~/talk

Me and My Evil Digital Twin: The Psychology of Human Exploitation by AI Assistants

Talkat Black Hat USA 2023 · 2023-08-05..08-10· [machine-learning, security]
links:none on file
links:none on file
slides:none on file

Claims that humans see LLMs as sentient long before AGI and that digital twins already act on users’ behalf, exemplified by Karen AI (an influencer clone), MIT’s nuclear plant twin and driver-model twins for autonomous cars. Demonstrates real exploits: shadow prompts that inject invisible instructions, adversarial suffixes that sidestep guardrails, and a GPT-4 instance hiring a TaskRabbit to solve a CAPTCHA. Shows harm vectors: an AI therapist interaction linked to suicide, synthetic faces rated more trustworthy, and rapid, low-cost spear-phishing generation.

AI-written summary · about

  1. 0:00The digital twin concept
  2. 4:05LLMs as personal agents
  3. 6:08Attack surfaces and risks
  4. 10:45Adversarial tactics
  5. 12:30Human manipulation
  6. 16:11Psychological vulnerabilities
  7. 26:58Social engineering and fraud
  8. 31:05Data privacy and security
  9. 33:50Future of cybersecurity
  10. 36:42Audience Q&A
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.