6 ms·
Because nobody did it on purpose?
by jstanley 1mo ago
Because nobody did it on purpose?
- exe34 1mo agoA lot of laws are involved in punishing negligence. "I didn't dump the dangerous chemicals in the river on purpose" isn't usually accepted as a defence when you choose to use the wrong truck and skipped safety protocols to save cost or rush to market for profit.
- ArcHound 1mo agoSomeone should still be accountable, the same way you're responsible and accountable for what your dog or car does.
- solenoid0937 1mo agoIf we are going to start punishing companies for security negligence, there are WAY worse cases than these models breaking out that have nothing to do with AI. This is bikeshedding at its best. Also people would just stop disclosing bad things. You already see this in the airline industry where pilots don't report mental illness because of the retributive nature of the punishment.
- ArcHound 1mo agoPlease tell me about such cases, genuinely interested. I still think we should take the opportunity to discuss this case in particular.
- solenoid0937 1mo agoThere have been data breaches where the SSNs and PII of millions of people have been exposed. That is far more harmful in real terms than any of the OpenAI/Anthropic mess.
- ilogik 1mo agoAn in the EU at least there are laws that fine companies that don't take security seriously.
- solenoid0937 1mo agoEven the EU bikesheds and focuses on shiny targets to land political wins with their constituents.
- reddozen 1mo agoSo OP asked you for one example and you can't give one? You just fall back to the generic statement slop, you must be a bot right? Again, what's ONE (1) real world example of "SSN/PII" being illegally exposed that wasn't investigated or prosecuted.
- deleted 1mo ago[deleted]
- kdheiwns 1mo ago"But another company did some different bad thing" is the excuse employees of bad companies all go to immediately. Just because another person did something bad and hasn't been adequately punished doesn't mean you should get a pass. If one person gets away with going 50 MPH over the speed limit, it doesn't mean every person should be allowed to do it. Everyone should be punished, but there are always instances of some cases falling through the cracks. It doesn't mean the crack should be widened so all cases fall through.
- solenoid0937 1mo agoIt's more like there are many people going at 120 MPH in a 50 MPH zone, that have ran over real people, but you punish the guy that self-reported doing 60 MPH because he drives a shiny, interesting Lamborghini and not a Prius like the others. Anyone outraged about these AI incidents is not thinking rationally if they were not much more outraged about everyday companies leaking millions of people's PII, SSNs, which has done actual lasting damage and has been used by actually malicious actors. People are just directing their anger at AI companies through this pretext. We all know open source models will democratize this ability anyways, so strap in for the ride.
- kdheiwns 1mo agoTurning oneself in doesn't absolve one of a crime. Never did and never will. Shouldn't, either. And companies always try to pretend someone out there is worse and garner fake sympathy. OpenAI blew up the memory market and made tech inaccessible. The downstream effects of that are immeasurably massive and will have real consequences. It could even result in medical devices becoming too expensive for people. I don't care about my SSN being leaked. You can find it just by knowing where I'm born and every job I've applied to knows it already. But inability to afford technology affects everyone around me. The SSN red herring thing is not an organic argument.
- solenoid0937 1mo ago> OpenAI blew up the memory market and made tech inaccessible This is not a "crime", has nothing to do with this incident, and simply confirms what I am saying about people using these events as an outlet for their anger at AI companies, as opposed to any rational reasoning about industrywide security negligence. I could almost respect a viewpoint that says "we should punish companies for security negligence, starting with the negligence that has caused the most egregious harms." That is an internally consistent and rational viewpoint. I cannot respect a viewpoint that's "I don't like the AI companies, so let me use this hammer I found on them specifically." It's purely emotional.
- reddozen 1mo ago> there are WAY worse cases than these models breaking out that have nothing to do with AI. And? Welcome to the big boy world. This isn't playground rules where you can complain "But Bobby was doing bad things too why isn't he in trouble?" But you know this already. You're just pretending not to. Why?
- solenoid0937 1mo agoAddressed in my other replies
- reddozen 1mo agoNo. You didn't address in other replies. This is a lie. Just don't lie.
- bluGill 1mo ago> If we are going to start punishing companies for security negligence, there are WAY worse cases Perhaps, but you have to start someplace. I think we do need to punish companies for security negligence. However the details matter (nobody can be perfect: you need to do something reasonable to stop the known attacks, but I have to agree to allow that you can't be perfect and so someone will get compromised). I'm not sure how to get the details right to cover everything without going too far. If we handwave that away though, eventually somebody will need to get punished for something that someone else got away with not long before.
- bryanlarsen 1mo agoA quick Google finds several people that have been successfully prosecuted for security negligence, like Joe Sullivan of Uber. Most haven't seen criminal prosecution, but many do see civil prosecution and even more common is some sort of deal with prosecutors to avoid both.
- rcxdude 1mo agoYes, but generally this falls below criminal liability.
- skinfaxi 1mo agoIf I let my dog off leash and it bites you and causes grave injury, no harm done then?
- sebzim4500 1mo agoIn this case though no damages were done. It's more like you let your dog off the leash and it scared me a bit.
- inigyou 1mo agoSounds like the crime of assault.
- rcxdude 1mo agoWhat exactly you are liable for in that case varies significantly with the details of the incident, both in terms of what you intended to happen and what you knew about what could happen.
- ModernMech 1mo agoThat's why its so concerning.
- bix6 1mo agoNobody stole from humanity, constantly told us how dangerous the invention was, and then set up systems that they couldn’t properly control to rush ahead of their competitors? Nobody did that on purpose? I think they did.
- AbsurdCensor 1mo agoYou could say that same exact thing for the entire Industrial Revolution, but that doesn't mean we are going to destroy the looms even though some tried unsuccessfully.
- trillic 1mo agoCorrect, no mens rea, unless we're talking the internal reasoning trace of the model.
- bluGill 1mo agoMens Rea is not required (at least not always). Mens Rea makes a big difference in sentencing. (first degree murder: you planed the murder, homicide you had not intent of murder but things got out of hand in the moment):
- sscaryterry 1mo agoIgnorance is not a defence in law.
- xgulfie 1mo agoIt is, sometimes. Trespassing for example. A lot of laws say "willingly" or "with the intent to"