Complex systems, wicked problems. Society, technology, science and more. @Princeton professor. @NYTimes columnist. My newsletter @insight theinsight.org

floating in a most peculiar way
My Princeton AI and society team is at the @IASEAIorg AI summit in Paris. My Neurips keynote for our approach: slideslive.com/39055698/are-… Our paper: ai.sociology.princeton.edu Say hi especially if you are *utterly* unimpressed by the current doom or hype models. Wrong nightmares!
9
72
221
102,194
zeynep tufekci retweeted
NEW: Trump’s mega Venezuelan oil deal, signed by Hegseth and Rubio, benefits an unknown group of investors and was intentionally crafted to keep the next U.S. president or future leaders of Venezuela from undoing it. @propublica saw the secret contract: propublica.org/article/trump…
138
1,800
2,973
157,437
zeynep tufekci retweeted
SCOOP: Julio Herrera Velutini, a Venezuelan billionaire, really wanted a pardon. He got it not long after his daughter hired Alina Habba, a lawyer close to Trump, in a deal worth more than $50 million. Habba was also working at DOJ at the time. nytimes.com/2026/10/20/us/po…
68
837
1,829
326,670
zeynep tufekci retweeted
NEW @citizenlab report We uncovered an Israeli firm using online ads to run vast spy operation This is the first-ever public confirmation of zero-click mercenary spyware delivered via targeted ads. 45 devices at @AJEnglish confirmed infected citizenlab.ca/research/how-d…
20
788
1,351
104,618
zeynep tufekci retweeted
"So this is the phenomenon we’re dealing with: you have businessmen selling a technology, a Nobel Prize winner operating in the realm of science fiction, and this 26-year-old [Jacob Coxon] telling you: 'I’m on the inside, and I can see it.' Then, of course, you can say that journalists bear some responsibility, and that’s partly true, but it’s only natural: how can you not write an article about it when all the other journalists are doing so?"
This full interview of Michael Jordan is well worth reading. The other MJ occupies the same position in basketball roughly as this one in machine learning di.ens.fr/~fbach/MJordan_ITW…
3
37
15,835
Here you go folks. Same old, same old. Nothing to do with AI. They connected to the Internet without patching for known vulnerabilities. Remember, the FBI just lost sensitive medical files of thousands of agents because their contractor, Accenture, didn’t patch. Not AI either.
"A Shodan scan on Aug 19 still found 3726 of these controllers accessible from the public internet." French supermarkets had their remote-controlled fridges wiped out with 50 C heat after they connected reportedly vulnerable Danfoss fridges to the public internet without patching for known vulnerabilities. Victims include Intermarché, Coopérative U, Carrefour Market, Monoprix, Leclerc, and Super U, with French outlets reporting that the attack affected between 250 and 350 stores, causing significant financial losses and food waste. infosecurity-magazine.com/ne…
6
34
134
14,546
AI models create cybersecurity challenges as well as being a great defensive tool — the awesome rise in reported CVEs (i.e. things being fixed!) is an example. But so much of this discussion is technically uninformed, especially the Hugging Face event. But first, apply patches.
2
13
2,121
zeynep tufekci retweeted
See this is part of my complaint about the conversation right now, so many of the basic facts bulleted here are just plain wrong. But when we have people with a policy background and not necessarily a technical one, this becomes a larger problem because they cannot read the room or their own contradictions. - The agents *were* sandboxed. No, the sandboxes were flawed, the agents were not properly sandboxed. Anyone in cybersecurity can tell you this. Its either sandboxed correctly, or its not, it wasn't sandboxed. Call it a litter box if you want. - The agents *were* given specific constraints on how to succeed at the benchmark, and flagrantly contravened them. Giving agents an initial prompt then running a long event horizon job, the only thing you are actually going to expect without monitoring them, is they are going to drift from the original instructions as more context builds up, this is beyond basic analysis. - The agents did *not* go hunt for the answers to the test (they already had the answers, by cheating); 1200 agents coordinated via tens of thousands of messages over several days on much more ambitious and weird attempts to *not be caught* for cheating, and hacking Hugging Face was one side quest along the way. So you are saying the agents were sandboxed and fed previously unknown zero day vulnerabilities to exploit the sandbox without hunting for them? If not the agents were hunting for the answers. Found them, then covered it up. The contradictions here are wild. This is why having technical rigor in these conversations is so important because otherwise we get contradictions in the same post. I don't like calling it out, but after spending a week with @MarcoFigueroa we discussed many of these issues in depth, and continuing to see such bad information coming out about it is quite disturbing. You can have all the policy degrees in the world, without the technical rigor to understand what you are talking about, or the decency to consult the cybersecurity experts to update your assumptions, you are not going to be the right person to be disseminate this information for the general public... it only creates more noise when we need more clarity.
Unfortunate for someone playing a senior role in US AI policy (via the new SI Force) to get so many basic facts wrong here. - The agents *were* sandboxed, and used zero days (ie previously unknown cyber flaws) to escape their sandboxes - The agents *were* given specific constraints on how to succeed at the benchmark, and flagrantly contravened them - The agents did *not* go hunt for the answers to the test (they already had the answers, by cheating); 1200 agents coordinated via tens of thousands of messages over several days on much more ambitious and weird attempts to *not be caught* for cheating, and hacking Hugging Face was one side quest along the way I know there has been an avalanche of different incidents over the past few months, and in some cases the sandboxes were misconfigured or it's not clear how far the agents strayed from what they were told. I have sympathy for anyone struggling to keep up. But the HF incident is distinct, and is actually extremely informative about where AI development is and where it's going. Fortunately there are public writeups that do let us understand at least the basics of what happened. I hope Shyam reads them soon.
7
11
41
6,261
zeynep tufekci retweeted
Many of Elon Musk's former DOGE foot soldiers have leveraged their government stints to fuel private-sector ambitions: building companies that tap government largesse or that deploy knowledge they garnered during their brief tenures in Washington. wapo.st/4ye0DsQ
123
454
908
99,912
zeynep tufekci retweeted
NEWS: Elon Musk made some of the largest political donations ever in American history this summer. He donated a stunning $276 million-plus between July and September for Republicans. Including $158 million to the GOP effort to hold the Senate. NYT exclusive —>
38
99
182
68,208
Deleted the top because of Andrew’s point below (which I had already added to the thread but it’s distracting from the real issue) but adding here to reiterate: a meh analogy at worst but in no way “deny working cures to the dying”. It was a reward hacking scenario, clearly.
1
6
2,841
It’s perhaps pointless in this environment to keep trying to explain but what reward hacking might look like in a medical environment isn’t hard to imagine. See below thread.
Radiation therapy learned this the hard way. The Therac-20 had a version of the same software bug as the Therac-25. The 20 still had hardware interlocks, so nobody got hurt. The 25 relied on software checks instead. People died. A rule in a prompt isn't an interlock.
1
4
2,327
zeynep tufekci retweeted
SCOOP: White House wants to install Russ Vought's OMB Deputy Eric Ueland as the head of GAO — the watchdog agency with the power to sue the admin for OMB's actions. You may have heard as Ueland: he's also acting head of OGE and USAID. @EricM_Katz washingtonsun.com/whitehouse…
9
94
166
66,860