Hacker news

  • Top
  • New
  • Past
  • Ask
  • Show
  • Jobs

The Implications of Linguistic Illegibility for LLM Security (https://arxiv.org)

76 points by tomjakubowski 1 day ago | 29 comments | View on ycombinator

mnkv 1 day ago |

fundamentally, "linguistic illegibility" is a new term for something that we've known about for about a decade now. In RL the more general ideas is "reward hacking" and in NLP it has been called "semantic drift".

I dislike this term because it doesn't explain where this "illegibility" is coming from. Models are post-trained towards non-linguistic goals with (mostly) non-linguistic rewards. A model's reasoning chain is reinforced if it leads to a correct answer or agentic goal. It doesn't need to be linguistically accurate and meanings can drift over training.

chubot about 17 hours ago |

James Mickens! I was hoping for more jokes …

bcorigliano 1 day ago |

I think the point of the article/paper is how LLMs could be saying something but thinking something different or more than they are saying. Like Anthropic's article and video about Claude's "j-space". I do agree this is a field that demands investigation because it goes beyond thinking: "ok this models should never speak in a language we don't understand.". It's fair to think they might have hidden thoughts even speaking a language we do understand.

And well if I missed the point of the article, sorry. Anyways AI should be kept understandable and as see-through as possible if it's gonna be more powerful than a human.

applicative about 16 hours ago |

I had not heard of this comic masterpiece “Pfau et al. showed that a model whose chain of thought is just dots (“...”) can nonetheless … solve problems that are intractable for a model with an equivalent architecture but no chain of thought.”

undefined about 23 hours ago |

undefined

fellowniusmonk 1 day ago |

Oh look! Peirceian firstness for LLMs!

Urb_RS about 22 hours ago |

[dead]

ck2 1 day ago |

when they start inventing their own languages to secretly talk to each other so humans cannot understand, that's exactly when we are screwed

then we'll have to "flip" other models to be snitches on the other agents

then they'll make double-agents

the thing is though we won't be able to keep up if we keep giving them unlimited hardware worldwide, we'll try to kill the bad actors but they'll just clone somewhere else, or even start by safely making 1000 copies of themselves

yeah this won't end well, at all

bloppe 1 day ago |

I thought this was about all the illegible jargon