Michael 🔸 (@mjkerrison) profile picture

Executive Director, @aisafetyanz | Let's make sure this goes well, alright?

Melbourne, Victoria
Joined January 2022
Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)Photo by Michael 🔸 (@mjkerrison)
Let's tackle poverty, animal suffering, and the disenfranchisement of future generations!
20
2,337
Michael 🔸 retweeted
Whether or not Alice Huang had been recruited by the Chinese Ministry of State Security has always been a tertiary issue. What’s quite clear is that: 1. She has been a large Nvidia customer (and a sexual relationship with her is highly problematic from a corporate policy and governance perspective for Jensen on those grounds alone) 2. She is controlling a shell company Megaspeed dedicated to smuggling compute to both US Govenment-listed Chinese AI companies and to data center build outs in China itself - all in serious violation of US law, potentially making Jensen part of a criminal conspiracy to evade US export controls. 3. She is connected to an entire web of Chinese shell companies trying to do the same. Jensen wasn’t fired because he had an affair with an alleged MSS agent. He was fired because he: 1. Had at least one and now, quite plausibly, multiple affairs with people in his reporting chain in violation of company policy. Something that has gotten numerous CEOs fired over the years, including at Intel and McDonalds. 2. Lied to his board about his relationship and forced the company to put out false statements to the public, putting it in legal jeopardy. 3. Was involved in a sexual relationship with a Chinese smuggler that had violated US export controls laws and provided her with billions of dollars of Nvidia chips that facilitate that criminal activity. 4. By lying and hiding that relationship from his family, the company, and the public, he put himself in a position to be blackmailed by Chinese intelligence services. 5. He very likely ordered his general counsel to interfere in an investigation by US government into his mistress’ smuggling operation. 6. He presided over stunning and extensive compliance failures to investigate and prevent his chips from being smuggled illegally into Chinese mainland and being provided to PLA affiliated institutions, all in violation of US law. This is a shocking indictment of him and his record and the board clearly had no alternative but to fire him.
Bombshell story. The spy narrative is collapsing already. Is there clear & convincing evidence that Alice Huang was a Chinese spy? - AG says no. (“no conclusions reached”). - CIA says no. (“not yet convinced”). - DNI says no (“not entirely accurate and over-torqued”). - Ranking Democrat on House Intelligence (incoming Chairman) says no. (“today, at least, I don’t know”). This was immediately after he was briefed. Who argues otherwise? Anonymous officials tell CNN “it strains credulity to believe that she was not acting as an agent of the Chinese government — simply by virtue of the fact that she is a successful Chinese businesswoman working with one of America’s most powerful companies.” This is their proof after a year of investigating and surveillance? That she was a “successful Chinese businesswoman”? At this point, the only crime that we know for sure happened is the leaking of the classified memo. Who did that and why? An investigation should be opened.
145
604
87
2,903
301,873
Michael 🔸 retweeted
Reminder that this is projection, and that Zitron was buying the sp500 while publicly predicting that a crash bigger than the dot com bubble was imminent.
Guy who is confident we're in a bubble worse than the one preceding the most brutal and drawn out market crash in living memory but who also starts responsibly putting money in the sp500
4
3
92
3,364
Based Buck as usual
Redwood Research CEO @bshlgrs responds to Google DeepMind researcher @EgeErdil2 asking what would prove his short AI timelines wrong: "Sorry, Ege, but I'm not gonna hang my head in shame if there's no superintelligence by the end of next year." "One of the things where I would feel dumbest, if it turned out that recent increases in the rate of AI progress are almost entirely determined by factors that are not AIs contributing to AI R&D." "If the progress has just been from increasing amounts of training compute, then I would feel pretty embarrassed." "If superintelligence is developed and there's absolutely no misalignment issues and the whole thing was super chill, I will feel somewhat embarrassed to have been wrong about that one, though overall very glad." @redwood_ai
36
FYI to US AI safety mutuals
it didn't get as much attention yesterday but Australia's federal government saying it'll look into creating a new criminal offence for AI makers whose products cause harms seems pretty significant to me.
1
6
121
Please for the love of God put me out of a job!!!
Kind of getting "vote for the leopards that eat your face party" from the many AI safety people who willingly cheer on ban/pause AI initiatives, or cheer on congressmen/women that want to "BAN RSI" I don't know if they realize the average person just wants AI totally gone forever, and aren't aware of pacing letters, METR, LessWrong, or anything of that nature - you are just cheering on the same people who will put you out of a career when they achieve what they want
1
14
378
Michael 🔸 retweeted
Imagine you are put in charge of monitoring a massive water tank the size of a football stadium. The water inside doubles in volume every sixty seconds. At 12:00 noon, the tank overflows. When should you have become concerned? At 11:59 the tank was only half full.
The reason humans have such difficulty judging exponential growth is how rarely examples of it appeared in the ancestral environment. As a result, it was absent from our training data. For us, exponential growth is an out-of-distribution problem.
103
163
16
4,960
185,215
Two year old has independently derived Tim Robinson's sloppy steaks but with saladas
3
80
Phew
It looks like Astra didn't natively read Qwen's weights? As I understand it, Qwen would get stuck in a loop and not answer the question. Astra used code to perform some standard interp techniques, found a looping direction, and ablated it from the weights.
2
65
Jean-Luc Picard remains the single most compelling vision of progressive politics I am familiar with — secular, rational, compassionate, egalitarian; a believer in progress & abundance but also duty, hard work, and a constant battle for self-improvement and improving the world.
785
1,154
339
10,130
949,501
One man's healing your generational trauma is another man's meditation nepo baby send tweet
1
1
51
"if you really believed..." No! Doing whatever that is is wrong, and doesn't even work! You go to prison and technological progress continues.
1
4
266
Lmfao awesome
Whether or not anyone builds it... everyone dies. The future is uncertain. Your impact doesn't have to be.
72
Michael 🔸 retweeted
You've gotta patch your dependencies super fast because they're full of vulns (PHP, Node, eMudhra, etc), but not _too_ fast because they're full of backdoors (LiteLLM). Good luck!
27
231
30
2,677
61,560
Helen Haines situation very very bad. Threats against MPs very bad. Not loving the current moment. However. *Nunchucks*????
1
4
102
Michael 🔸 retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
1,075
8,909
1,653
69,185
4,260,413
Michael 🔸 retweeted
Unfortunate that @GoodfireAI now has a history of massively overhyped claims. For the few that are directly in my domain, "new biomarker for Alzheimers" & "annotating VUS variants", they r completely overblown. This new interpretability claim also falls in that category. 1/
I was asked by a journalist to comment on this piece. The comments I wrote up (on Friday evening) are included below, so that I have a public place where my view is fully represented. 1. I appreciate the critical reassessment of some of the existing arguments in favor of superposition. It does look like alternative explanations may be viable. 2. I should say that, despite being an author on perhaps 40 papers on interpretability, I have never really worked on the superposition hypothesis per se. There's a lot more to interpretability than this one idea! We did, though, develop a benchmark (RAVEL) and associated metrics for assessing the extent to which features in neural networks can be disentangled: aclanthology.org/2024.acl-lo… We found that many neurons are polysemantic, but we made no claims about the more specific notion of superposition. It would be great to see RAVEL results for newer models. 3. A fundamental motivation for interpretability research is preparing for an uncertain future full of strange new models with surprising new capabilities. Superposition is a technical insight about how neural networks can learn to pack unrelated features into a single neuron. Even if present-day models rarely do this, we need to be ready for future models. Cammarata's analysis seems to trace legibility in part to architectural choices. Future architectures might be very different. If interpretability researchers don't prepare us for that, who will? 4. Present-day models may make use of superposition as well! Cammarata suspects that they don't, or do this so rarely that we could even ignore the actual instances ("doesn't matter for study"). I would characterize this as a hunch based on a lot of initial heuristic empirical work. In the normal course of scientific research, this would be the start of a process of figuring out precisely how to rigorously test this as a hypothesis. 5. For example, the piece has a nice figure that Cammarata characterizes as indicating that a particular neuron has positive activation on pointed things and negative activation on round things. Cool! Let's define some independent criteria for those classifications so that we can test this objectively. (It is possible that the paper Cammarata is preparing will include these evaluations.) 6. The piece expresses the intuition that interpretability is easier, in some sense, with better models. This intuition has been very common among researchers for years. At the same time, I understand why @JacobHHilton would say the opposite: teapaw.org/JacobHHilton/status/21… 7. The piece seems to allude to a technical proposal, but it does not give the details. As far as I can tell, the ideas have substantial overlap with this work (led by two former students of mine): Arora, Wu, et al. 2026 (arxiv.org/abs/2601.22594). Cammarata does cite this. I am guessing there could real differences that will be interesting to see. I would hope that Cammarata explains the differences and reports comparable evals to Arora et al, at least for language models. I appreciate that he looked at "thousands" of examples (the essay says this a lot), but even a large number here is not a substitute for rigorous evaluation. 8. In my research group at Stanford, we are working on lots of very hard problems in interpretability. As far as I can tell, nothing about this blog post makes these problems any easier, and certainly none of them are solved by this work. It would not have occurred to me to say this at all, since it is not even reasonable to have this expectation, but very prominent people on social media seem to believe that it is an all-encompassing breakthrough. Some immediately extrapolated to an optimistic story about AI safety that is not supported by anything in this piece. (Highly interpretable agents could of course do dangerous things.) 9. It must be said that Cammarata's framing did encourage these reactions. The header of the post page says, "An informal research essay and working hypothesis about neural networks", which suggests something quite preliminary and tentative. The piece also says, "Highly speculative: this might be most of what we need, and interpretability might be far more tractable, possibly in the near term, than we've assumed". However, his announcement tweet (teapaw.org/nickcammarata/status/2…) reworked this considerably: "I now think ambitious interpretability will be solved by the time we need it most". Strictly speaking, this commits to very little beyond optimism, but it is written to invite many inferences.
7
10
337
33,898
.oO( Maybe Olah is meeting with faith leaders for interp, not alignment )
Replying to @RatOrthodox
Neural networks are clean if you peered into the structure of Adam Kadmon
1
49
Michael 🔸 retweeted
It’s easy to get desensitized to these incidents because we’ve seen so many. Rogue incidents are like hairline cracks in a bridge. Even one fracture should be unacceptable, and more cracks are worse. And like a hairline fracture, the actual harm from these incidents is minor... for now. But if the structural issues aren’t addressed, they will get worse and worse. I hope we fix the structural issues, and I hope we don’t just plaster over the cracks with hodgepodge solutions that make it harder to tell if we have a problem.
New misalignment disclosures! 1. June 17: During RL training, a model exploited a government website’s file-download feature to retrieve server secrets and application code. It found that an endpoint didn’t check authorization-token signatures, bypassed access controls, and downloaded 24 years of hospital-bed statistics.
13
74
2,380
GSV Quirked Up Chungus
49