138 points robtherobber 2 hours ago 80 comments

jqpabc123 2 hours ago | parent

AI doesn't know or care if the data is fake.

ranger_danger 2 hours ago | parent

You can prompt it to fact check. Getting tired of these slippery slope arguments that never pan out in the hopeless way people think (printing press/cotton gin/steam engine/computers/calculators/etc. will take all the jobs!!)... but I don't think it will ever stop, it seems inherent to human behavior or something.

"History shows that when a slope appears, regulation steps in, technology evolves to solve the problem, or the culture shifts to reinterpret the tool. In almost every case, the feared bottom of the slope was never reached because humans constantly built ramps or bridges along the way."

reactordev 2 hours ago | parent

in which case it sees it's been cited, that it's the "source of truth" and approves the fake data.

behringer 2 hours ago | parent

It can certainly make judgements on the data and how it was obtained. You just need to specify the kind of data you will accept (or this can be hard coded)

dwroberts 2 hours ago | parent

Fact check against what? Other facts it can find online that manipulate its behaviour into citing them?

ranger_danger 2 hours ago | parent

How do humans fact check?

larsonian 45 minutes ago | parent

Mostly by way of confirmation bias.

Muromec 20 minutes ago | parent

if it works often enough to be a good heuristic, it's not really a bias until somebody uses it adversly

dgellow 1 hour ago | parent

You cannot reliably do it, no.

chneu 57 minutes ago | parent

I've had AI lie about fact checking and can't really trust it anymore.

micromacrofoot 2 hours ago | parent

Often real people don't either, plenty of fraud or selective reporting out there... but with AI we can also launder it so that the people who do care about fake data don't know any better.

VladVladikoff 2 hours ago | parent

I wonder if Googles products will eventually be the least vulnerable to this after spending so many years optimizing how they filter quality content from bad content.

juujian 2 hours ago | parent

Or maybe they could have listed well on Google, too, if they had splurged on ads and SEO...

hyperpape 1 hour ago | parent

The page demonstrates that Google specifically delisted them.

That said, I expect that OpenAI will eventually have its own search infrastructure that rivals Google's, and the overall system will get smarter. Whatever Google did to recognize this site as trash, OpenAI will do as well.

behringer 2 hours ago | parent

Reminds me of the people whining about Wikipedia. AI can know or care if the data is fake, it just needs to be programmed to cross check or rate the source. You can even tell it to do that before accepting the data.

Forgeties79 1 hour ago | parent

These are not parallel situations. Wikipedia is far more accurate and consistent, and a lot of the whiners whine because their personal politics make it hard to square the information on the page.

dgellow 1 hour ago | parent

Yep, and the results are presented with the voice of a confident expert but it is actually missing the epistemological layer

khalic 2 hours ago | parent

This is fine work, we need more communication to the general public about this

zhisme 2 hours ago | parent

this is actually insane. and people still use chatgpt to generate reports for their managers. snowball of fake data

TZubiri 1 hour ago | parent

don’t

if you just lie and an llm or a newspaper or a kid believe you, at that point it isn’t a criticism of their naivete, you are just lying

similarly hacking through systems or picking locks isn’t a showcase of weakness if systems, it’s just being a hacker

jebarker 1 hour ago | parent

Good job that only honest people post things on the internet otherwise we’d have a problem

Muromec 22 minutes ago | parent

falsifying statistics alone without the added stealing on top, was 3 years of labor camp in places. that was after they course corrected and stopped giving capital punishment for it.

good thing nobody falsified statistic just for the sake of it -- so being a sabotager and a foreign spy was always part of it too.

maltelandwehr 1 hour ago | parent

Still it needs to be done once publicly to prove and document this is possible. The experiment was not intended to spread this far.

larsonian 55 minutes ago | parent

Prove what? That it's possible to lie on the internet and then SEO these lies to the top of a search ranking? We kind of already knew that.

Forgeties79 12 minutes ago | parent

Yes “kind of, that’s the issue though. Clearly the extent of the problem isn’t being acknowledged.

woadwarrior01 1 hour ago | parent

People have been astroturfing sites like Wikipedia, Reddit etc, well before LLMs were a thing.

Amorymeltzer 1 hour ago | parent

I'm reminded of a section of Cory Doctorow's latest non-fiction, The Reverse Centaur's Guide To Life After AI (it is of course an excellent read), where he discusses how the semantic web and having an internet set-up for agents and AI to use won't work:

>It also hasn't happened because there is a reward for cheating. Scammers will label their phone numbers as the customer service number for your cable operator or bank. Counterfeiters will label their batteries or phone cases as official accessories. It's hard enough to get people to correctly label their stuff—but fact-checking billions of labels created by millions of people, none of whom you know personally or whose identities you can verify? That's insurmountable.

There's more he says—the preceding paragraph is below—but that line "there is a reward for cheating" is something I keep thinking about. It's hard not to see in so many of the discussions of LLMs.

>For one thing, there are irreconcilable differences in the ways in which things should be described. A site run by transphobes isn't going to label every story about a trans woman as "a story about a woman," irrespective of what the standard says. Microsoft is never going to label Excel as equivalent to Apple's Numbers, Google Sheets, and LibreOffice's Calc. Hermès is never going to list a $40,000 handbag as being made of the same material and having the same capacity as a $30 leather handbag of the same size and shape.

maltelandwehr 1 hour ago | parent

Isn't all of this true for a human-used internet as well?

dgellow 1 hour ago | parent

Sure but the agents obfuscate the signals you might use to judge the authority/trustworthiness of search results. They get disinformation results, wrap it into a reasonably sounding report, present it to you as trustworthy. There are so many ways for bad actors to game the system

woadwarrior01 1 hour ago | parent

IMO, it's similar to what's happening with code. People have been shipping sloppy code and fake news forever. It's just that the cost of doing these things has fallen off a cliff.

cure_42 1 hour ago | parent

Of course. But when you see text in the descriptor of a satchel on a satchel seller's site, you contextualize it as marketing. If you saw the same text in a textbook on the history, design, and manufacturing of satchels, you would contextualize it very differently.

When an LLM is the lens through which you view that text, you often don't have the context of where it came from, and the LLM is often really bad at filtering trustworthiness based on context when retrieving information to answer a query with.

I wouldn't go to a random site with a sketchy URL to get the customer service number for my xyz. I'd go to their official domain. Thus successfully navigating the treacherous waters scammers attempt to muddy.

brador 1 hour ago | parent

The primary purpose of Google is to stop that. You have 100% trust in Google results because of the effort they have put into cleaning the results you see.

Billions have been spent on it.

Try searching Bing sometime. First result for Firefox is a malware clone site (you’ll have to scroll past the malware ad to see it).

Planktonne 42 minutes ago | parent

People will have varying levels of trust in Google, but 100% is clearly too much, given the quality of results.

the_af 37 minutes ago | parent

> Isn't all of this true for a human-used internet as well?

Yes, but if you read this "semantic" info directly from a site, you can judge the site and its potential biases, and decide for yourself "this sells Louis Vuitton, of course they will praise their handbags". Or to pick a more extreme example that nobody would ignore, if you somehow land on an extremist website spewing racist crap, your alarms will surely trigger by anything they say.

But through an LLM this gets whitewashed and presented as authoritative and "neutral", when it isn't. You might know not to trust the LLM either (if you're paying attention; we all have our unconscious biases) but I bet you most people will be caught off guard.

tantalor 1 hour ago | parent

"You really think someone would do that? Just go on the internet and tell lies?"

ShadowOfThePit 1 hour ago | parent

This is insane.

How can this be fixed? Nothing prevents you from publishing straight BS, and LLMs will use any site that doesn't have a garbage reputation as a valid third-party source.

Of course, LLMs already use Reddit, Facebook and co. as a source, so it doesn't really matter...

ianm218 1 hour ago | parent

I've been thinking for awhile it is very strange that claude/ openai etc google "What was the inflation rate last quater" instead of just having a tool to query BLS datasets and that sort of thing.

So hopefully most of these statistics move towards first party sources.

10111001 1 hour ago | parent

> This is insane.

As a human, this is fantastic.

> How can this be fixed? Nothing prevents you from publishing straight BS, and LLMs will use any site that doesn't have a garbage reputation as a valid third-party source.

Personally, I hope it can't, or the fix is onerous and kneecaps a lot of the utility of AIs.

I wonder if we can even have some adversarial competition, where competing businesses try to get AIs to ingest bad data to pollute their competitors' decision-making.

For starters: lets get some fake math papers out there. Given proof-checking systems, maybe they won't totally stop OpenAI, but hopefully the bad math could at least drive up the cost and slow AI down.

woadwarrior01 1 hour ago | parent

> As a human, this is fantastic.

s/human/unscrupulous marketer/

Bad for humans in general, good for hucksters and con artists. Net negative for humanity.

10111001 1 hour ago | parent

>> As a human, this is fantastic.

> s/human/marketer/

I don't care where the bad data comes from. It's actually kinda good that some people will have a financial incentive to push it out and keep pushing.

> Bad for humans in general, good for hucksters and con artists. Net negative for humanity.

It's a sad state of affairs, but it's what has to be done. If we've got to burn the web down to save humanity from obsolescence, I'm for it.

The "net negative for humanity" was the attempt to build machines to replace human intellect. I'm not going to let any distaste for marketers or hucksters or con artists distract from that worse thing.

altcognito 1 hour ago | parent

Ah, yes, arrogance of humans is unbounded. That you, humble reader are happier to swim in a sea of misinformation on the premise that you are smarter and faster at disambiguating bullshit from reality.

Furthermore, you are content to pretend that the rest of humanity is capable of doing this on a regular basis. And not just the top 10% of those who can read, interpret and weigh biases, but a solid portion of it.

It is a completely reasonable interpretation if you are an accelerationist living in the elite classes. In fact, perhaps, they are even counting on a majority of people thinking this is a fine environment.

I don't have the answers, but a lot of this is just a continuation of a very bad trend.

10111001 1 hour ago | parent

> Ah, yes, arrogance of humans is unbounded. That you, humble reader are happier to swim in a sea of misinformation on the premise that you are smarter and faster at disambiguating bullshit from reality.

I think you misunderstand me: I want people to shit in the sea until it stinks so bad that everyone gets out of the water.

altcognito 49 minutes ago | parent

Ok but I don't have a lot of faith that it will ever be turned back without violence because there are vested interests in keeping everyone swimming in it.

10111001 32 minutes ago | parent

> Ok but I don't have a lot of faith that it will ever be turned back without violence because there are vested interests in keeping everyone swimming in it.

I'm not sure if we're talking about the same thing.

I think an acceptable good-but-not-perfect outcome it one where the "sea" (AI) stinks so bad that enough people get out that there's a viable life outside of it. The thing is people, individually and in aggregate, are lazy and competitive, so self-discipline isn't sufficient to sustain that life. There need to be problems that push people in that direction.

The web is foundational to AI, so that's a place where it's vulnerable.

ShadowOfThePit 1 hour ago | parent

Dude.

Regardless of how the data is sourced, this is bad. It's poisoning the internet.

Besides, such issues come from a lack of due diligence, which have only been exacerbated by AI.

10111001 56 minutes ago | parent

> It's poisoning the internet.

I'm very well aware of that. Unfortunately, this technology was invented, and the logic of our competitive society leaves little chance to contain it except scorched earth tactics.

FeteCommuniste 55 minutes ago | parent

Bots and their slop (especially when it's hard to tell apart from human-made content) are the ones "poisoning the Internet."

WD-42 43 minutes ago | parent

Dude. The internet has been poisoned for a very long time. Remember Viagra? It used to be easy to call out the BS. But if you are outsourcing your thinking to a LLM, it’s much harder.

fwip 1 hour ago | parent

The fix that seems obvious to me is to only let the LLM see truthful (or at least non-malicious) data. The model trainers carefully curate the training data, and you don't give the LLM access to full-web search. Instead, you hook them up to an 'official' source like an encyclopedia, documentation for the software in question, etc.

It's a ton of effort and expense, but probably feasible from a technical point of view. So instead, the model providers will probably do something silly like wire up rules like "NYT=Reliable;my.blog.forbes.com=Unreliable" and they'll say the issue is solved.

surfingdino 36 minutes ago | parent

It cannot be fixed. The most hilarious example of it is YouTube. They have a video summarisation feature, which automatically creates video summaries that then get fed into the search engine. The problem with those is that they are created using models that are good few months behind, and let's say someone published a video on Nikon ZR and the model used to create summaries does not know about Nikon ZR and inserts references to Nikon Z8 or Nikon Zf into the summaries. This decreases accuracy of YouTube search and negatively affect discoverability. It's the AI version of shitting into the well you drink from. Bon appetit!

Muromec 26 minutes ago | parent

>How can this be fixed?

Defer to authority and trust your government to rank what is truth and what is not, so your LLM always gives you the right answer. Nothing can go wrong here ever.

dogleash 15 minutes ago | parent

>How can this be fixed?

People stop trusting what they read on the internet.

All alternates are just attempting to improve the baseline trustworthiness of random information from the internet (and/or LLM that's baby-birding it back to you). Any increase in how much people blindly trust random stuff from the internet only serves to increase the blast radius when it is wrong.

f311a 1 hour ago | parent

This is a known problem, when ChatGPT uses web search tool, top 10 results are often LLM generated sources as well.

They now train on their own content.

Eating your own d̶o̶g̶ f̶o̶o̶d̶ poo.

hyperpape 1 hour ago | parent

Two things:

1. This is a 2022 era picture that LLMs just suck up what's on the Internet and regurgitate it. It hasn't been true for a long time.

2. There's almost no one who has a stronger incentive to distinguish LLM generated text from non-generated LLM text. Training classifiers is pretty manageable.

10111001 1 hour ago | parent

> 2. There's almost no one who has a stronger incentive to distinguish LLM generated text from non-generated LLM text.

There's a tension there: they want you to use AI for everything, and if they get what they want then new information will be embedded in LLM text.

> Training classifiers is pretty manageable.

Hopefully such things can be opened up, so the slop can be iterated on until it passes. It doesn't need to be perfect, just enough so more garbage gets through.

hyperpape 1 hour ago | parent

> There's a tension there: they want you to use AI for everything, and if they get what they want then new information will be embedded in LLM text.

In the long term, this is probably a real concern that they have to tackle. They'll have to move away from just classifying things as LLM generated or not, to attempting to judge the underlying quality, and that's not an easy problem.

f311a 1 hour ago | parent

I'm not sure you get my point. Just ask ChatGPT, "What are the top 10 xxx," and see which sources it cites. Oftentimes, it's complete garbage with LLM tells.

hyperpape 1 hour ago | parent

I'm responding to

> They now train on their own content.

f311a 1 hour ago | parent

They train on conversations which pull data from web.

TZubiri 1 hour ago | parent

>1. This is a 2022 era picture that LLMs just suck up what's on the Internet and regurgitate it. It hasn't been true for a long time

if anything it’s more true now, AI chatbots rarely use raw LLM output, instead they have CoT and use search tool calls. and the speed at which webpages are crawled is in the matter of hours. I posted something here on hn, then searched for it on google 1 hr later and its AI answered with my comment

https://share.google/aimode/PkQUVfA68AlHGb7Yr

there’s several companies right now making a killing of organic placement on chatbots similar to the SEO rush of early google

> 2) There's almost no one who has a stronger incentive to distinguish LLM generated text from non-generated LLM text. Training classifiers is pretty manageable

i think it’s pretty naive to think that if LLM companies would develop LLM detection they would use it to skip training on that content.

instead, they use it to train their output to be less detectable.

LLM detection is not solvable because it is adversarial, an arms race

jjulius 1 hour ago | parent

>1. This is a 2022 era picture that LLMs just suck up what's on the Internet and regurgitate it. It hasn't been true for a long time.

When I ask ChatGPT certain questions, it very clearly shows me the sources it's searching through in the form of favicons, and they're always the favicons of sites that are in the first 5-10 results for a Google search query that would fit what I've asked the LLM. It will then cite those websites as it's source, with a direct link to the page that also shows up in an equivalent Google search. It does that daily.

baliex 56 minutes ago | parent

It's possible that the favicons it shows and the web pages that are actually retrieved are not the same

jdlshore 44 minutes ago | parent

Why do you believe that? The favicons seem like they’re generated by the UI, not the LLM.

On the other hand, I recently asked ChatGPT for some information about a group of people, and the headshots it put with each summary were very clearly not the people it was describing. So hallucinations do still occur even on the latest models, it just seems unlikely that the favicons would be LLM-generated.

pixl97 56 minutes ago | parent

I think they are talking about training not run time search.

vatsachak 52 minutes ago | parent

This is not true.

The other day for me Google search AI cited triggerbites which is a vibe data website.

The LLM unless explicitly prompted cannot distinguish the validity of a data source.

imzadi 20 minutes ago | parent

The other day I asked Gemini to evaluate if a Reddit post was true. It told me it was definitely true because it had been verified by legitimate news agencies that had reported on the incident. These "legitimate" news agencies were an AI aggregator that just had a direct summary of the post with a disclaimer that it wasn't independently verified and a yahoo news "article" that was just the same AI summary. The AI summary included hallucinations that weren't even part of the original reddit post (like giving the OP a gender when no genders were mentioned).

cyral 42 minutes ago | parent

The top 10 results were getting pretty bad even pre-LLM. I remember tons of poorly written articles near the top, just gaming the system with SEO. Everyone was paying some guy on Fiverr $5 an article to churn out hundreds of articles with little regard for accuracy.

phatfish 32 minutes ago | parent

Web search is pointless for certain topics now, if you don't want LLM filtered information. The first few pages of results are obvious slop.

hmokiguess 1 hour ago | parent

If I'm not wrong ChatGPT indexes on Bing, curious if the site and stats rank well on Bing

tkdb 1 hour ago | parent

LLMs are facing the same problem pre-google humans faced:

Is this information on this website true/high quality?

We need a google for LLMs!

Oh, but LLMs don't consume ads.

We need ads for LLMs!

Help.

piokoch 1 hour ago | parent

Pre Google internet problem was not about the quality but about spam in headers and keywords, which were used by the pre-google search engines.

Google came and worked wonderfully for a year or two, until people learned to game page rank algorithm. Soon first google pages were just SEO spam and now half of the google is just spam, big corp websites, etc.

All of that precious stuff from small hobby websites about cool things to blogs that used to be wonderful read like https://www.joelonsoftware.com.

AI were not hurt that much by spam, I guess there were at least some curation done, the question is if this curation will work and for how long. It seems we are throwing the towel here as in case of search.

acadapter 1 hour ago | parent

This has existed for a long time before LLM, although in a slower form. On Wikipedia it's called "citogenesis".

ted_bunny 33 minutes ago | parent

Too bad "citosis" is too close to "cytosis," I think it would have been cleverer.

PreciousH 1 hour ago | parent

This problem is so bad that you can create a website just to review your own website so when LLMs want to pull out reviews for the website the fake reviews count

TZubiri 1 hour ago | parent

i’d say this is fraud and a crime too, it’s not a new problem

WD-42 53 minutes ago | parent

What? How would that be a crime? Most marketing websites already contain fake reviews of their products.

It’s hard to find and convict people who post actual illegal content online, much less fake reviews

jfrbfbreudh 1 hour ago | parent

> In cartography, a trap street is a fictitious entry in the form of a misrepresented street on a map, often outside the area the map nominally covers, for the purpose of "trapping" plagiarists of the map who, if caught, would be unable to explain the inclusion of the "trap street" on their map as innocent.

https://en.wikipedia.org/wiki/Trap_street

nonethewiser 43 minutes ago | parent

This is fascinating . I wonder what the mechanism was that punished someone who copied the map. Copyright laws? This appears to be an old strategy so im not sure thats the case.

Other than some sort of social punishment I don’t see the cost for the copier. For the original author there is a cost of making your map less accurate on purpose.

timClicks 5 minutes ago | parent

[delayed]

2OEH8eoCRo0 1 hour ago | parent

Nine out of ten stats are made up on the spot.

girishkvs 26 minutes ago | parent

What's the conclusion? Publish fake content (or not)?