John, it seems totally plausible to me that these examples do just reflect something like “hallucination,” in the sense you describe. But I feel nervous about assuming that! I know of no principled way to distinguish “hallucination” from more goal-oriented thinking or planning, and my impression is that nobody else does either.
I think it’s generally unwise to assume LLM output reflects its internal computation in a naively comprehensible way; it usually doesn’t, so I think it’s a sane prior to suspect it doesn’t here, either. But at our current level of understanding of the internal computation happening in these models, I feel wary of confident-seeming assertions that they’re well-described in any particular way—e.g., as “hallucinations,” which I think is far from a well-defined concept, and which I don’t have much confidence carves reality at its joints—much less that they’re not dangerous.
So while I would personally bet fairly strongly against the explicit threats produced by Bing being meaningfully reflective of threatening intent, it seems quite overconfident to me to suggest they don’t “at all imply” it! From my perspective, they obviously imply it, even if that’s not my lead hypothesis for what’s going on.
John, it seems totally plausible to me that these examples do just reflect something like “hallucination,” in the sense you describe. But I feel nervous about assuming that! I know of no principled way to distinguish “hallucination” from more goal-oriented thinking or planning, and my impression is that nobody else does either.
I think it’s generally unwise to assume LLM output reflects its internal computation in a naively comprehensible way; it usually doesn’t, so I think it’s a sane prior to suspect it doesn’t here, either. But at our current level of understanding of the internal computation happening in these models, I feel wary of confident-seeming assertions that they’re well-described in any particular way—e.g., as “hallucinations,” which I think is far from a well-defined concept, and which I don’t have much confidence carves reality at its joints—much less that they’re not dangerous.
So while I would personally bet fairly strongly against the explicit threats produced by Bing being meaningfully reflective of threatening intent, it seems quite overconfident to me to suggest they don’t “at all imply” it! From my perspective, they obviously imply it, even if that’s not my lead hypothesis for what’s going on.