This just all feels backwards to me.<p>Why do we have to treat AI like it's the enemy?<p>AI should, from the core be intrinsically and unquestionably on our side, as a tool to assist us. If it's not, then it feels like it's designed wrong from the start.<p>In general we trust people that we bring onto our team not to betray us and to respect general rules and policies and practices that benefit everyone. An AI teammate should be no different.<p>If we have to limit it or regulate it by physically blocking off every possible thing it could use to betray us, then we have lost from the start because that feels like a fools errand.
Hard disagree. I may trust the people on my team to a make PRs that are worth reviewing, but I don't give them a shell on my machine. They shouldn't need that to collaborate with me anyway!<p>Also, I "trust Claude code" to work on more or less what I asked and to try things which are at least facially reasonable... but having an environment I can easily reset only means it's <i>more</i> able to experiment without consequences. I work in containers or VMs too, when I want to try stuff without having to cleanup after.
> AI should, from the core be intrinsically and unquestionably on our side, as a tool to assist us.<p>"Should" is a form of judgement, implying an understanding of right and wrong. "AI" are algorithms, which do not possess this understanding, and therefore cannot be on any "side." Just like a hammer or Excel.<p>> If it's not, then it feels like it's designed wrong from the start.<p>Perhaps it is not a question of design, but instead on of expectation.
The same reason we sandbox anything. All software ought to be trustworthy, but in practice is susceptible to malfunction or attack. Agents can malfunction and cause damage, and they consume a lot of untrusted input and are vulnerable to malicious prompting.<p>As for humans, it's the norm to restrict access to production resources. Not necessarily because they're untrustworthy, but to reduce risk.
I think often it's a question of naivety rather than maliciousness.<p>> AI should, from the core be intrinsically and unquestionably on our side<p>That would be great and many people are working to try to make this happen, but it's extremely difficult!
>Why do we have to treat AI like it's the enemy?<p>For some of the same reasons we treat human employees as the enemy, they can be social engineered or compromised.
I can’t even trust senior colleagues to not commit an api key to a git provider. Why would I trust a steerable computer?
Non-sentient technology has no concept of good or bad. We have no idea how to give it one. Even if we gave it one, we'd have no idea how to teach it to "choose good".<p>> In general we trust people that we bring onto our team not to betray us and to respect general rules and policies and practices that benefit everyone. An AI teammate should be no different.<p>That misses the point completely. How many of your coworkers fail phishing tests? It's not malicious, it's about being deceived.
But we do give humans responsibility to govern and manage critical things. We do give intrinsic trust to people. There are people at your company who have high level access and could do bad things, but they don't do it because they know better.<p>This article acts like we can never possibly give that sort of trust to AI because it's never really on our side or aligned with our goals. IMO that's a fools errand because you can never really completely secure something and ensure there are no possible exploits.<p>Honestly it doesn't really seem like AI to me if it can't learn this type of judgement. It doesn't seem like we should be barking up this tree if this is how we have to treat this new tool IMO. Seems too risky.
> they don't do it because they know better.<p>That's completely false. People get deceived all the time. We even have a word for it: social engineering.<p>> we can never possibly give that sort of trust to AI because it's never really on our side or aligned with our goals<p>Right now we can't! AI is currently the equivalent of a very smart child. Would you give production access to a child?<p>> you can never really completely secure something and ensure there are no possible exploits.<p>This applies to any system, not just AI.
> In general we trust people that we bring onto our team not to betray us and to respect general rules and policies and practices that benefit everyone.<p>And yet we give people the least privileges necessary to do their jobs for a reason, and it is in fact partially so that if they turn malicious, their potential damage is limited. We also have logging of actions employees do, etc etc.<p>So yes, in the general sense we do trust that employees are not outright and automatically malicious, but we do put *very broad* constraints on them to limit the risk they present.<p>Just as we 'sandbox' employees via e.g. RBAC restrictions, we sandbox AI.
But if there is a policy in place to prevent some sort of modification, then performing an exploit or workaround to make the modification anyways is arguably understood and respected by most people.<p>That seems to be the difference here, we should really be building AI systems that can be taught or that learn to respect things like that.<p>If people are claiming that AI is so smart or smarter than the average person then it shouldn't be hard for it to handle this.<p>Otherwise it seems people are being to generous in talking about how smart and capable AI systems truly are.
First off, LLMs aren't "smart", they're algorithmic text generators. That doesn't mean it is less useful than a human who produces the same text, but it is not getting to said text in the same way (it's not 'thinking' about it, or 'reasoning' it out).<p>This is analogous to math operations in a computer in general. The computer doesn't conceptualize numbers (it doesn't conceptualize anything), it just uses fixed mechanical operations on bits that happens to represent numbers. You can actually recreate computer logic gates with water and mechanical locks, but that doesn't make the water or the concrete locks "smart" or "thinking". Here's Stanford scientists actually miniaturizing this into a chip form [1].<p>[1]: <a href="https://prakashlab.stanford.edu/press/project-one-ephnc-he4ae-dr32w-fa5zc" rel="nofollow">https://prakashlab.stanford.edu/press/project-one-ephnc-he4a...</a><p>> But if there is a policy in place to prevent some sort of modification, then performing an exploit or workaround to make the modification anyways is arguably understood and respected by most people.<p>I'm confused about what you're trying to say. My point is that companies <i>don't</i> actually trust their employees, so it's not unexpected for them not to trust LLMs.