I meant that there’s a large fraction of the capacity that is up for the taking by a sophisticated actor. E.g., see the PipeFill paper.
In that paper, that actor is the original operator optimizing their workloads. But a different, undeclared workload could be injected to take advantage of the unused hardware: from cryptomining, to training or inference.
I hesitate to suggest scenarios, but I’d imagine that a rogue AI’s first need would be to find hardware to run on. One would think that available GPUs/TPUs/etc aren’t easy to find; but turns out that there’s ~50% of them waiting to be used, and already collocated with the AI!, if only it manages to deal with the complexities.
I meant that there’s a large fraction of the capacity that is up for the taking by a sophisticated actor. E.g., see the PipeFill paper.
In that paper, that actor is the original operator optimizing their workloads. But a different, undeclared workload could be injected to take advantage of the unused hardware: from cryptomining, to training or inference.
I hesitate to suggest scenarios, but I’d imagine that a rogue AI’s first need would be to find hardware to run on. One would think that available GPUs/TPUs/etc aren’t easy to find; but turns out that there’s ~50% of them waiting to be used, and already collocated with the AI!, if only it manages to deal with the complexities.
This is a very good point. I am studying the paper, and will incorporate it into our upcoming work. Thanks for bringing it up.