Do you pay for Google search?! If not, it is not SaaS. As the saying goes, you are the product.

Just focusing on new music has previously been shown to cause distraction, according to references in the article. It is unknown if that effect is strong enough to account for theses stats.

The summary said they did not have a mechanism for causation. The summary said "linked". Several causes were theorized but would need study.

The data analysis appears to be correct. What makes it propaganda?

These are many of the same Anthropic researchers who have been working on safe deploy for years. They have not given up hope. And they continue to publish their findings. These are not new voices of questionable provenance.

My bad. I honestly missed the undo part.

The prompt was to bump someone off the waiting list. That is the user using the accelerator to violate the speed limit, to use the analogy.

The prompt to do something about a fact that is pretty clearly not something you should be able to do (bumping others on the wait list) is a problematic prompt. And the user did not follow it with, "Oops, undo that" once the user saw the result. Sketchy prompt followed by zero attempt to rectify means criminal trespass to me.

Sure, security could be better. But. Even if I leave a door unlocked, if I put up signs directing people to keep out, it is a crime in most jurisdictions I know of to walk in.

But do you need those data items for every single client all at once? Why not (weak example to make point) one login for customers A through M and another for N through Z? If someone breaks security for a system, they should not ever be staring at a database of *everything*. Maybe divide customers by region? Or class of freight? It is insane to me that any user's login carries the ability to see all the data downloaded in this attack.

What person needs all the addresses *at once*? Why is there not separation by class of freight or by region? Why isn't there some requirement to query multiple databases that would set off alarms that someone is touching so many parts?

In this case, the AI was prompted to do something unlawful: to bump someone else on the waiting list.

It probably has happened. But we know all devs are so sexy once in person, likely no celebrities have ever complained. :-)

Equivalent of USA's RICO statutes. Similar for other collective action laws, such as coordinated price fixing.

At the scale of a gym website, this is a cyber attack. Low stakes, small weapons, but same general principle: software used to find a (gaping) hole in other software to create result target software did not intend to allow; damage done to another party (the person bumped from waiting list) is small but nonzero.