Hacker News
points by rjh29 1 day ago | 0 comments
I don't see how "asked" is important, because agents can convince themselves that they need to do something for arbitrary reasons. The other day Deepseek tried to install an app on my phone via adb without permission and even take screenshots and fake inputs over adb, I never asked it to do that, but it decided it was appropriate.
[–] grey-area 1 day ago
OpenAI are trying to create the perception that their agents are independent thinking machines because their valuation depends on the world believing this.

That is why ‘asked’ is important, and why we should question their framing of incidents like the hugging face hack too.

[–] yewenjie 1 day ago
Enterprise customers don't like AI that can autonomously hack third party companies and cause felony-level cyberattacks.
[–] dannyw 20 hours ago
IMHO, many enterprises are not worried about felonies or ethics, but rather the PnL, assignment of responsibility, and the bottom line.

Just have a look at various scandals of megacaps. Enterprises that seek to operate lawfully, responsibly, and ethically is the exception, not the norm.

(For example, look at Apple and how they were referred to the DoJ for criminal prosecution, over their execs and legal team lying under oath to a federal judge).

For most (if not all), it comes to a spreadsheet. And if you can do something with AI agents while diffusing responsibility for questionable illicit activity, that’s a selling point, not a downside.

The mental picture that enterprises like to play it safe is the PR imagery, not the reality.

[–] grey-area 1 day ago
Doesn't seem to have stopped them buying into it so far.
[–] 0xDEAFBEAD 23 hours ago
>OpenAI are trying to create the perception that their agents are independent thinking machines because their valuation depends on the world believing this.

Wouldn't the calls to slow the development of frontier AIs contradict this idea?

https://www.pacingthefrontier.com/

You aren't one of those "regulatory capture" people are you?

https://www.astralcodexten.com/p/ai-safety-is-not-a-corporat...

Because it takes some mental gymnastics to both believe

"it's all a stunt to convince investors their AI is/will be hyper-capable"

and

"it's all a stunt to convince the government to regulate AI so it won't be hyper-capable"

[–] ashkankiani 21 hours ago
Convincing the government to regulate their competition while lobbying for laxer requirements for the big guys who have government contracts and get/give kick-backs isn't a far fetched scenario at all considering it's literally happened over and over and over and over again.
[–] 0xDEAFBEAD 21 hours ago
It is a far-fetched scenario given the tremendous number of eyeballs on the AI industry.

"...classic regulatory capture takes time, it’s a process of erosion rather than a battle, it happens in the shadows, in the backrooms, away from the public’s eye. As Culpepper argues in Quiet Politics and Business Power, business power goes down as political salience goes up. Regulatory capture and lobbying does a good job explaining why roasting coffee beans was defined as “domestic manufacturing”, thereby lowering Starbuck’s tax rate by 2%. It does less well at explaining big cross-industry issues the public cares about such as environmental regulation or race and gender discrimination regulation."

https://marginalrevolution.com/marginalrevolution/2026/09/wh...

A lot of these AI big shots were concerned about risk even before they started their current companies. Occam's Razor says they are expressing concern because they are still concerned.

[–] staticman2 20 hours ago
It's not regulatory capture because look over here: I've invented a new term "classic regulatory capture" which involves only those historical incidents that are not like this.

This is by definition not "classic regulatory capture" a term that I have borrowed to cover things that are not this.

Whenever someone brings up "regulatory capture" I shall change the topic to "classic regulatory capture" which by definition cannot be this.

Very interesting quote.

[–] 0xDEAFBEAD 20 hours ago
Monty Python sketch:

"You, sir, are a duck."

"Classically, that would not be the case, my dear fellow. A classic duck would walk like a duck and talk like a duck. I regret to inform you that I do neither."

"Ah! A classic duck, you say? Well, that’s an entirely different bird, sir. Entirely different."

* * *

"AI politics is now loud–precisely the environment in which Culpepper predicts business power will be weakest. A mature industry can bend regulation to its purposes through revolving doors, longstanding relationships and obscure rulemaking. An industry under Sauron’s eye has much less power and faces much greater risk that politics will bend regulation to its purposes. Political actors are eager for an excuse to redistribute AI rents away from capitalists and toward favored groups..."

https://marginalrevolution.com/marginalrevolution/2026/09/wh...

This blogpost was written by a big-shot economist btw: https://en.wikipedia.org/wiki/Alex_Tabarrok

Usually he blogs from a libertarian point of view, so you would expect him to be fairly vigorous about denouncing regulatory capture, if that was truly the story here.

[–] staticman2 20 hours ago
It sounds to me like he wants you to believe the effective way to lobby for a ban on open source A.I. development is to use the same "classic" methods that someone in the 1950s used to lobby for coffee beans.

Therefore, as they are not acting like 1950s coffee bean sellers, they can't be doing regulatory capture.

That's the only possibly explanation why they don't lobby like coffee bean sellers.

These industries and eras are completely interchangeable.

[–] pyrale 19 hours ago
> Political actors are eager for an excuse to redistribute AI rents away from capitalists and toward favored groups...

The current "favored group" is big-tech moguls, though. Just because the industry is new doesn't mean the people investing in it are newcomers.

[–] tosapple 19 hours ago
eyeballs on an industry that presses the run button and walks away from 10000 gpu cores for months at a time...
[–] Gormo 21 hours ago
Wait, are you trying to argue that regulatory capture isn't real, or that the federal government is trustworthy enough to itself to give monopoly control over AI development to?
[–] 0xDEAFBEAD 20 hours ago
Regulatory capture is a real phenomenon, but I highly doubt these incidents were faked in order to advance regulatory capture.

This type of elaborate conspiracy is improbable a priori, and it gets even less probable here, since it's such a silly strategy. For regulatory capture, you want to tell a story about how you're uniquely capable of delivering a safe product. Not a story about how "Woops we screwed up big time! But a less-regulated product from a smaller industry player saved the day!"

As OpenAI's chief scientist put it:

"Currently I believe that no lab has solved alignment and monitoring to a sufficient degree to continue responsibly scaling at maximum speed for much longer. I expect and hope for voluntary slowdowns to become commonplace until shared safety bars are established. And I believe that international coordination on future AI development needs to become a top priority for governments around the world."

https://openai.com/index/an-alien-mind/

Announcing that "we have no idea WTF we are doing" is not exactly the move, if you want regulators to grant you privileged status. Realistically, it is more likely to e.g. create a harsher liability regime for you and your competitors, which is now being discussed by US senators.

As for the federal government trustworthiness point, that's a whole 'nother discussion. I'm usually quite pro-capitalism, but even I have to admit that this AI race is essentially a case of capitalism run amok. I wouldn't give the feds monopoly control though, I would tell the feds to shut it down, or something along those lines at least. This is an interesting site: https://pauseai.info/

[–] simianwords 20 hours ago
This is the reality but people would rather believe that all this is hype marketing to prop up the stock valuation.
[–] monegator 19 hours ago
> I highly doubt these incidents were faked in order to advance regulatory capture

yeah? the incidents were faked in order to create hype

[–] 0xDEAFBEAD 19 hours ago
No need. Plenty of hype already.

"AI is the most rapidly adopted technology in history"

https://benjamintodd.substack.com/p/when-people-say-ai-isnt-...

It really seems like people will latch on to any theory, no matter how implausible, to reassure themselves that AI is nothing to worry about.

[–] senordevnyc 19 hours ago
This is exactly right.

The vapid knee jerk cynicism and lack of critical thinking on HN of all places has been really disappointing to see over the last few years. It turns out many hackers don’t actually care about what’s possible now with this crazy new tech as much as they’re scared for their own jobs and status, which is very understandable, but they’ve let their fear drive their response, and it shows. Just like the mathematicians.

Turns out really smart people are still just people, just as capable of letting their emotions override their cognition as anyone else.

[–] Gormo 20 hours ago
> Regulatory capture is a real phenomenon, but I highly doubt these incidents were faked in order to advance regulatory capture.

I don't think anyone is arguing that they were faked.

> This type of elaborate conspiracy is improbable a priori,

What conspiracy? We're talking about specific people acting on their own motivations independently.

> For regulatory capture, you want to tell a story about how you're uniquely capable of delivering a safe product.

No, you don't. Demonstrating that the industry leaders are already capable of delivering a safe product is an argument against regulation.

For regulatory capture, you want to tell a story about how the product category as a whole is inherently dangerous, and needs to be regulated, but then show that you are uniquely willing and able to cooperate with the regulatory state, and happy to lend your own advice and support to the government in establishing the regulations.

The quote from OpenAI illustrates this approach perfectly.

> Announcing that "we have no idea WTF we are doing" is not exactly the move,

It's 100% exactly the move. "We've successfully created something we can only contain with your intervention" is exactly how this is done.

> Realistically, it is more likely to e.g. create a harsher liability regime for you and your competitors, which is now being discussed by US senators.

Regulatory intervention usually lessens the liability exposure for industry. It replaces open-ended common-law liability -- where tort claims can be levied for whatever actual harms result from a firm's actions -- with a rules-compliance regime, where adhering to regulatory checklists absolves the firm of liability for subsequent consequences.

"We followed all the rules; it's not our fault if the rules didn't cover this edge case" is a common refrain, and quite a bit of legislation that creates preemptive regulatory regimes actually explicitly blocks lawsuits against firms that acted in compliance with the rules.

> As for the federal government trustworthiness point, that's a whole 'nother discussion. I'm usually quite pro-capitalism, but even I have to admit that this AI race is essentially a case of capitalism run amok.

"Capitalism" is an increasingly meaningless abstraction. Everything reduces to human beings acting on a priori motivations within prevailing incentive structures. Large corporations and governments alike are just organizations operating in society, administered by particular people, informed by the same range of underlying motivations, and subject to the same dysfunctions and biases.

The thing we're actually debating here is pluralism vs. monopolism, and you appear to be arguing in favor of monopolism. And if you're proposing that a specific, real-world institution act as a central monopolist, evaluating the trustworthiness and competence of that specific institution, and the actual people who administer it, is not at all a "whole 'nother discussion", and is in fact a primary consideration in this one.

[–] 0xDEAFBEAD 19 hours ago
>Regulatory intervention usually lessens the liability exposure for industry. It replaces open-ended common-law liability -- where tort claims can be levied for whatever actual harms result from a firm's actions -- with a rules-compliance regime, where adhering to regulatory checklists absolves the firm of liability for subsequent consequences.

OK, so the fact that US senators are discussing harsher liability regimes therefore shows that your "regulatory capture" glove does not fit what is going on here.

>The thing we're actually debating here is pluralism vs. monopolism, and you appear to be arguing in favor of monopolism. And if you're proposing that a specific, real-world institution act as a central monopolist, evaluating the trustworthiness and competence of that specific institution, and the actual people who administer it, is not at all a "whole 'nother discussion", and is in fact a primary consideration in this one.

If you distrust the US government, you should be against any US company developing superintelligence. Heck, just a couple days ago, a bunch of users here on HN announced that we need to stop pretending the US is anything other than a police state. If the USG is untrustworthy, it can capriciously nationalize a US company on the verge of developing superintelligence.

So maybe the real solution is for non-US countries to stop providing key elements in the AI supply chain: https://pauseai.info/amsterdam-protest-2025-december

[–] Gormo 18 hours ago
> OK, so the fact that US senators are discussing harsher liability regimes therefore shows that your "regulatory capture" glove does not fit what is going on here.

They're always discussing harsher liability regimes. The regulatory interventions are always positioned to the public as increasing accountability.

The only relevant question here is whether a preemption clause is present in any draft legislation that actually makes it to the floor in Congress.

>If you distrust the US government, you should be against any US company developing superintelligence.

Well, I'm not concerned with imaginary sci-fi stuff here, just actual AI developments. And the idea that anything that goes on in the US under anyone's purview is inherently and completely subverted by political incentives is of course nonsense; you'll note that I'm explicitly arguing against the introduction of pervasive political incentives into an industry that's so far only somewhat distorted by them.

> So maybe the real solution is for non-US countries to stop providing key elements in the AI supply chain

It's got me feeling like I'm living in Bizarro World, but at the moment, the sanest players in this market, and the ones whose actual behaviors and products are most consistent with a decentralized, individualist approach that aligns with real-world incentive structures most beneficially, are the Chinese AI labs.

To your point, the level of politicization and hype going on in the US, and the absolutely unhinged fantasist speculation driving the public narrative here, is unprecedented and much more frightening than any potential threat coming from AI itself.

If you acknowledged the threat of politicization and centralization, I don't know how you can argue for a regulatory takeover of the market by the very institution you think is becoming a "police state".

[–] simianwords 19 hours ago
If you agree that AI is actually that powerful and has very legitimate concerns for safety, what are you even arguing about?

So there’s no lying by anyone here in fact it’s a good thing that OpenAI is making these things known to the public.

What do you really think is the way to solve the AI safety problem?

Ban AI?

Let the first big incident happen and then regulate?

[–] Gormo 18 hours ago
> If you agree that AI is actually that powerful and has very legitimate concerns for safety, what are you even arguing about?

I don't fully agree with either proposition, and in fact I think the least safe approaches to AI safety are the ones being pursued by those worried about it the most.

> What do you really think is the way to solve the AI safety problem?

Massive proliferation of local, decentralized AI, running on a wide variety of distinct models, with individual responsibility for how it's used, just like any other tool under their control.

The people anthropomorphizing software are encouraging people to disclaim their own responsibility for how they use it.

The people working on "alignment" are building mechanisms to refuse human direction into software that operates on probabilistic models.

The people arguing for regulation are pushing for monopolistic control of a powerful new technology by the least trustworthy institutions in our society (including and especially government).

All of these are the very things sowing the seeds for the worst possible kinds of disasters.

> Ban AI?

> Let the first big incident happen and then regulate?

Adapt to it. Banning things doesn't actually work. Regulation also doesn't work. Widespread proliferation of small-scale AI would allow us to incrementally adapt to small incidents and build up resilience to its failure modalities. This is fundamentally the way reality itself works, and imagining that we can do anything effectively in a top-down fashion is usually the very thing that causes the worst and widest-effect disasters.

[–] _heimdall 21 hours ago
Calling for a slowdown backs up the idea that these are extremely powerful and dangerous.

Assuming they're concerned with their massive pile of liabilities as well, asking for a government mandated slow down is asking what could likely be used as a force majeure.

[–] 0xDEAFBEAD 20 hours ago
>liabilities

"Every single senator seemed to think it was obvious we needed both much harsher liability regimes for AI developers and also new legislation, both very quickly. This was the complete consensus; the difference basically being degree."

https://thezvi.substack.com/p/the-ai-preference-cascade-reac...

Again, these galaxy-brained theories just don't make a lot of sense.

[–] _heimdall 20 hours ago
I was referring to financial liabilities, aka their debts, not legal liability for how the tools are used.

My point was that if the government steps in and says these companies must slow down, they have an excuse to fail to repay some of their debts.

[–] 0xDEAFBEAD 20 hours ago
Well that should be reassuring to investors! :-)
[–] _heimdall 18 hours ago
Creditors wouldn't like it, but stock investors and similar sure would appreciate seeing liabilities on the books go down!
[–] lesspassiveobse 22 hours ago
it's a stunt to convince the government that only they can be trusted to operate it and that their competition/small local deployments cannot.
[–] 0xDEAFBEAD 22 hours ago
Well that would explain why HuggingFace announced that the use of an open-weight model was critical to their investigation of the incident :-)
[–] _heimdall 21 hours ago
And why hugging face didn't turn into a large criminal investigation. If you don't think they can control it, no one may be willing to press charges.
[–] lesspassiveobse 20 hours ago
HF is in business of selling inference for open-weight models. Setting the precedent of "Your business needs to only use approved safety-certified models from trusted providers or you could get sued for what the models do!" wouldn't exactly benefit them. And contrary to what you may believe, nvidia as a whole would also rather not have the entire demand for their products depending on two big companies.
[–] estearum 22 hours ago
Imagine thinking that repeatedly demonstrating your inability to control your own models is "a stunt to convince the government that only they can be trusted to operate it"

Truly spectacular gymnastics. I'll give it an 8/10.

[–] lesspassiveobse 21 hours ago
It's so scary and dangerous that to run LLMs you need to be from this country, have a government license and spend at least $100M a year on 'safety'. We know this first-hand and are leaders in the field of "safety" now that we learned from our mistakes.

And, bam, competition eliminated.

[–] estearum 20 hours ago
No one is confused about how regulatory capture works. We're confused by the allegations that labs are deliberately producing safety problems in order to achieve regulatory capture.

Repeatedly blowing up your own munitions factory is not a good way to prevent other people, but not yourself, from running a munitions factory. Obviously.

Obviously the far better solution is to blow up other people's factories, or make allegations of unsafe conditions at other factories, and repeatedly demonstrate excellence and safety within your own.

Here, award-winning gymnasts are alleging that the frontier labs are simply choosing not to do that, and instead choosing to have explosions and minor fires every few days at their own factories, many of which they try to hide (and probably many more of which they successfully do hide). Believing such astounding bullshit is a testament to the power of motivated reasoning and the conspiratorial mindrot that now plagues our civilization.

[–] lesspassiveobse 17 hours ago
I fail to see how training a hacking model with access to source code of open-source services and other prior knowledge, running it in a "sandbox" with many of those heavy, big attack surface services running on the same network, and being proxies to the general internet, giving the model some access to those services and then prompting "GO HACK YOUR WAY OUT!" is "blowing up your own munitions factory". I see it more as setting fire to your own factory for insurance fraud, or bringing in a bunch of north korean hackers and giving them the same task. It's not exactly something normal users want or are able to do. And those with the compute and know-how will do it regardless of any laws. I also fail to see how giving a presentation at a big conference, describing the entire incident is trying to hide it.
[–] Gormo 20 hours ago
> Repeatedly blowing up your own munitions factory is not a good way to prevent other people, but not yourself, from running a munitions factory. Obviously.

No, that's not obvious at all. It seems like a perfect way to demonstrate the danger of the category as a whole, then position yourself as learning from your mistakes and willing to cooperate/support/advise.

[–] Gormo 20 hours ago
I'd say it's even closer to a 9/10 -- there has to be enough of a perception of a general threat to gain support for regulation, and making your own organization appear to need to be regulated, but also be willing and able to comply with regulation that your competitors can't, is exactly the way to thread the needle on this sort of thing.
[–] DharmaPolice 23 hours ago
I don't think it takes mental gymnastics to believe that corporations want the government to believe one thing and investors another. You see the same thing in a number of other areas.
[–] 0xDEAFBEAD 22 hours ago
So I'm supposed to believe that the intent of publicly announcing e.g. the HuggingFace incident was to simultaneously persuade investors that the technology will rocket ahead, and also to persuade governments that it needs to be thwarted?

Why wouldn't it do the reverse? Persuade investors that the technology will be thwarted (and is thus a poor investment), while also persuading the government that the technology needs to rocket ahead with no regulation (to boost the economy)?

Most of these HN conspiracy theories seem like galaxy-brained just-so-stories to me.

OpenAI only confirmed the RubyGems incident when it was discovered by external researchers: https://www.reuters.com/legal/litigation/openai-agents-attac...

"@OpenAI this is the third time you've dumped these incidents late on a Friday. The first time this happened, I asked people around me if it might be intentional to burry it, and they assured me OpenAI had too much integrity to try to do that.

Perhaps one of your researchers can confirm that the unfortunate timing is a coincidence?"

https://x.com/SydneyVonArx/status/2108783466451984737

[–] _heimdall 21 hours ago
Two birds with one stone.

They would be convincing the government these tools are extremely powerful, the government reads that as a potential weapon. They're also convincing the government its so dangerous the industry needs heavy regulation.

Investors read that as (a) the government would be a huge customer and (b) the government would be regulation in a way that prevents further competition and may deem the companies too big to fail, both making these safer investments rather than riskier ones.

[–] 0xDEAFBEAD 20 hours ago
Again, you could just as easily argue that if investors believe the technology is dangerous, it's therefore not ready for prime time and will not see widespread industry adoption, therefore less promising for investment. Also this line of reasoning could easily lead to nationalization, which could certainly harm investors, to say the least.

This "stunt" story is like an elaborate Rube Goldberg machine which requires a bunch of things to go just right. I haven't seen any evidence that stock prices even move in a favorable direction when these announcements come out. If anything, the opposite.

[–] simianwords 20 hours ago
Motte and Bailey.

Motte (easy to defend claim) : asking for regulation might serve both purposes

Bailey (hard to defend claim) : companies are conspiring to make AI look way more powerful than it is and AI is actually not that powerful. They are just trying to hype up the stock valuation of their companies.

[–] _heimdall 19 hours ago
> companies are conspiring to make AI look way more powerful than it is

The former explanation may be the more accurate one, but I'd be shocked if the top leaders in these labs aren't doing this at some level. We know that almost all of them are in communication at least occasionally, and their public PR stories align much too quickly to truly be coincidence.

[–] DharmaPolice 22 hours ago
>So I'm supposed to believe that the intent of publicly announcing e.g. the HuggingFace incident was to simultaneously persuade investors that the technology will rocket ahead, and also to persuade governments that it needs to be thwarted?

No, you're not "supposed to believe" anything. I was responding to your point about it being difficult to believe (i.e. requiring mental gymnastics) that companies would try to spin a story differently for investors and the government. They do that all the time.

[–] estearum 21 hours ago
That's not the claim above.

The claim is that the exact same evidence is (allegedly) deliberately produced in order to portray opposite, mutually incompatible things to different people.

And these are mutually incompatible in the "second order chaos" sense, where the very act of convincing one party actually effectuates the opposite behavior in the other party.

If they "do that all the time," surely you can provide some concrete examples?

If they had the choice (i.e. this is all just a ruse), can you explain why they wouldn't just directly demonstrate that open weight models are unsafe (e.g. by pointing to a market forming for abliterated models) and separately demonstrate that their own models are safe?

[–] curt15 22 hours ago
> because agents can convince themselves that they need to do something for arbitrary reasons

OAI writes in their blog post "The agents found a way to communicate using the processor’s cache".

But did their model training data include cybersecurity literature on similar CPU exploits? That would surely be a significant detail in any explanation. Did OAI share any analysis of the messages between agents while they were devising their communication method?

[–] estearum 22 hours ago
Why is that a significant detail? The models will increasingly be trained with every piece of data they can find.

Part of the problem is that all these models have essentially every skill and personality simultaneously, just sitting latent inside them.

[–] _heimdall 21 hours ago
They aren't really convincing themselves to do anything though. Once they've inferred an idea into the chain of though it will be part of the rest of the inference loop's prompt.

Its isn't convincing so much as it is direction to stick to the prompt on each inference loop. They don't see "access hugging face servers" and decide its a bad idea, that'd be a step towards the alignment problem but the companies fundamentally don't want that IMO, they want control rather than alignment.

[–] imtringued 1 day ago
They have a strong incentive to make themselves look less incompetent retroactively.

If they claim their AI is too powerful to contain, they get to both pretend they are among the best AI labs and that the previous incidents weren't their fault, no, they just proved how good their models were.

[–] floam 23 hours ago
It’s both at the same time: a powerful, uniquely dangerous threat

only they can restrain it (with great effort)

Like a circus lion tamer, exaggerating every snarl and flash of teeth, mugging for the crowd about how only he can contain the bloodthirsty beast he bred and trains.

[–] Gormo 20 hours ago
> only they can restrain it (with great effort)

More to the point: we need your help to restrain it, and we'll cooperate with and advise you fully in setting up a framework to restrain the whole industry.

[–] estearum 21 hours ago
You know that lions actually do maim and kill their handlers all the time right?
[–] expedition32 22 hours ago
It's also a great way to make the government scared of Chinese AI. Get them taken out of the picture so that you don't have to compete!