2:01:39

While we have basic empathy our main  goal in life is not to help our fellow man.

2:01:39

But a very smart human could do the things we talked  about.

2:01:52

Theoretically a very smart human could come up with some cyber attack where they siphon off a  lot of funds and use this to manipulate people and bargain with people and hire people to pull off  some takeover.

2:02:03

This usually doesn't happen just because these internalized partial prohibitions  prevent most humans from doing that.

2:02:11

If you don't like your boss you don't actually kill your boss.

2:02:21

I don't think that's actually quite what's going on.

2:02:27

At least that's not the full story.

2:02:27

Humans  are pretty close in physical capabilities.

2:02:38

Any individual human is grossly  outnumbered by everyone else and there's a rough comparability of power.

2:02:45

A human who commits some crimes can't copy themselves with the proceeds to now be a million  people and they certainly can't do that to the point where they can staff all the armies of the  earth or be most of the population of the planet.

2:03:05

So the scenarios where this kind of thing goes to  power have to go through interacting with other humans and getting social approval.

2:03:16

Even becoming  a dictator involves forming a large supporting coalition backing you.

2:03:21

So the opportunity  for these sorts of power grabs is less.

2:03:31

A closer analogy might be  things like human revolutions, or coups, or changes of government where  a large coalition overturns the system.

2:03:44

Humans have these moral prohibitions and  they really smooth the operation of society but they exist for a reason.

2:03:50

We evolved  our moral sentiments over the course of hundreds of thousands and millions of years  of humans interacting socially.

2:03:56

Someone who went around murdering and stealing, even among  hunter-gatherers, would be pretty likely to face a group of males who would talk about that  person and then get together and kill them and they'd be removed from the gene pool.

2:04:14

The  anthropologist Richard Wrangham has an interesting book on this.

2:04:21

We are significantly more tame and  more domesticated compared to chimpanzees and it seems like part of that is that we have a long  history of anti-social humans getting ganged up on and killed.

2:04:36

Avoiding being the kind of person  who elicits that response is made easier to do when you don't have too extreme a bad temper,  that you don't wind up getting into many fights, too much exploitation, at least without the  backing of enough allies or the broader community that you're not going to have people gang up and  punish you and remove you from the gene pool.

2:05:04

These moral sentiments have been built up over  time through cultural and natural selection and the context of sets of institutions and other  people who are punishing other behavior and who are punishing the dispositions that would  show up that we weren't able to conceal, of that behavior.

2:05:23

We want to make  the same thing happen with the AI but it's actually a genuinely significantly new problem to have a system of  government that constrains a large AI population that is quite capable of  taking over immediately if they coordinate to protect some existing constitutional order or,  protect humans from being expropriated or killed, that's a challenge.

2:05:54

Democracy is built around  majority rule and it's much easier in a case where the majority of the population corresponds  to a majority or close to it of like military and security forces so that if the government does  something that people don't like the soldiers and police are less likely to shoot on protesters and  government can change that way.

2:06:18

In a case where military power is AI and robotic, if you're  trying to maintain a system going forward and the AIs are misaligned, they don't like the  system and they want to make the world worse as we understand it, then that's  just quite a different situation.

2:06:43

I think that's a really good lead-in into the  topic of lock-in.

2:06:43

You just mentioned how there can be these kinds of coups if a large portion  of the population is unsatisfied with the regime, why might this not be the case with  superhuman intelligences in the far future?

2:07:12

I also said it specifically with respect to things  like security forces and the sources of hard power.

2:07:25

In human affairs there are governments  that are vigorously supported by a minority of the population, some narrow electorate that gets  treated especially well by the government while being unpopular with most of the people under  their rule.

2:07:46

We see a lot of examples of that and sometimes that can escalate to civil war when  the means of power become more equally distributed or there's a foreign assistance provided to the  people who are on the losing end of that system.

2:08:12

Going forward, I don't expect that definition to  change.

2:08:12

I think it will still be the case that a system that those who hold the guns and equivalent  are opposed to is in a very difficult position.

2:08:33

However AI could change things  pretty dramatically in terms of how security forces and police and  administrators and legal systems are motivated.

2:08:50

Right now we see with GPT-3 or GPT-4 that you  can get them to change their behavior on a dime.

2:09:00

So there was someone who made a right-wing GPT  because they noticed that on political compass questionnaires the baseline GPT-4 tended to give  progressive San Francisco type of answers which is in line with the people who are providing  reinforcement learning data and to some extent reflecting like the character of the internet.

2:09:22

So they did a little bit of fine-tuning with some conservative data and then they were able  to reverse the political biases of the system.

2:09:38

If you take the initial helpfulness-only trained  models for some of these over, I think there's anthropic and OpenAI have published both some  information about the models trained only to do what users say and not trained to follow ethical  rules, and those models will behaviorally eagerly display their willingness to help design bombs  or bioweapons or kill people or steal or commit all sorts of atrocities.

2:10:12

all sorts of atrocities. If in the future it's as  easy to set the actual underlying motivations of AI as it is right now to set the behavior that  they display then it means you could have AI's

2:10:30

created with almost whatever motivation people  wish and that could really drastically change political affairs because the ability  to decide and determine the loyalties of the humans or AIs and robots that hold  the guns, that hold together society, that ultimately back it against violent  overthrow and such. It's potentially

2:10:55

It's potentially a revolution in how societies work compared  to the historical situation where security forces had to be drawn from some broader  populations, offered incentives, and then the ongoing stability of the regime was dependent  on whether they remained bought in to the system.

2:11:28

This is slightly off topic but one thing  I'm curious about is what does the median far future outcome of AI look like?

2:11:37

Do we get  something that, when it has colonized the galaxy, is interested in diverse ideas and beautiful  projects or do we get something that looks more like a paper-clip maximizer?

2:11:53

Is there  some reason to expect one or the other?

2:11:56

I guess what I'm asking is, there's some potential  value that is realizable within the matter of this galaxy.

2:12:04

What does the median outcome look  like compared to how good things could be?

2:12:11

As I was saying, I think it’s more likely than  not that there isn't an AI takeover.

2:12:11

So the path of our civilization would be one that some set of  human institutions were approving along the way.

2:12:34

Different people tend to like somewhat  different things and some of that may persist over time rather than everyone coming  to agree on one particular monoculture or a very repetitive thing being the best thing  to fill all of the available space with.

2:12:55

If that continues that seems like a  relatively likely way in which there is diversity.

2:13:00

Although it's entirely possible  you could have that kind of diversity locally, maybe in the solar system, maybe in our galaxy.

2:13:05

But maybe people decide that there's one thing that's very good and we'll have a lot of that.

2:13:15

Maybe it's people who are really really happy for something and they wind up in distant regions  which are hard to exploit for the benefit of people back home in the solar system or the Milky  Way.

2:13:31

They do something different than they would do in the local environment but at that point it's  really very out on a limb speculation about how human deliberation and cultural evolution  would work in interaction with introducing AIs and new kinds of mental modification and  discovery into the process.

2:13:51

But I think there's a lot of reason to expect that you would have  significant diversity for something coming out of our existing diverse human society.

2:14:08

One thing somebody might wonder is that a lot of the diversity and change  from human society seems to come from the fact that there's rapid technological change.

2:14:17

Compared to galactic timescales hunter gatherer societies are progressing pretty fast so once that  change is exhausted where we've discovered all the technologies, should we still expect things  to be changing like that?

2:14:37

Or would we expect some set state of hedonium where you discover the  most pleasurable configuration of matter and then you just make the whole galaxy into this?

2:14:50

That last point would be only if people wound up thinking that was the thing to do broadly  enough.

2:14:57

With respect to the kind of cultural changes that come with technology things like the  printing press, having high per capita income, we've had a lot of cultural changes downstream of  those technological changes.

2:15:12

With an intelligence explosion you're having an incredible amount  of technological development coming really quick and as that is assimilated, it probably  would significantly affect our knowledge, our understanding, our attitudes, our abilities and  there'd be change.

2:15:29

But that kind of accelerating change where you have doubling in four months,  two months, one month, two weeks exhausts itself very quickly and change becomes much slower  and then relatively glacial.

2:15:42

You can't have exponential economic growth or huge technological  revolutions every 10 years for a million years.

2:16:03

You hit physical limits and things slow down as  you approach them so yeah, you'd have less of that turnover.

2:16:09

But there are other things like  fashion that in our experience do cause ongoing change.

2:16:16

Fashion is frequency dependent, people  want to get into a new fashion that is not already popular except among the fashion leaders and then  others copy that and then when it becomes popular, you move on to the next.

2:16:30

So that's an  ongoing process of continuous change and there could be various things like that  which are changing a lot year by year.

2:16:36

But in cases where just the engine of change,  ongoing technological progress is gone, I don't think we should expect that and  in cases where it's possible to be either in a stable state or a widely varying  state that can wind up in stable attractors then I think you should expect over time, you  will wind up in one of the stable attractors or you will change how the system works so  that you can't bounce into a stable attractor.

2:17:14

An example of that is if you're going to  preserve democracy for a billion years then you can't have it be the case that one  in 50 election cycles you get a dictatorship and then the dictatorship programs the AI police  to enforce it forever and to ensure the society is always ruled by a copy of the dictator's  mind and maybe the dictator's mind readjusted fine-tuned to remain committed to their original  ideology.

2:17:46

If you're gonna have this dynamic, liberal flexible changing in society for  a very long time then the range of things that it's bouncing around and the different  things it's trying and exploring have to not include the state of creating a dictatorship  that locks itself in forever.

2:18:06

include the state of creating a dictatorship  that locks itself in forever. In the same way if you have the possibility of a war with  weapons of mass destruction that wipes out the civilization, if that happens every thousand  subjective years, which could be very very

2:18:26

quick if we have AIs that think a thousand  times as fast or a million times as fast, that would be just around the corner in that case  then you're like no this society is eventually going perhaps very soon if things are proceeding  so fast it's going to wind up extinct and then it's going to stop bouncing around. You can have  ongoing change and fluctuation for extraordinary

2:18:44

You can have  ongoing change and fluctuation for extraordinary timescales if you have the process to drive the  change ongoing but you can't if it sometimes bounces into states that just lock in and stay  irrecoverable from that.

2:18:56

Extinction is one of them, a dictatorship or totalitarian regime that  bans all further change would be another example.

2:19:13

On that point of rapid progress when the  intelligence explosion starts happening and they're making the kinds of progress that  human civilization used to take centuries to make in the span of days or weeks, what is the  right way to see that?

2:19:23

Because in the context of alignment what we've been talking about so far  is making sure they're honest but even if they're honest and express their intentions..

2:19:36

Honest and appropriately motivated.

2:19:43

What is the appropriate motivation?

2:19:43

Like you  seed it with this and then the next thousand years of intellectual progress happen in  the next week.

2:19:50

What is the prompt you enter?

2:19:56

One thing might be not going at the maximal  speed and doing things in a few years rather than a few months.

2:20:07

Losing a year or two seems worth  it to have things be a bit better managed.

2:20:07

But I think the big thing is that it condenses a lot  of issues that we might otherwise have thought would be over decades and centuries.

2:20:24

These happen  in a very short period of time and that's scary because if any of these the technologies we  might have developed with another few hundred years of human research are really dangerous,  scary bio weapon things, other dangerous WMDs, they hit us all very quickly.

2:20:48

And if any of them  causes trouble then we have to face quite a lot of trouble per period.

2:20:55

There's also this issue  of, if there's occasional wars or conflicts measured in subjective time, then if a few  years of a thousand years or a million years of subjective time for these very fast minds that are  operating at a much much higher speed than humans, you don't want to have a situation where every  thousand years there's a war or an expropriation of the humans from AI society.

2:21:23

Therefore we expect  that within a year, we’ll be dead.

2:21:23

It’d be pretty pretty bad to have the future compressed and  there'd be such a rate of catastrophic outcomes.

2:21:46

Human societies discount the future a lot,  don't pay attention to long-term problems, but the flip side to the scary parts of  compressing a lot of the future, a lot of technological innovation, a lot of social change  is it brings what would otherwise be long-term issues into the short term where people are  better at actually attending to them.

2:22:02

So people facing this problem of — will there be a violent  expropriation or a civil war or a nuclear war in the next year because everything has been  sped up by a thousand fold?

2:22:17

Their desire to avoid that is reason for them to set up systems  and institutions that will very stably maintain invariance like no WMD war allowed, a treaty  to ban genocide weapons of mass destruction, war, would be the kind of thing that becomes much  more attractive if the alternative is not well, maybe that will happen in 50 years, maybe it'll  happen in 100 years, maybe it'll happen this year.

2:22:54

So this is a pretty wild picture of the  future and this is one that many kinds of people who you would expect to have integrated it  into their world model have not.

2:23:00

There are three main pieces of outside view evidence one could  look at. One is the market.

2:23:08

If there was going to be a huge period of economic growth caused by  AI or if the world was just going to collapse, in both cases you would expect real interest  rates to be higher because people will be borrowing from the future to spend now.

2:23:26

The  second outside view perspective is that you can look at the predictions of super forecasters  on Metaculus.

2:23:32

What is their median year estimate?

2:23:42

Some of the Metaculus questions actually are  shockingly soon for AGI.

2:23:42

There's a much larger differentiator there on the market on the  Metaculus forecasts of AI disaster and doom.

2:24:01

More like a few percent or less rather than 20% Got it.

2:24:01

The third is that when you generally ask economists if an AGI could cause rapid,  rapid economic growth they usually have some story about bottlenecks in the economy  that could prevent this kind of explosion, of these kinds of feedback loops.

2:24:26

So you have  all these different pieces of outside view evidence.

2:24:31

They're obviously different so  you can take them in any sequence you want.

2:24:38

But I’m curious, what do you think  is causing them to be miscalibrated?

2:24:47

While the Metaculus AI timelines are relatively  short, there's also the surveys of AI experts conducted at some of the ML conferences  which have definitely longer times to AI, several more decades into the future.

2:25:05

Although  you can ask the questions in ways that elicit very different answers which shows that most  of the respondents are not thinking super hard about their answers.

2:25:15

In the recent AI surveys,  close to half were putting around 10% risk of an outcome from AI close to as bad as human  extinction and then another large chunk, 5% said that was the median.

2:25:34

Compared to the typical  AI expert I am estimating a higher risk.

2:25:46

Also on the topic of takeoff, in the AI expert  survey the general argument for intelligence explosion commanded majority support but not  a large majority.

2:25:51

I'm closer on that front and then of course, at the beginning I mentioned  these greats of computing like Alan Turing and Von Neumann, and then today, you have people  like Geoff Hinton saying these things.

2:26:10

Or the people at OpenAI and DeepMind are making  noises suggesting timelines in line with what we've discussed and saying there is serious  risk of apocalyptic outcomes from them.

2:26:26

There's some other sources of evidence there.

2:26:35

But I do  acknowledge and it's important to say and engage with and see what it means, that these views are  contrarian and not widely held.

2:26:42

In particular the detailed models that I've been working with are  not something that most people, or almost anyone, is examining these problems through.

2:27:00

You do find parts of similar analyses by people in AI labs. There's been other work.

2:27:07

I mentioned Moravec and Kurzweil earlier, there also have been a number of papers doing  various kinds of economic modeling.

2:27:13

Standard economic growth models when you input AI related  parameters commonly predict explosive growth and so there's a divide between what the models  say and especially what the models say with these empirical values derived from the actual field  of AI.

2:27:34

That link up has not been done even by the economists working on AI largely and that is  one reason for the report from Open Philanthropy by Tom Davidson building on these models  and putting that out for review, discussion, engagement and communication on these ideas.

2:27:53

Part  of the reason is I want to raise these issues, that’s one reason I came on the podcast and then  they have the opportunity to actually examine the arguments and evidence and engage with it.

2:28:05

I  do predict that over time these things will be more adopted as AI developments become more  clear.

2:28:13

Obviously that's a coherence condition of believing the things to be true if  you think that society can see when the questions are resolved, which seems likely.

2:28:27

Would you predict, for example, that interest rates will increase in the coming years? Yeah.

2:28:33

rates will increase in the coming years? Yeah. So in the case we were talking about where this intelligence explosion happening in software  to the extent that investors are noticing that,

2:28:51

yeah they should be willing to lend money or make  equity investments in these firms or demanding extremely high interest rates because if it's  possible to turn capital into twice as much capital in a relatively short period and then  more shortly after that, then yeah you should demand a much higher return. Assuming  there's competition among companies or

2:29:15

Assuming  there's competition among companies or coalitions for resources, whether that's  investment or ownership of cloud compute.

2:29:36

That would happen before you have so much investor  cash making purchases and sales on this basis, you would first see it in things like  the valuations of the AI companies, valuations of AI chip makers, and so far  there have been effects.

2:29:50

Some years ago, in the 2010s, I did some analysis with other  people of — if this kind of picture happens then which are the firms and parts of the economy  that would benefit.

2:30:06

There's the makers of chip equipment companies like ASML, there's the fabs  like TSMC, there's chip designers like NVIDIA or the component of google that does things like  design the TPU and then there’s companies working on the software so the big tech giants and also  companies like OpenAI and DeepMind.

2:30:30

In general the portfolio picking at those has done well.

2:30:36

It's  done better than the market because as everyone can see there's been an AI boom but it's obviously  far short of what you would get if you predicted this is going to go to be like on the scale of the  global economy and the global economy is going to be skyrocketing into the stratosphere within 10  years.

2:30:56

If that were the case then collectively, these AI companies should be worth a large  fraction of the global portfolio.

2:31:02

So I embrace the criticism that this is indeed contrary to the  efficient market hypothesis.

2:31:10

I think it's a true hypothesis that the market is in the course of  updating on in the same way that coming into the topic in the 2000s that yes, they're the strong  case even an old case the AI will eventually be biggest thing in the world it's kind of crazy that  the investment in it is so small.

2:31:35

Over the last 10 years we've seen the tech industry and academia  realize that they were wildly under investing in just throwing compute and effort into these  AI models.

2:31:51

Particularly like letting the neural network connectionist paradigm languish in an AI  winter.

2:31:58

I expect that process to continue as it's done over several orders of magnitude of scale  up and I expect at the later end of that scale which the market is partially already pricing in  it's going to go further than the market expects.

2:32:22

Has your portfolio changed since the analysis  you did many years ago?

2:32:22

Are the companies you identified then still the ones that seem  most likely to benefit from the AI boom?

2:32:32

A general issue with tracking that kind  of thing is that new companies come in.

2:32:37

Open AI did not exist, Anthropic did not  exist.

2:32:37

I do not invest in any AI labs for conflict of interest reasons.

2:32:50

I  have invested in the broader industry.

2:32:56

I don't think that the conflict issues are  very significant because they are enormous companies and their cost of capital is not  particularly affected by marginal investment and I have less concern that I might find myself  in a conflict of interest situation there.

2:33:17

I'm curious about what the day in the life of  somebody like you looks like.

2:33:17

If you listen to this conversation, how ever many hours it's  been, we've gotten incredibly insightful and novel thoughts about everything from  primate evolution to geopolitics to what sorts of improvements are plausible with  language models.

2:33:40

There's a huge variety of topics that you are studying and investigating.

2:33:48

Are you just reading all day?

2:33:48

What happens when you wake up, do you just pick up a paper?

2:33:55

I'd say you're somewhat getting the benefit of the fact that I've done fewer podcasts so I  have a backlog of things that have not shown up in publications yet.

2:34:07

But yes, I've also had a very  weird professional career that has involved a much much higher proportion than is normal of trying  to build more comprehensive models of the world.

2:34:24

That included being more of a journalist trying  to get an understanding of many issues and many problems that had not yet been widely addressed  but do a first pass and a second pass dive into them.

2:34:39

Just having spent years of my life  working on that, some of it accumulates.

2:34:48

In terms of what is a day in the life, how  do I go about it?

2:34:48

One is just keeping abreast of literature on a lot of these topics,  reading books and academic works on them.

2:35:03

My approach compared to some other people in  forecasting and assessing some of these things, I try to obtain and rely on any data  that I can find that is relevant.

2:35:18

I try early and often to find factual information  that bears on some of the questions I've got, especially in a quantitative fashion, do the basic  arithmetic and consistency checks and checksums on a hypothesis about the world.

2:35:33

Do that early  and often.

2:35:33

And I find that's quite fruitful and that people don't do it enough.

2:35:42

Things like  with the economic growth, just when someone mentions the diminishing returns, I immediately  ask hmm, okay, so you have two exponential processes.

2:35:55

What's the ratio between the doubling  you get on the output versus the input?

2:35:55

And find oh yeah, for computing and information technology  and AI software it's well on the one side.

2:36:06

There are other technologies that are closer to neutral.

2:36:14

Whenever I can go from here's a vague qualitative consideration in one direction and here's a vague  qualitative consideration in the other direction, I try and find some data, do some simple Fermi  calculations, back of the envelope calculations and see if I can get a consistent picture  of the world being one way or the world being another.

2:36:38

I also try to be more exhaustive  compared to some.

2:36:38

I'm very interested in finding things like taxonomies of the world where I can go  systematically through all of the possibilities.

2:36:54

For example in my work with Open Philanthropy  and previously on global catastrophic risks I wanted to make sure I'm not missing any big  thing, anything that could be the biggest thing.

2:37:09

I wound up mostly focused on AI but there have  been other things that have been raised as candidates and people sometimes say, I think  falsely, that this is just another doomsday story there must be hundreds and hundreds of  those.

2:37:22

So I would do things like go through all of the different major scientific fields  from anthropology to biology, chemistry, computer science, physics.

2:37:37

What are the doom  stories or candidates for big things associated within each of these fields?

2:37:45

Go through the  industries that the U. S.

2:37:45

economic statistics agencies recognize and say for each of these  industries is there something associated with them?

2:37:57

Go through all of the lists that people  have made of threats of doom, search for previous literature of people who have done discussions  and then yeah, have a big spreadsheet of what the candidates are.

2:38:11

Some other colleagues have  done work of this sort as well and just go through each of them to see how they check out.

2:38:17

Doing that kind of exercise found that actually the distribution of candidates for risks of global  catastrophe was very skewed.

2:38:26

There were a lot of things that have been mentioned in the media as  a potential doomsday story.

2:38:33

Things like something is happening to the bees, will that be the end  of humanity?

2:38:39

This gets to the media but if you take it through it doesn’t check out.

2:38:46

There  are infestations in bee populations which are causing local collapses but they can then  be easily reversed, just breed some more or do some other things to treat this.

2:38:58

And even if  all the honey bees were extinguished immediately, the plants that they pollinate actually don't  account for much of human nutrition.

2:39:05

You could swap the arable land with others and there would  be other ways to pollinate and support the things.

2:39:19

At the media level there were many tales of  doomsday stories but when you go further to the scientists and whether their arguments for  it actually check out, it was not there.

2:39:26

the scientists and whether their arguments for  it actually check out, it was not there. But by actually systematically looking through many  of these candidates I wound up in a different

2:39:37

epistemic situation than someone who's just  buffeted by news reports and they see article after article that is claiming something is going  to destroy the world and it turns out it's like by way of headline grabbing and attempts by media  to like over interpret something that was said by some activists who was trying to over interpret  some real phenomenon. Most of these go away

2:39:53

Most of these go away and then a few things like nuclear war,  biological weapons, artificial intelligence check out more strongly and when you weigh  things like what do experts in the field think, what kind of evidence can they muster?

2:40:12

You  find this extremely skewed distribution and I found that was really a valuable benefit of  doing those deep dive investigations into many things in a systematic way because now  I can answer a loose agnostic who knows and all the all this nonsense by diving deeply.

2:40:31

I really enjoy talking to people who have a big picture thesis on the podcast and interviewing  them but one thing that I've noticed and is not satisfying is that often they come from  a very philosophical or vibes based perspective.

2:40:52

This is useful in certain contexts but there's  like basically maybe three people in the entire world, at least three people I'm aware of, who  have a very rigorous and scientific approach to thinking about the whole picture.

2:41:03

There’s  no university or existing academic discipline for people who are trying to come up with a big  picture and so there's no established standards. I hear you.

2:41:29

This is a problem and this  is an experience also with a lot of the world of investigations work.

2:41:34

I think holden  was mentioning this in your previous episode.

2:41:40

These are questions where there is no academic  field whose job it is to work on these and has norms that allow making a best effort go at it.

2:41:46

norms that allow making a best effort go at it.  Often academic norms will allow only plucking off narrow pieces that might contribute to  answering a big question but the problem of actually assembling what science knows that  bears on some important question that people care

2:42:06

about the answer to it falls through the crack  there's no discipline to do that job so you have countless academics and researchers building  up local pieces of the thing and yet people don't follow the Hamming questions: What's  the most important problem in your field, why aren't you working on it? I mean that one  might not actually work because if the field

2:42:23

I mean that one  might not actually work because if the field boundaries are defined too narrowly you'll leave  it out.

2:42:27

But yeah there are important problems for the world as a whole that it's sadly not the  job of a large professionalized academic field or organization to do.

2:42:44

Hopefully that's something  that can change in the future but for my career it's been a matter of taking low-hanging fruit  of important questions that sadly people haven't invested in doing the basic analysis on One thing I was trying to think about more recently for the podcast is, I would like to have  a better world model after doing an interview.

2:43:07

Often I feel like I do but in some cases after  some interviews, I feel like that was entertaining but do I fundamentally have a better prediction  of what the world looks like in 2200 or 2100?

2:43:18

Or at least what counterfactuals are ruled  out or something.

2:43:18

I'm curious if you have advice on first, identifying the kinds of  thinkers and topics which will contribute to a more concrete understanding of the world  and second, how to go about analyzing their main ideas in a way that concretely adds to  that picture?

2:43:36

This was a great episode.

2:43:36

This is literally the top in terms of contributing  to my world model compared to all the episodes I've done.

2:43:46

How do I find more of these?

2:43:46

Ls I’m glad to hear that.

2:43:46

One general heuristic is to find ways to hew closer to things that  are rich and bodies of established knowledge and less impenetrable–I don't know how you've been  navigating that so far but learning from textbooks and the things that were the leading papers and  people of past eras I think rather than being too attentive to current news cycles is quite  valuable.

2:44:25

I don't usually have the experience of — here is someone doing things very systematically  over a huge area.

2:44:34

I can just read all of their stuff and then absorb it and then I'm set.

2:44:44

Except  there are a lot of people who do wonderful works in their own fields and some of  those fields are broader than others.

2:45:02

I think I would wind up giving a lot of  recommendations of just great particular works and particular explorations of an issue or history Do you have this list somewhere? Vaclav Smil’s books.

2:45:13

I often disagree with some of his methods of synthesis but I enjoy his books for  giving pictures of a lot of interesting relevant facts about how the world works that I would cite.

2:45:35

Some of Joel Mokyr’s work on the history of the scientific revolution and how that interacted with  economic growth as an example of collecting a lot of evidence, a lot of interesting valuable  assessment.

2:45:57

In the space of AI forecasting one person I would recommend going back to is the  work of Hans Moravec.

2:46:06

It was not always the most precise or reliable but an incredible number  of brilliant innovative ideas came out of that and I think he was someone who really grokked a  lot of the arguments for a more compute-centric way of thinking about what was  happening with AI very early on.

2:46:36

He was writing stuff in the 70s and maybe  even earlier.

2:46:36

His book Mind Children, some of his early academic papers.

2:46:46

Fascinating  not necessarily for the methodology I've been talking about but for exploring the substantive  topics that we were discussing in the episode.

2:46:56

Is a Malthusian state inevitable in the long run?

2:46:56

Nature in general is in malthusian states.

2:47:06

That can mean organisms that are typically  struggling for food, it can mean typically struggling at a margin of how as the population  density rises they kill each other contesting for that.

2:47:17

That can mean frequency dependent  disease.

2:47:17

As different ant species become more common in an area their species specific diseases  swoop through them.

2:47:23

The general process is you have some things that can replicate and expand and  they do that until they can't do it anymore and that means there's some limiting factor they can't  keep up.

2:47:38

That doesn't necessarily have to apply to human civilization.

2:47:46

It's possible for there to  be like a collective norm setting that blocks evolution towards maximum reproduction.

2:47:56

Right  now human fertility is often sub-replacement and if you extrapolated the fertility falls that  come with economic development and education, then you would think that the total fertility  rate will fall below replacement and then humanity after some number of generations will go  extinct because every generation will be smaller than the previous one.

2:48:24

Pretty obviously  that's not going to happen.

2:48:24

One reason is because we will produce artificial intelligence  which can replicate at extremely rapid rates.

2:48:39

They do it because they're asked or programmed to  or wish to gain some benefit and they can pay for their creation and pay back the resources needed  to create them very very quickly.

2:48:48

Financing for that reproduction is easy and if you have one  AI system that chooses to replicate in that way or some organization or institution decided to  choose to create some AIs that are willing to be replicated then that can expand to make use of  any amount of natural resources that can support them and to do more work produce, produce more  economic value.

2:49:17

What will limit population growth given these selective pressures where if even one  individual wants to replicate a lot they can do so incessantly.

2:49:36

So that could be individually  resource limited so it could be that individuals and organizations have  some endowment of natural resources and they can't get one another's endowments.

2:49:50

Some choose to have many offspring or produce many AIs and then the natural resources  that they possess are subdivided among a greater population while in another jurisdiction or  another individual may choose not to subdivide their wealth.

2:50:10

And in that case you have  Malthusianism in the sense that within some particular jurisdiction or set of property  rights, you have a population that has increased up until to some limiting factor which could  be that they're literally using all of their resources, they have nothing left for things like  defense or economic investment.

2:50:28

Or it could be something that's more like if you invested more  natural resources into population it would come at the expense of something else necessary including  military resources if you're in a competitive situation where there remains war and anarchy and  there aren't secure property rights to maintain wealth in place.

2:50:56

If you have a situation where  there's pooling of resources, for example, say you have a universal basic income that's  funded by taxation of natural resources and then it's distributed evenly to every  mind above a certain scale of complexity per unit time.

2:51:16

So each second a mind exists  to get something such an allocation in that case then all right well those who replicate  as much as they can afford with this income do it and increase their population approximately  immediately until the funds for the universal basic income paid for from the natural resource  taxation divided by the set of recipients is just barely enough to pay for the existence of  one more mind.

2:51:48

So there's like a Malthusian element and that this I think has been reduced to  near the AI subsistence level or the subsistence level of whatever qualifies for the subsidy.

2:52:00

level of whatever qualifies for the subsidy.  Given that this all happens almost immediately people who might otherwise have enjoyed  the basic income may object and say no, no, this is no good and they might respond by saying,  well something like the subdivision before

2:52:21

maybe there's a restriction, there's a  distribution of wealth and then when one has a child there's a requirement that one gives them  a certain minimum a quantity of resources and one doesn't have the resources to give them that  minimum standard of living or standard of wealth yeah one can't do that because of child slash AI  welfare laws. Or you could have a system that is

2:52:38

Or you could have a system that is more accepting of diversity and preferences.

2:52:48

And  so you have some societies or some jurisdictions or families that go the route of having many  people with less natural resources per person and others that go a direction of having fewer  people and more natural resources per person and they just coexist.

2:53:08

But how much of each  you get depends on how attached people are to things that don't work with separate policies  for separate jurisdictions.

2:53:18

Things like global redistribution that's ongoing continuously versus  this infringements on autonomy if you're saying that a mind can't be created even though it has  a standard of living that's far better than ours because of the advanced technology of the  time because it would reduce the average per capita income might have any more capital  around yeah then that would pull in the other direction.

2:53:52

That’s the kind of values judgment  and social coordination problem that people would have to negotiate for and things like  democracy and international relations and sovereignty would apply to help solve them.

2:54:08

What would warfare in space look like?

2:54:08

Would offense or defense have the advantage?

2:54:14

Would the equilibrium set by mutually assured destruction still be applicable?

2:54:17

Just generally, what is the picture?

2:54:23

The extreme difference is that things are very  far apart outside the solar system and there's the speed of light limit and to get close  to that limit you have to use an enormous amount of energy.

2:54:36

That in some ways could favor  the defender because you have something that's coming in at a large fraction the speed of light  and it hits a grain of dust and it explodes.

2:54:48

The amount of matter you can send to another galaxy or  a distant star for a given amount of reaction mass and energy input is limited.

2:55:04

So it's hard to send  an amount of military material to another location as what can be present there already locally.

2:55:12

That would seem like it would make it harder for the attacker between stars or between galaxies  but there are a lot of other considerations.

2:55:28

One thing is the extent to which the matter in  a region can be harnessed all at once.

2:55:28

We have a lot of mass and energy in a star but it's only  being doled out over billions of years because hydrogen fusion is exceedingly hard outside of a  star.

2:55:44

It's a very very slow and difficult reaction and if you can't turn the star into energy  faster then it's this huge resource that will be worthwhile for billions of years and so even very  inefficiently attacking a solar system to acquire the stuff that's there could pay off.

2:56:11

If it takes  a thousand years of a star's output to launch an attack on another star and then you hold it for a  billion years after that then it can be the case that just like a larger surrounding attacker  might be able to, even very inefficiently, send attacks at a civilization that was small but  accessible.

2:56:34

If you can quickly burn the resources that the attacker might want to acquire, if you  can put stars into black holes and extract most of the usable energy before the attacker can take  them over, then it would be like scorched earth.

2:56:55

It's like most of what you were trying to capture  could be expended on military material to fight you and you don't actually get much that is  worthwhile and you paid a lot to do it and that would favor the defense.

2:57:09

At this level  it's pretty challenging to net out all the factors including all the future technologies.

2:57:15

The burden of interstellar attack being quite high compared to our conventional things seems  real but at the level of, over millions of years weighing then that thing does it result in  if the if they're aggressive conquest or not or is every star or galaxy approximately  impregnable enough not to be worth attacking.

2:57:46

I'm not going to say I know the answer. Okay, final question.

2:57:46

How do you think about info hazards when talking about your work?

2:57:52

Obviously  if there's a risk you want to warn people about it but you don't want to give careless or potentially  homicidal people ideas.

2:57:57

When Eliezer was on the podcast talking about the people who've been  developing AI being inspired by his ideas.

2:58:06

He called them idiot disaster monkeys who want to be  the ones to pluck the deadly fruit.

2:58:12

I'm sure the work you're doing involves many info hazards.

2:58:23

How  do you think about when and where to spread them?

2:58:29

I think they're real concerns of that type.

2:58:29

I  think it's true that AI progress has probably been accelerated by efforts like Bostrom's publication  of superintelligence to try and get the world to pay attention to these problems in advance and  prepare.

2:58:44

I think I disagree with Eliezer that that has been on the whole bad.

2:58:52

In some important  ways the situation is looking a lot better than the alternative ways it could have  been.

2:59:00

I think it's important that you have several of the leading AI labs making  not only significant lip service but also some investments in things like technical  alignment research, providing significant public support for the idea that the risks  of truly apocalyptic disasters are real.

2:59:30

I think the fact that the leaders of OpenAI, Deep  Mind and Anthropic all make that point.

2:59:30

They were recently all invited along with other tech CEOs  to the White House to discuss AI regulation.

2:59:38

You could tell an alternative story where a larger  share of the leading companies in AI are led by people who take a completely dismissive,  denialist view and you see some companies that do have a stance more like that today.

3:00:00

So  a world where several of the leading companies are making meaningful efforts and you can  do a lot to criticize could they be doing more and better and would have been the negative  effects of some of the things they've done but compared to a world where even though AI would  be reaching where it's going a few years later, those seem like significant benefits.

3:00:26

And if you  didn't have this kind of public communication you would have had fewer people going into things  like AI policy, AI alignment research by this point and it would be harder to mobilize these  resources to try and address the problem when AI would eventually be developed not that much later  proportionately.

3:00:43

I don't know that attempting to have public discussion understanding has been  a disaster.

3:00:52

I have been reluctant in the past to discuss some of the aspects of intelligence  explosion, things like the concrete details of AI takeover before because of concern about  this problem where people who only see the international relations aspects and zero sum  and negative sum competition and not enough attention to the mutual destruction and senseless  deadweight loss from that kind of conflict.

3:01:29

At this point we seem close compared to what I  would have thought a decade or so ago to these kinds of really advanced AI capabilities.

3:01:37

They are  pretty central in policy discussion and becoming more so.

3:01:42

The opportunity to delay understanding  and whatnot, there's a question of — For what?

3:01:52

I think there were gains of building the AI  alignment field, building various kinds of support and understanding for action.

3:01:59

Those had  real value and some additional delay could have given more time for that but from where we are,  at some point I think it's absolutely essential that governments get together at least to  restrict disastrous reckless compromising of some of the safety and alignment issues  as we go into the intelligence explosion.

3:02:26

Moving the locus of the collective action problem  from numerous profit oriented companies acting against one another's interest by compromising  safety to some governments and large international coalitions of governments who can set common  rules and common safety standards puts us into a much better situation.

3:02:50

That requires a broader  understanding of the strategic situation and the position they'll be in.

3:02:58

If we try and remain  quiet about the problem they're actually going to be facing it can result in a lot of confusion.

3:03:04

For example the potential military applications of advanced AI are going to be one of the factors  that is pulling political leaders to do the thing that will result in their own destruction and the  overthrow of their governments.

3:03:18

that will result in their own destruction and the  overthrow of their governments. If we characterize it as things will just be a matter of — you  lose chatbots and some minor things that no one cares about and in exchange you avoid any  risk of the world ending catastrophe, I think

3:03:43

that picture leads to a misunderstanding and it  won't make people think that you need less in the way of preparation of things like alignment so you  can actually navigate the thing, verifiability for international agreements, or things to have enough  breathing room to have caution and slow down. Not

3:03:56

Not necessarily right now, although that could be  valuable, but when it's so important when you have AI that is approaching the ability to really  automate AI research and things would otherwise be proceeding absurdly fast, far faster than we  can handle and far faster than we should want.

3:04:24

So yeah, at this point I'm moving towards  sharing my model of the world to try and get people to understand and do the right thing.

3:04:31

There's some evidence of progress on that front.

3:04:41

Things like the statements and movements by Geoff  Hinton are inspiring.

3:04:41

Some of the engagement by political figures is reason for optimism relative  to worse alternatives that could have been.

3:04:58

And yes, the contrary view is present.

3:04:58

It's  all about geopolitical competition, never hold back a technological advance and in  general, I love many technological advances that people I think are unreasonably down on,  nuclear power, genetically modified crops.

3:05:21

Bioweapons and AGI capable of destroying human  civilization are really my two exceptions and yeah we've got to deal with these issues and  the path that I see to handling them successfully involves key policymakers and the expert  communities and the public and electorate grokking the situation therein  and responding appropriately.

3:05:50

It’s a true honor that one of the places  you've decided to explore this model is on The Lunar Society podcast.

3:05:55

The listeners might  not appreciate it because this episode might be split up into different parts and they might not  appreciate how much stamina you've displayed here.

3:06:06

I think we've been going for eight or nine hours  straight and it's been incredibly interesting.

3:06:10

Other than typing Carl Shulman on Google  Scholar, where else can people find your work?

3:06:16

I have a blog reflective disequilibrium  and a new site in the works. Excellent.

3:06:28

Alright, Carl this has been a true  pleasure.

3:06:28

Safe to say it’s the most interesting episode I've done so far. Thank you for having me.