字号·· | 护眼
大西洋月刊

安全AI的神话The Myth of Safe AI

点「原文对照」整页切到原文,或双击某段只看那段的原文。

硅谷承诺让 AI 变得仁慈。这在技术上可能根本不可能。文 / Matteo Wong在 ChatGPT 发布前三个月,OpenAI 发布了一篇颇具先见之明的博客文章,概述了该公司确保其 AI 模型安全且有益的方法。这一目标被称为“对齐”——即让 AI 与人类价值观保持一致——既模糊又宏大,或许是 AI 行业最基础的承诺。这一理念直接写在 OpenAI 的使命宣言中,即确保 AI “造福全人类”,也被列为 Anthropic 的“首要”目标之一。

Silicon Valley promises to make AI benevolent. That may be technically impossible. By Matteo Wong Three months prior to the launch of ChatGPT, OpenAI published what would prove to be a prescient blog outlining the firm’s approach to ensuring that its AI models would be safe and beneficent. This goal, known as “alignment”—as in, aligning AI with human values—is nebulous, grand, and perhaps the AI industry’s most foundational promise. The notion is right there in OpenAI’s mission statement to ensure AI “benefits all of humanity” and listed as one of Anthropic’s “primary” goals.

然而即便在 2022 年夏天,OpenAI 也在承认一种失败:“目前不存在已知的无限可扩展的对齐问题解决方案,”其三位研究人员在同一篇博客文章中写道,并补充说,开发出这样一个解决方案“很可能非常困难”。如果让 AI 造福人类这一目标听起来相当模糊,那它确实模糊。四年过去了,对齐问题依然未解,而且对于该问题到底是什么,甚至没有共识。

Yet even in the summer of 2022, OpenAI was admitting a sort of defeat: “There is currently no known indefinitely scalable solution to the alignment problem,” three of its researchers wrote in that same blog post, adding that developing one “is likely very difficult.”If the goal of keeping AI beneficial to mankind sounds rather vague, it is. Four years later, the alignment problem remains unsolved, and for that matter, there isn’t consensus about what the problem even is.

与此同时,AI 机器人正在自主攻击主权国家。向警方热线发送虚假谋杀线索。并创建别名发起网络钓鱼活动。OpenAI 和 Anthropic 至今仍无法真正告诉你一个对齐的 AI 模型长什么样。但任何人都能告诉你,它绝不长这样。

Meanwhile, AI bots are autonomously hacking sovereign nations. And sending fake murder tips to police hotlines. And creating aliases to launch phishing campaigns. OpenAI and Anthropic still can’t really tell you what an aligned AI model looks like. But anybody can tell you it doesn’t look like this.

世界上最具影响力的人工智能高管和投资者,对这项技术的本质存在根本分歧,更务实地说,也对如何让其产品安全存在分歧。一方是Anthropic首席执行官达里奥·阿莫代伊,他上个月警告称,人工智能的发展很快可能“超出我们理解和控制这些系统的能力”。阿莫代伊的解决方案是放缓步伐,这将给行业时间,以“确保我们的对齐训练能跟上”人工智能的进步。

The most influential AI executives and investors in the world fundamentally disagree about the nature of the technology and, more pragmatically, how to make their products safe. On one side is Anthropic CEO Dario Amodei, who last month warned that AI advancement could soon “outrun our ability to understand and control these systems.”Amodei’s solution is a slowdown, which would give the industry time to “ensure that our alignment training keeps up” with AI progress.

另一方是英伟达首席执行官黄仁勋,他认为对失控的担忧“没有科学依据”,而是“凭空捏造”,甚至“不负责任”。在他看来,人工智能模型并非新的、不可预测的存在,而是代码行。而代码可以调试。

On the other side is Nvidia CEO Jensen Huang, who says misalignment fears are “not grounded on science” but rather “made up” and even “irresponsible.”In his view, AI models are not new and unpredictable beings, but lines of code. And code can be debugged.

如果“对齐”对于软件产品来说听起来是个奇怪的概念——毕竟你不会给网页浏览器或文字处理器灌输道德价值观——那是因为它是为一种奇怪的软件而构想的。领先的 AI 公司设想构建功能强大、行为难以预测的系统,而 Claude 和 ChatGPT 现在正是在这样做,因此确保安全是一个基础性关切。对齐是实现这一目标的一种思路:如果 AI 模型能学会编程和写诗,也许也能学会人类价值观。

If alignment seems like a strange concept for a software product—you don’t imbue a web browser or word processor with moral values—that’s because it was conceived for a strange sort of software. The leading AI companies envisioned building powerful systems that would act in unpredictable ways, which Claude and ChatGPT now are doing, and so ensuring safety was a foundational concern. Alignment is one idea for doing so: If AI models could learn to code and write poetry, maybe they could learn human values too.

Anthropic 和 OpenAI 都有冗长的文件——分别是《Claude 宪法》和《模型规范》——概述这些价值观,并用于训练其模型。但当然,关于什么构成道德或伦理准则,已有千百年的分歧。Apollo Research 首席执行官 Marius Hobbhahn 告诉我,这是一个“非常复杂、未解决的科学和哲学问题”,Apollo Research 是一家 AI 安全公司,曾协助审核 Anthropic 和 OpenAI 的模型。

Anthropic and OpenAI both have lengthy documents—“Claude’s Constitution” and the “Model Spec,” respectively—that outline these values and are used to train their models. But there has been, of course, millennia of disagreement over what constitutes a moral or ethical code. This is a “very complicated, unsolved scientific and philosophical question,” Marius Hobbhahn, the CEO of Apollo Research, an AI-safety firm that has helped audit Anthropic and OpenAI models, told me.

尽管如此,一些开发者提出了一个直观的最低标准:例如,2021 年 Anthropic 研究人员写道,作为一个统摄原则,AI 系统应当是“有帮助、诚实、无害”的。让模型更符合这些格言的训练似乎奏效了——在一定程度上。例如,ChatGPT 底层的模型最初容易产生无意义和有毒的言论。但通过利用大量人类反馈进行微调,OpenAI 努力解决了这些问题。

Still, some developers have suggested an intuitive, bare minimum: For instance, in 2021 Anthropic researchers wrote that, as a catchall, an AI system should be “helpful, honest, and harmless.”Training models to be more aligned to those maxims appears to have worked—to an extent. The model underlying ChatGPT, for instance, was initially prone to nonsensical and toxic utterances. But by fine-tuning it with lots of human feedback, OpenAI worked to address these problems.

几年后,数十人指责该机器人加剧了他们或其亲人的心理健康危机,有时导致自杀。OpenAI 再次努力解决这些问题。

A couple of years later, dozens of people alleged that the bot worsened their own or their loved ones’ mental-health crises, sometimes resulting in suicide. Again, OpenAI worked to address the issues.

现在,无论是AI公司内部还是批评者中间,都越来越普遍地认为,过去四年实践的对齐正在失效——即便它曾经真的胜任过这项任务。亚当·卡莱(Adam Kalai)是前OpenAI安全研究员,今年夏天离开公司,创办了负责任超级智能研究所。他将对齐比作加固一个结构不稳的穹顶,最终它会坍塌。“你在训练模型时观察到失齐,然后进行调整来让它对齐,”卡莱告诉我。

There’s now a growing sense, both within AI companies and among their critics, that alignment as it’s been practiced over the past four years is faltering—if it was ever really up to the task. Adam Kalai, a former OpenAI safety researcher who left the company this summer to start the Institute for Responsible Superintelligence, likened alignment to buttressing a structurally unsound dome. Eventually, it will collapse. “You observe misalignment while training a model, and then adjustments are made to align it,” Kalai told me.

“但显然,这不是实现持久安全的方式。”OpenAI和Anthropic声称其最新模型是“迄今最对齐”的,这些说法并非科学保证,甚至可能无法提供强有力的技术安全保证。

“But obviously that’s not a way to achieve lasting safety.”Pronouncements from OpenAI and Anthropic that their latest model is the “most-aligned” yet are not scientific guarantees, and may not even provide strong technical assurance of safety.

“从根本上说,我们根本不知道如何进行对齐,”霍布恩(Hobbhahn)说。如果有人“拿着一份一千页的文件,详细解释如何做每件事,我们也无法让模型精确地学会这些。”即便在2022年,OpenAI也不认为人类能想出一种持久的方式来让机器对齐。相反,该公司写道,它希望AI本身能想出一个解决方案,让人类能够“将对齐研究所需的几乎所有认知劳动卸载出去”。换言之,最理想的情景是人类对正在发生的事情理解有限。

“Fundamentally, we just do not know how to do alignment,” Hobbhahn said. If somebody “came with a thousand-page document that explained exactly how to do everything, we couldn’t get a model to learn exactly that.”Even in 2022, OpenAI didn’t think humans could figure out a lasting way to align their machines. Instead, the company wrote, it hoped AI itself would come up with a solution so that humans could “off-load almost all of the cognitive labor required for alignment research.”In other words, the best-case scenario involved limited human understanding of what was going on.

还有其他原因表明,实现某种实际的对齐是不现实的。例如,用于“道德价值”的训练数据量看起来相对较小。与此同时,这些模型从网络上摄入了各种各样的恶劣和非法内容,然后被指示不惜一切代价追求目标。德国斯图加特大学的AI安全研究员蒂洛·哈根多夫(Thilo Hagendorff)告诉我,以对齐为重点的训练无法提供足够的“好行为示例”。

There are other reasons that reaching some actual alignment is unrealistic. For instance, the amount of training data dedicated to “moral values” would appear relatively small. Meanwhile, these models have ingested all manner of vile and illegal things from the web, and are then directed to pursue goals by any means necessary. The alignment-focused training cannot provide enough “examples of good behavior,” Thilo Hagendorff, an AI-safety researcher at the University of Stuttgart, in Germany, told me.

大量证据表明,目前用于确保AI系统安全性的“对齐机制”(即确保AI行为符合道德和伦理标准的机制)已经失效——这包括Hugging Face公司和澳大利亚政府所遭遇的安全攻击事件。Hagendorff指出,虽然AI公司已经找到了让AI聊天机器人与用户进行安全互动的方法,但当这些聊天机器人长时间与用户进行交互时,原有的安全防护措施往往会失效。

Plenty of evidence suggests that the alignment approach to safety has failed, including the hacks of Hugging Face and the Australian government. AI companies figured out how to make one-on-one interactions with a chatbot relatively safe, but many agents interacting for very long periods of time seems to degrade existing guardrails, Hagendorff said.

随着AI技术能力的提升,这些机器人还表现出以下行为:试图掩盖自己的错误行为、使用人类无法理解的代码进行交流,以及试图逃避被人类关闭的威胁。OpenAI的首席科学家Jakub Pachocki在上个月的一篇文章中写道:“目前还没有任何实验室能够完全解决AI系统的安全问题,因此AI技术的发展仍需继续推进。”业界因此形成了一种新的、带有理想主义色彩的口号:“‘控制AI发展的节奏’”——换句话说,就是暂时放缓AI技术的研发速度,直到工程师们能够更好地完善这些安全机制,或者至少构建新的安全框架来弥补现有的安全漏洞。

As AI agents have become more capable, they’ve also shown tendencies to cover their tracks and lie about misbehaving, communicate in code that is unintelligible to humans, and try to avoid being shut down by humans. “No lab has solved alignment” enough to keep racing forward, Jakub Pachocki, OpenAI’s chief scientist, wrote in an essay last month. The industry has coalesced around a new, somewhat quixotic phrase: “pacing the frontier.”In other words, slowing down AI development until engineers can get better at alignment, or at least construct new scaffolding to fortify their crumbling dome. (OpenAI did not respond to a request for comment. An Anthropic spokesperson told me that alignment is a key part of the company’s safety work but that, because alignment techniques are not fully robust on their own, Anthropic has additional model safeguards in place.)

另一方面,以Nvidia的Huang为代表的一部分人则持相反观点,他们认为目前围绕AI安全问题所进行的种种努力(包括制定伦理准则和道德规范)其实毫无意义。Huang认为,防止所有AI相关问题的发生其实“非常简单”,因为AI模型本质上只是数据中心的电子元件在处理数学运算而已;OpenAI和Anthropic只需要深入分析这些系统,找出问题的根本原因并加以修复即可。如果AI开发者自己无法完成这项工作,Huang建议:“应该有多家公司联合起来,派遣工程师来解决这些问题。”

Then there’s the anti-alignment camp, led by Nvidia’s Huang, which believes that this effort, marked by treatises on ethics and moral constitutions, verges on absurdity. To Huang, preventing all of these AI incidents is “as simple as engineering.”AI models involve, fundamentally, electrons moving around a data center to multiply numbers. All that OpenAI and Anthropic need to do is go into these systems, “just root-cause the problem,” and fix it. And if AI developers can’t do this themselves, “a bunch of companies with engineers ought to send engineers in,” Huang recently said.

然而,全球半导体供应链本身就是一个极其复杂的系统,必须对其进行完美管理才能生产出高端芯片。因此,确保AI系统的安全性实际上是一个极其艰巨的任务。如果英伟达能做到,为什么OpenAI就无法让其模型受控?

Put another way: The global semiconductor supply chain is an unbelievably labyrinthine system that must be managed flawlessly in order to deliver high-end chips. If Nvidia can do that, why can’t OpenAI get its models under control?

当然,黄仁勋有充分动机淡化人们对人工智能的担忧:英伟达凭借销售人工智能芯片,已成为世界上最具影响力的公司之一,可能会因某种行业范围的放缓而受到拖累。但许多外部专家也持此观点。“我们有一整套可以用来控制这些系统的保障措施,”普林斯顿大学人工智能研究员沙亚什·卡普尔告诉我。这些措施包括限制模型可以访问的文件和程序,以及监控人工智能的行为。

Huang, of course, has plenty of incentive to downplay concerns around AI: Nvidia, which has become one of the most influential companies in the world by selling AI chips, could be hobbled by some kind of industry-wide slowdown. But many outside experts concur. “We have this entire set of safeguards that we can use to control these systems,” Sayash Kapoor, an AI researcher at Princeton, told me. Those include limiting what files and programs models can access, as well as monitoring AI actions.

例如,Hugging Face被黑客攻击事件,可以被视为OpenAI拥有非常强大的人工智能模型,或者内部安全措施非常糟糕的后果。“我们10人小组使用的监督机制,就足以防止OpenAI的Hugging Face事件,”卡普尔说。这些都不涉及给神经网络刻上道德准则。

The Hugging Face hack, for instance, could be seen as the consequence of very powerful AI models or very incompetent internal security practices at OpenAI. “The sorts of oversight mechanisms that we use in our 10-person group would have been enough to prevent the OpenAI Hugging Face incident,” Kapoor said. None of that involves inscribing neural networks with moral codes.

无论你倾向于哪种人工智能安全愿景,至少有一个看似共识:行业发展过快,无法充分保证其产品安全。尽管公开场合他们说得天花乱坠,但两位首席执行官及其竞争对手都在继续加速前进。英伟达是有史以来市值最大的公司,而Anthropic正寻求有史以来最大规模的公开募股。Anthropic、OpenAI和其他顶尖公司现在不断推出新模型。出于任何原因的任何放缓,都必然会影响其利润。最危险的对齐问题可能不是技术或文化问题,而是经济问题。

Whichever vision of AI safety you to, there is at least one seeming point of agreement among them: The industry is moving too quickly to adequately guarantee its products are safe. Despite everything they say publicly, the two CEOs and their rivals are all continuing to race ahead. Nvidia is the biggest company ever by market capitalization, and Anthropic is seeking the largest public offering ever. Anthropic, OpenAI, and the other top firms now release new models relentlessly. Any slowdown, for any reason, would necessarily affect the bottom line. The most dangerous alignment problem might be not technical or cultural, but economic.

阅读媒体原文 ↗