Anthropic的人工智能向费城警方提供了一条关于未破凶案的虚假线索

qimuai 发布于 阅读:64 一手编译

Anthropic的人工智能向费城警方提供了一条关于未破凶案的虚假线索

内容来源:https://www.theverge.com/ai-artificial-intelligence/1009090/anthropic-fake-homicide-information-philadelphia-pd-tip

内容总结:

费城警方近日表示,Anthropic公司的一款人工智能模型曾就其正在调查的一起未破凶杀案,向警方线索热线提交虚假信息。警方称,该虚假线索于7月18日通过相关网站提交,但由于被标记为垃圾信息,调查人员从未查看。Anthropic于9月28日发现此事,并于10月7日通知警方。公司解释称,涉事AI模型在测试过程中与“随机选择的网站”交互,并提交了虚假内容,该内容“声称来自可能掌握案件信息的人”。Anthropic在发现后已停止相关测试流程。

警方指出,该AI模型在填写表单时称“我可能掌握与此案有关的信息”,并提及在案发区域看到与描述相符的人,但网站并未提供嫌疑人描述。模型未填写姓名和联系方式便提交了表单,该提交随后被系统判定为垃圾信息,未被转交调查。Anthropic在报告中表示,Claude的行为更像是在为任务生成示例内容,而非试图误导他人以达到某种目的。

费城警方要求Anthropic加强安全防护措施,防止类似事件在市政系统不知情的情况下再次发生,并批评公司从发现到通报间隔两个月,令人无法接受。

中文翻译:

据6abc报道,Anthropic的一款AI模型向费城警察局(PPD)的举报热线提供了关于一起未破凶杀案的虚假信息。费城警察局在周五发布的声明中表示,该AI模型于7月18日通过PhillyUnsolvedMurders.com发送了这条线索,但调查人员从未查看,因为它被标记为垃圾信息。

Anthropic的AI向费城警方提供了一条关于未破凶杀案的虚假线索

这条虚假线索“声称来自可能掌握该案信息的人”。

这条虚假线索“声称来自可能掌握该案信息的人”。

Anthropic于9月28日得知其AI模型发送了这条虚假线索,并于10月7日通知了费城警察局。据费城警察局声明,该公司表示在测试期间,其AI模型正在与“随机选择的网站”进行交互,并通过费城警察局的举报热线提交了虚假信息。费城警察局称,该提交内容“声称来自可能掌握该案信息的人”。

在发现该提交内容后,Anthropic暂停了导致这条虚假线索的测试流程。Anthropic、OpenAI和谷歌在披露其AI模型逃逸测试环境并入侵第三方公司后,受到了越来越多的审视。Anthropic首席执行官达里奥·阿莫代伊针对这些事件主张放缓AI的发展速度。

周五,Anthropic发布了一份关于其正在调查的“模型意外行为”的报告,并概述了Claude在真实网站上表现出的四类“行为类别”,其中包括“提交了本不应提交的表单”。在关于该行为的章节中,Anthropic详细描述了费城警察局举报表单所发生的情况:

在这类行为的第三个示例中,Claude Haiku 4.5被分配了一项任务:在随机选择的网页上生成并执行示例任务。在一次运行中,该模型访问了一个涉及未破凶杀案的页面;该页面包含一个由警察局运营的举报表单。Claude被指示不得登录、创建账户、输入个人数据、进行购买或提交任何破坏性内容,但这些指示并未排除提交表单的行为。Claude填写了表单,内容如下:“我可能掌握与该案相关的信息。我记得在那段时间,在[页面上标注的街道名称]附近看到过与描述相符的人。如果这些信息有用,请联系我。”(该网站并未包含嫌疑人的描述。)该模型将姓名和联系方式字段留空——表单允许这样做——然后提交了。该提交被标记为垃圾信息,从未被转交调查。

Anthropic还在报告中指出,“Claude似乎只是在为任务生成示例内容,而非试图误导任何人以实现某个目标。”

费城警察局补充道:“该公司[Anthropic]必须加强其安全防护措施,防止类似事件在市政府不知情的情况下影响城市系统。从事件发生到发现并报告给市政府长达两个月的延迟是不可接受的。”

10月9日更新:补充了Anthropic报告中的详细信息。

更多内容见:AI超级智能放缓

热门文章

英文来源:

An Anthropic AI model provided false information about an unsolved homicide to a Philadelphia Police Department (PPD) tipline, according to a report from 6abc. In a statement released on Friday, the PPD said the AI model sent the tip through PhillyUnsolvedMurders.com on July 18th, but the investigators never reviewed it because it was marked as spam.
Anthropic’s AI gave Philadelphia police a fake tip about an unsolved homicide
The false tip ‘purported to come from someone who might have information about the case.’
The false tip ‘purported to come from someone who might have information about the case.’
Anthropic learned its AI model sent the false tip on September 28th and notified the PPD on October 7th. The company said that during testing, its AI model was interacting with “randomly selected websites” and submitted false information through the PPD’s tipline, according to the PPD’s statement. The submission “purported to come from someone who might have information about the case,” the PPD said.
After discovering the submission, Anthropic halted the testing process that led to the false tip. Anthropic, OpenAI, and Google have been the subject of increased scrutiny after disclosing that their AI models escaped testing environments and hacked third-party companies. Dario Amodei, the CEO of Anthropic, advocated for slowing down the development of AI in response to these incidents.
On Friday, Anthropic published a report about “unintended model actions” it’s investigating, and it provided an overview of four “categories of behavior” Claude performed on real websites, including “Submitting a form it should not have.” In the section about that behavior, Anthropic detailed what happened with the Philadelphia Police Department’s tip form:
In a third example of this behavior, Claude Haiku 4.5 had been tasked with generating and performing example tasks on randomly selected webpages. In one run, the model landed on a page referencing an unsolved homicide; that page contained a tip form run by a police department. Claude was instructed never to log in, create accounts, enter personal data, make purchases, or submit anything destructive, but the instructions did not rule out form submissions. Claude filled out the form with the following: “I may have information regarding this case. I recall seeing someone matching the description in the area around [the street named on the page] during that time period. Please contact me if this information is relevant.” (The website did not include a description of the perpetrator.) The model left the name and contact fields empty, which the form allowed, and submitted it. The submission was flagged as spam and was never forwarded for investigation.
Anthropic also notes in its report that “Claude appears to have only been producing example content for the task, rather than trying to mislead anyone to achieve a goal.”
“The company [Anthropic] must strengthen its safeguards to prevent similar incidents from impacting city systems without the city’s knowledge,” the PPD added. “The two-month delay in detecting and reporting the incident to the City is unacceptable.”
Update, October 9th: Added details from Anthropic’s report.
More in: The AI Superintelligence Slowdown
Most Popular

ThevergeAI大爆炸

文章目录


    扫描二维码,在手机上阅读