←News detail

AYi AI NotesUpdated Oct 30 15:01

Altman Reviews PHP Crisis Week: AI Scans Out Massive Vulnerabilities, Advocates Rebuilding the Underlying Architecture

English text is being prepared.

AI summary

In an interview with Stripe founder John Collison, Altman reviewed "PHP Crisis Week," saying that large models' ability to uncover vulnerabilities continues to grow exponentially. Previously no one dared use it to scan the entire internet's public code; after actually doing so, the number of critical vulnerabilities exposed exceeded everyone's expectations. He believes fixing software alone is no longer enough, and that the lasting solution is to rebuild the entire stack from router firmware and operating system kernels to upper-layer applications, and that AI tools capable of writing code in parallel have already led a group of startups to begin. Ten days after the crisis, he still dares not declare victory, and says humanity's existing threat-model assumptions are failing.

Why read this

AI score 56

In the interview, Altman reviewed the scale of vulnerabilities exposed by AI's full-code scans and offered the judgment that the underlying architecture should be rebuilt rather than continuously patched.

Topics

Tags

Quoted post

AYi

@AYi_AInotes

Stripe founder John Collison's just-completed 52-minute exclusive interview with OpenAI CEO Sam Altman—holy crap, the aftereffects hit hard after watching it, the information density is way too high, it's absolutely explosive, meow, Compared with those previous PR interviews full of empty platitudes, it feels like this is the first time Altman has completely torn off his guard and laid out, without reservation, OpenAI's most terrifying internal technical progress, the most real mathematical battle results, and his immense melancholy over the end of the old world, The most explosive part of the whole session's information density was that math-crunching weekend known as "Hold My Beer." Altman admitted that when the internal team took the new model to tough out all of humanity's hardest frontier scientific problems, the model conquered them one after another, For a single proof related to the Millennium Prize Problem, the Navier-Stokes equations, they poured in $10 million-level compute, equivalent to instantly running through hundreds of millions of dollars' worth of human scientific research. But his reaction right after was not revelry, but rather, after two consecutive nights of excitement-induced insomnia, a huge sadness welling up in his heart: He watched with his own eyes as the temple of humanity's pure intellectual labor was being permanently sealed away by compute in an irreversible way. Just like seeing the last batch of farmers plowing with horses on Irish soil back then, an old chapter of carbon-based brains taking on truth single-handedly has completely ended. Many people still treat Agents as a few chatbots tossing messages at each other, but Altman is redefining the bottom line of organization and safety: He even dislikes the term "Agent Swarms" and insists on calling them "Agent Teams." Because frontier users can already conduct "ten thousand parallel assaults" through chains of thought, Facing this kind of capability expanding at the speed of light, he admits that inside OpenAI there is widespread extreme pessimism about "sandboxes being able to contain superintelligence," and the only thing they can rely on is internal monitoring and alignment. He even uttered a chillingly cold safety prophecy: "I would rather have a trillion AIs of slightly superhuman intelligence checking and balancing each other as they enter society than one ultimate behemoth with an IQ of a trillion ruling alone." What stings all entrepreneurs and ordinary workers even more is his public slap in the face to the whole industry's narrative: Altman said bluntly that the AI blueprint Silicon Valley paints for the public today is a "terrible sales pitch"— The giants boast about curing cancer and making prices cheaper on one hand, while on the other depicting a utopia where ordinary people lose their jobs, hand over control, and have to scrape by on welfare and live in a surveillance society. His core reason for insisting on iterative deployment is that a tiny group of elites within a few square miles of San Francisco must never decide the future for billions of people around the world. From smashing PHP's underlying vulnerabilities and triggering a full-stack rebuild, to $10 million in compute overturning frontier mathematics; From cloud memory's ruthless mockery of local compute, to Agents completely erasing "fake work" like web forms. Listening to the whole conversation, there is no arrogant preaching, only an extremely real sense of weightlessness: The door has already been thrown open with a roar, and the physical and logical laws of reality are being rewritten line by line of code, Those human experiences and self-esteem we once thought indestructible are, before this era's most violent surge of compute, as fragile as a fleeting sunset on the horizon.

View original

Stripe 创始人 John Collison 对 OpenAI CEO Sam Altman 刚做完的这期 52 分钟专访,卧槽看完后劲好大,信息密度台大了,简直炸裂喵个咪, 相比之前那种套话连篇的公关访谈,感觉这是奥特曼第一次彻底撕掉防备,把 OpenAI 内部最恐怖的技术进展、最真实的数学战果,以及他对旧世界落幕的巨大惆怅,毫无保留地全部和盘托出了, 全场信息密度最炸裂的,是那个被称为“Hold My Beer(看我的)”的数学攻坚周末。 奥特曼坦言,当内部团队拿到新模型去硬啃全人类最难的前沿科学难题时,模型一个接一个地将其攻克, 单单一个千禧年大奖难题 Navier-Stokes 方程相关的证明,他们就砸进去了 1000 万美元级别的算力,相当于瞬间跑完了人类几亿美元的科研量。 但紧接着他的反应不是狂欢,而是连着两晚兴奋到失眠后,涌上心头的那份巨大悲伤: 他亲眼看着人类纯智力劳动的殿堂,正在被算力以一种不可逆的方式永久封存。 就像当年在爱尔兰土地上看到最后一批用马耕作的农夫一样,一个属于碳基大脑单挑真理的旧篇章,彻底终结了。 很多人还在把 Agent 当成几只互相丢消息的聊天机器人,奥特曼却在重新定义组织与安全的底牌: 他甚至讨厌“Agent Swarms(蜂群)”这种词,坚持称之为“Agent Teams(团队)”。 因为前沿用户已经可以通过思维链进行“一万次并行攻坚”, 面对这种以光速膨胀的能力,他坦白 OpenAI 内部对“沙盒能关住超级智能”普遍极其悲观,唯一能依赖的只有内部监控与对齐。 他甚至说出了一句冷峻至极的安全预言: “我宁愿有一万亿个略微超人智力的 AI 彼此制衡进入社会,也绝不要一个智商一万亿的终极巨兽独裁。” 更刺痛所有创业者和普通打工人的,是他对全行业叙事的公开打脸: 奥特曼直言,硅谷今天向公众描绘的 AI 蓝图是“糟糕透顶的推销(Terrible sales pitch)”—— 巨头们一边吹嘘能攻克癌症、物价更便宜,一边却描绘一个普通人失去工作、交出控制权、不得不靠低保和监控社会苟活的乌托邦。 他坚持迭代部署的核心理由,就是绝不能让旧金山几平方英里内的一小撮精英,替全世界几十亿人决定未来。 从砸碎 PHP 底层漏洞导致全栈重构,到 1000 万美元算力推翻前沿数学; 从云端内存对本地算力的无情嘲讽,到 Agent 彻底抹杀网页表单这种“假工作”。 整场对话听下来,没有狂妄的说教,只有一股极度真实的失重感: 大门已经轰然推开,现实的物理与逻辑法则正在被一行行代码重写, 那些我们曾经以为坚不可摧的人类经验与自尊,在这个时代最猛烈的算力狂飙面前,脆弱得就像地平线上一抹转瞬即逝的落日。

View original post

Body

讲真,以前没人敢拿 AI 去把整个互联网的代码全扫一遍,但听完奥特曼在访谈开头复盘的“PHP 危机周”,我觉得所有程序员都会感到窒息吧:

大模型扫出来的严重漏洞远超人类想象,现代互联网引以为傲的安全神话,原来一直是在地基裸奔。

Stripe 创始人约翰·科利森和奥特曼的访谈真实简单粗暴,问题犀利,没有闲聊客套,开场直接把全世界拖回了那场惊魂未定的“PHP 危机周”,

奥特曼用极度冷静的语气说了一句让所有安全专家后背发凉的实话: 大模型挖掘漏洞的能力一直在指数级暴涨,但以前从来没有人真正敢拿它,去把整个互联网上跑着的所有公开代码全盘扫一遍。

当这件事真正发生之后,浮出水面的致命漏洞数量,把所有人都吓傻了。

现代数字文明的绝大多数基础设施,本质上就是一座座建立在草台班子手艺上的危楼。

很多几十年前写下的底层脚本、跑在全球数以亿计服务器里的古老协议,原本大家心照不宣地依靠“代码太复杂、黑客肉眼找不到”的隐蔽性苟活着;

但当具备高级推理能力的大模型变成全自动的雷达,所有的掩耳盗铃在一瞬间全被撕得粉碎。

面对这泼天的漏洞雨,约翰·科利森问出了那个核心问题:难道我们只能永远被动地打补丁吗?

奥特曼的回答,彻底否定了传统网络安全缝缝补补的修补匠思维。

他说:光修软件早就没用了,唯一持久的解法,是彻底重构整套底层架构。

在两年前,如果有人敢说要从头重写路由器固件、操作系统内核、以及上层的全栈应用,所有投资人都会把他当成疯子; 而今天,正是因为有了能成千上万次并行写代码的 AI 工具,一批全新的初创公司已经在动手推倒多年前搭建的整套栈了。

复盘这场危机十天后的战况,奥特曼说他依然不敢宣布胜利。

虽然各家公司用 AI 快速写补丁的速度,让第一天的情况比预想中最坏的灾难好了很多;

但安全圈最深层的恐惧,从来不是软件层面的溢出和注入。

而是过去人类建立的所有“威胁模型假设”,正在物理意义上全面失效: 当 AI 的理解力穿透到底层晶体管,它甚至能从微观硬件里,揪出那些需要全新物理学法则才能解释的幽灵漏洞。 这才是软件工程史上最残酷的一场洗牌: 攻防天平被彻底打翻了。

过去黑客找漏洞靠几年如一日的灵光一闪,防守方疲于奔命; 未来如果不能用 AI 把几十年来人类留下的肮脏代码彻底推翻重写一遍,任何连在网线上的设备,都将沦为裸奔在荒原上的标靶。

也许缝补旧世界的时代真的结束了, 那些曾经被奉为神圣基石的传统架构, 正在被它自己培育出来的造物,亲手拆成废墟。

Source

AYi AI Notes