Replying to @⁨NoLemurs@lemmy.world⁩

I think this is suggesting that all AI models have restrictions. Yes, some people will ignore those restrictions, but at least there will be some recourse as there will be actual rules put in place. If a company or an individual does something reckless with AI that affects another company or individual negatively the offender may be able to currently say “it wasn’t me it was the AI/I didn’t know”. They may not have technically broken any rules since the current law is not able to account for AI agents acting somewhat autonomously. If there are rules in place then at least we can point to that and say “it doesn’t matter that you did not explicitly instruct it to do X, you should have had the following things in place to prevent that”.

The fact that some people may be able to run local models and may never be caught does not mean that we shouldn’t have the infrastructure in place to stop the harm where and when we can.

Replying to @⁨MountingSuspicion@reddthat.com⁩

Technology is famously hard for the law to keep up with, but I don’t think that’s what’s going on here. We have laws for when a person uses a technical tool to obtain unauthorized access, exfiltrate data, or do other malicious things. These don’t necessarily require any specific intent. If you’ve set up an AI tool and pointed it in the direction of hacking without proper airgapping, you’ve probably violated the CFAA if you’re in the US when it’s successful. Other countries generally have similar laws. Prosecutors don’t need to try someone if it’s really ambiguous or unclear what they actually did. Is this really unreasonable under the legal system?

To the extent there’s a gap, it’s the system around the law. Lawyers and judges aren’t technical experts, and may not recognize “it wasn’t me, it was the ai” as the same argument as “it wasn’t me who shot him, it was my gun”, in that it’s usually foolish and unserious, but there can be a convoluted scenario in which it’s a good argument.

en