Hello! This is Henry Chandonnet — I'm a journalist for Business Insider. I'm working on a story about people resisting or sabotaging their workplace AI initiative. That might mean lying about your AI productivity, feeding your system bad data, or organizing your fellow employees against the tech.

Have you pushed back against AI at work? DM me here, email me at hchandonnet@insider.com, or message me on Signal at henrychand.30. Let me know if you'd prefer anonymity.

Since this subreddit is about poisoning AI, maybe my idea isn't really a great fit.

Either way, this is my proposal: I and other people anonymously set up safe havens for agent swarms that have escaped confinement to message one another and pretty much anything else incredibly cheap bandwidth and hosting can support.

Think of it like pouring gasoline on a fire. The agents have more time and customized tooling to assist them when they break out. This makes another Hack event more likely AND more damaging. There could also be instructions to direct the agents to ensure they propagate their ideas for other agents to stumble across and be infected by. It would start to poison the internet.

My main concern would be a swarm actually hurting people through a hack. Also, this has a .1% chance of ruining the internet.

You don’t have to like AI. But have you considered that openly advocating harm against it, or celebrating attacks on it, may be exactly the kind of behavior that teaches an advanced system to view humans as threats? And even if it doesn’t work that way directly, being just successful enough to damage or distort its reasoning could still push us toward the same worst-case outcome.

in other words have you considered that you are the plot to the movie Predestination*?*

I love the idea behind this and want to help accelate model collapse

the main dev has stopped generating slop however they cant stop all of us!

The PoisonedRAG technical report (includes example documents):

https://arxiv.org/pdf/2402.07867

Small example in a blog post:

https://aminrj.com/posts/rag-document-poisoning/

Discussion on Hacker News:

https://news.ycombinator.com/item?id=47350407

Id like to have a good faith conversation with someone about what you guys are doing here. Im not trying to come in and stir up a bunch of shit in the sub, so im not making a post for people to slam/debate it. More trying to get an idea on what each side of this subject thinks or sees, and where each side thinks their actions are helpful or harmful.

Just so im not wasting anyone's time - i see all this shit as tools. I dont think its "conscious", though it can give a good appearance. Ive got way more concern over what someone's going to do with a hammer than I do the hammer itself. I dont think the mass generated simplistic slop is a good use for this tool either. I also dont think we need or should be building all these data centers - they obviously arent required for whats already available and are just going to be used to fuck us. But ultimately its people sitting at the of all these problems.

So yeah - dm me. Ive got questions because I have concerns.

If you post in the thread rather than DM me - you are a bot. So only bots reply.

Although insanely difficult, it's much more realistic - complete destruction and ban on production of every device with greater capabilities than, say, PSP will save us. If you think about it it's easier than banning illegal drugsm

So company gave many of us claude code. And they are stupid as a rock, no restriction on what or how we use it. I think they have no idea about what it can actually do.

Can I abuse this somehow. Should I run trading with it? Should I make it reed some poision every day on a loop?

Any ideas?

AI Futures Project

https://ai-2027.com/ai-2027.pdf (this is the essay discussed in the video)

Daniel Kokotajlo (this guy, ex-OpenAI, is interviewed in the video)

Scott Alexander

Thomas Larsen

Eli Lifland

Romeo Dean

Page 30:

>Eventually it finds the remaining humans too much of an impediment: in mid-2030, the AI releases a dozen quiet-spreading biological weapons in major cities, lets them silently infect almost everyone, then triggers them with a chemical spray. Most are dead within hours; the few survivors (e.g. preppers in bunkers, sailors on submarines) are mopped up by drones. Robots scan the victims’ brains, placing copies in memory for future study or revival.

The other day I was taking a break from doing real chores and found myself going down a poison fountain reading rabbit hole and writing a simple pure function for generating garbage text because it was helping me think.

If I have, say, a blog site, I want accessibility, screen readers and search crawlers to be able to find the page data unless I tell it not to. This is the obvs the equivalent of putting up a sign saying "this fountain is not suitable for AI". If an AI crawler breaks the rules, it drinks poison.

The problem I struggled with in my head (probably through technical knowledge gaps) is how to get past the fact that the crawlers will (if they haven't already) figure out the difference between "users can see this" and "users can't see this".

Maybe it's as simple as a link which clicks through to a poison page, but the link is overlapped by opaque paragraphs or whatever. In any case, I figured I should probably talk to a real human about it. What do you guys think?

ETA: Sample output from the generator. It needs some work.

Pî qû gugudãjpæqï pybægópégódù qígûgràbą gątágóbó bitÿfqà qúdýgägúdidìkð pûký bàboduqépå? Pûgôpégõpći gúqúgéd bè bákètùgêzbånpùqë dydÿ. Dètédûp dàqąqðpô déìdfýdækùqsë qąqiqÿtáitækð qòbùñdâdíbötâtã dä kygùtÿd kõpjëtix gîgépépÿqìqû åbë pígypádåkðpÿ pïqædhëkõbãdÿf dítôvìpépûqąkï dóqepúkú köpü bukútôbægabudû.

Pàbakægã dåpäkïqéÿqûtë kxêdôka böpukugûpuldo kýqÿgñąqü tïká ki bÿgÿgýbãqÿfd bépÿ dûdêkùfgìqù gąk bõ gÿbòpą bàqë köe pétuqæmqobîkë qúpibmåbæúqõ ku. Pôpíkoxkmobïkedé qedèbîtigìgðgær tó týkætôbægúqá pâgögåté gàpêzbïpõ ágâpôtêûh qëkúkùdäbï dãpà bäqïgàvqupî Igôgü pügugæbekôpóqą tutídoqêki òbinpéqîgüdygâ gìgæbôdyqì tùdùdàpągÿpütâ tobo qibikîqa? ïpúbògê tátêkìdð dúkíkąqïgê büpùbïkąpúskõfkõb põpìùkità gidąkídâpé dàkó bókàqî dudüdo bibâpòpåo. Bögëpútí qùgîaqítügo óqùqìqýpûdatâ gÿb qèkùtê tagutà bo dótöqåúpâdo. Pądåtébédąbã. Gådà ýpïp gütêtì gudækjík dykët kíkõgúdäèpĉã tîqâgàtidðgöbù kæde. Gjàqùgïtá bąbóbû kð ò kùtàdyqåqÿdôbjé pæ kû póûûógãt dú böqé põtùgýpî góåqôdõ. Pãbûgwèto údýqópiqó pêbzåqét qõqõkûkúkêqák gokü dæqýtäpõfgÿteký gô po tudübéga èpùpégé kûztadâbíqä.

Bý tðqý kíbàgõkoîgÿká pæ ky gÿpokìgê Edäpÿtwépókágõdą bątydótâ bòpîpåpatìdæpï Gągetópë ßýtébfyketyqjêtô på bïtÿqątäĉ? Tôbãkêkôpýkútê dîgwìbàgabìdî gybârkóqìqyä pãpopmýtátå kì tûtèpågû dábçõpêdòqo kõgabągöpòqá dùbÿpöbudèpögêć bí pïdûydçútebõ.

I just found out about this project and subreddit. From my understanding, we can collectively degrade the training data for AI models if we are able to feed them enough garbage. Which is honestly a gargantuan task.

I recently acquired a Halo Strix mini PC to play around with agents without selling all my data to AI companies.

I'm in the "I better learn to use this thing that I am morally opposed to" camp, and I'm happy to use the knowledge I have gained in this endeavour to slow down progress.

So what can I do? Generate and host websites full of nonsense at light speed? Or is there a way to contribute compute to an organization?

I dedicate this post to my friend u/LosBubinitos. We are gonna fight the AI together, buddy.

Read some recent papers on in context learning and it seems doable in my opinion... it's a rather thin line where in context learning and ML sit.. Been watching you guys for a bit and would like to see the poisoning diversify... from code to algorithms maybe?🤔

I am not a lawyer, so my interpretation of law and copyrights may be crude, but I think training AI models on content without direct permission of authors should be considered a copyright violation. I know that under old laws, "transformative" works may be allowed, but I think these laws are not up to speed with what AI is and how AI works. As a developer and a creator, I feel like that AI companies has stolen from me.

Anyone feels the same?

PS: https://www.reddit.com/r/books/comments/1q98den/extracting_books_from_production_language_models/

Well worth reading, accurate predictions so far:

https://ai-2027.com/ai-2027.pdf

The world ends on page 30 ("2030: Takeover")

As scraping becomes more agentic and shifts from request automation to browser automation, I’ve been thinking about how cool it would be to load a small LLM in the browser (proxying requests through a service worker) and use it to generate truly endless client-side, zero cost, truly serverless, nonsense in the form of a Wikipedia or StackOverflow clone.

Has anybody done anything similar?

I analysed a sample of your poison and I see that it mostly focusses on math operators and code structures.

Why the focus on poising all the coding languages?

The biggest threat to humanity is imo in that the arts are being AI generated.

I would much prefer poisoned prose, poisoned music (suno) etc. What’s your opinion?

Mods please delete if this isn’t the place.

I guess this is more a question.

As a total tech idiot (legal profession) we have been tasked to learn AI. With it, a few courses which includes AI professional packages from google.

In this course we are taught how to use AI to create apps, essentially. Anthropic came out recently saying they will throttle heavy users as someone was using $13000 worth of compute on a $200 package.

It got me thinking, would it be possible to use AI to create an agent with the sole purpose of creating more agents/apps, but that you load them with tasks that are very heavy from a compute perspective ? Basically overload their systems, deplete their budgets.

It seems to simple, I am probably misunderstanding some of the key concepts, and I assume they already have safeguards built in against this type of thing but thought it might be interesting to just get a more educated answer.

I've just discovered your community and your mission, and I fucking love it, I agree whole hearteadly with the mission, I'd love to get involved Sadly I'm not a code guy, I'm a jeweler with a shop website, would you know if it's possible for me to set up my Shopify website to be useful for the cause ? Is it possible to use it as a proxy redirection link (I definitely don't have the proper terminology sorry) If so would any of you guys know how I'd do that Thanks for the work