← Brookings Institution

Can we slow down AI without losing to China?

我们能否在不输给中国的情况下放慢人工智能的速度?
2026-09-21  ·  Brookings Institution  ·  原文

John L.

约翰·L。

Thornton China Center Strobe Talbott Center for Security, Strategy, and Technology

桑顿中国中心 Strobe Talbott 安全、战略和技术中心

As AI models grow more advanced, warnings of catastrophic risks are escalating.

随着人工智能模型变得更加先进,灾难性风险的警告也在不断升级。

But are existential fears overshadowing immediate threats?

但存在的恐惧是否掩盖了眼前的威胁?

Brookings experts Elham Tabassi and Kyle Chan join Thomas Wright to evaluate the reality of runaway AI, the debate over government regulation, and the geopolitical stakes of the U.S.-China technology race.

布鲁金斯学会专家艾尔哈姆·塔巴西 (Elham Tabassi) 和凯尔·陈 (Kyle Chan) 与托马斯·赖特 (Thomas Wright) 一起评估人工智能失控的现实、有关政府监管的争论以及中美科技竞赛的地缘政治利害关系。

WRIGHT

How do we get from the systems that we have today to something genuinely catastrophic?

我们如何从我们今天拥有的系统中走向真正灾难性的结果?

CHAN

The concerns about existential AI risk are premised on the idea that we will hit this ever-accelerating feedback loop in the very near future, something called recursive self-improvement, where AI systems improve themselves and they do so faster and faster to the point where humans no longer have control over this process.

对人工智能存在风险的担忧是基于这样一种想法,即我们将在不久的将来遇到这种不断加速的反馈循环,即所谓的递归自我改进,人工智能系统会自我改进,而且速度越来越快,以至于人类不再能够控制这个过程。

WRIGHT

You’re listening to the Brookings Current, part of the Brookings Podcast Network.

您正在收听《布鲁金斯时流》,它是布鲁金斯播客网络的一部分。

I’m your host, Tom Wright, senior fellow in the Strobe Talbott Center for Security Strategy and Technology.

我是主持人 Tom Wright,Strobe Talbott 安全战略与技术中心的高级研究员。

Something unusual is happening in the world of artificial intelligence.

人工智能世界正在发生一些不寻常的事情。

Over the last couple of weeks, some of the people building the world’s most advanced models, Dario Amodei, Sam Altman, Elon Musk, and Demis Hassabis, have all warned that the race to develop ever more capable models may be moving too fast and that the industry needs to slow down.

在过去的几周里,一些构建世界上最先进模型的人,达里奥·阿莫迪(Dario Amodei)、山姆·奥尔特曼(Sam Altman)、埃隆·马斯克(Elon Musk)和德米斯·哈萨比斯(Demis Hassabis)都警告说,开发能力更强的模型的竞赛可能进展得太快,行业需要放慢速度。

These warnings come at a time when the U.S. intelligence community describes AI as a defining technology with growing implications for cyber operations, defense, and warfare, and they stress the importance of keeping humans in control.

这些警告发出之际,美国情报界将人工智能描述为一种定义性技术,对网络作战、国防和战争的影响越来越大,并强调让人类掌控的重要性。

And then there’s the extraordinary Hugging Face incident.

还有非同寻常的抱脸事件。

During cybersecurity testing, OpenAI says that its own experimental AI agents circumvented safeguards, reached the internet, and compromised systems at OpenAI and Hugging Face.

在网络安全测试期间,OpenAI 表示,其自己的实验性人工智能代理绕过了安全措施,到达了互联网,并破坏了 OpenAI 和 Hugging Face 的系统。

New reporting suggests that some of that activity began earlier than previously known.

新的报告表明,其中一些活动的开始时间比之前已知的要早。

Other incidences have also come to light in recent days.

最近几天还曝光了其他事件。

Soon, President Trump and President Xi will meet at the White House, and AI is on the agenda.

很快,特朗普总统和习主席将在白宫会面,人工智能就提上了议程。

Can we slow down AI without losing to China?

我们能否在不输给中国的情况下放慢人工智能的速度?

That is one of the questions that we’ll be looking at today, and I am delighted to be joined to unpack these high-stake questions by two of my Brookings colleagues.

这是我们今天要讨论的问题之一,我很高兴能与布鲁金斯学会的两位同事一起解答这些高风险问题。

Elham Tabassi is the director of Artificial Intelligence and the Emerging Technology Initiative here at Brookings, where she leads our research on AI safety, standards, and governance.

Elham Tabassi 是布鲁金斯学会人工智能和新兴技术计划的主任,她领导我们对人工智能安全、标准和治理的研究。

And also with us is Kyle Chan, a fellow in the John L.

和我们在一起的还有凯尔·陈 (Kyle Chan),他是约翰·L·肯尼迪 (John L.

Thornton China Center, and his work focuses on China’s tech sector and industrial policy.

桑顿中国中心,他的工作重点是中国的科技行业和产业政策。

WRIGHT

So let’s start maybe with just an overall assessment of where we are.

因此,让我们首先对我们所处的情况进行总体评估。

Are the AI executives right to have expressed the concerns that they did in recent weeks, and what do we make of it?

人工智能高管最近几周表达的担忧是否正确?我们对此有何看法?

And when people say the latest technological developments have changed their assessment of AI risks, what exactly has changed?

当人们说最新的技术发展改变了他们对人工智能风险的评估时,到底改变了什么?

TABASSI

I think we should take them seriously.

我认为我们应该认真对待他们。

They are building this technology.

他们正在开发这项技术。

They know what’s happening inside their companies better than anybody else.

他们比任何人都更了解公司内部发生的事情。

So I think at the minimum, you should definitely take them seriously.

所以我认为至少,你绝对应该认真对待它们。

And the second part of your question, I don’t think it is any of them by itself, but the combination of all of them that these AI algorithms, these AI models are increasingly become more capable.

你问题的第二部分,我认为这不是其中任何一个本身,而是所有这些人工智能算法、这些人工智能模型的结合,它们的能力越来越强。

They are better in coding, and because of that, they are better in exploiting weaknesses in the codes.

他们更擅长编码,因此,他们更擅长利用代码中的弱点。

They can coordinate, the agents can coordinate among themselves.

他们可以协调,代理之间也可以协调。

So all of them together is getting us this sort of capability and the things that we hadn’t seen before, and because we hadn’t seen before makes it more difficult for us to figure out how to measure the type of risk and impact they can have.

因此,所有这些共同为我们提供了这种能力和我们以前从未见过的东西,并且因为我们以前从未见过,所以我们更难弄清楚如何衡量它们可能产生的风险类型和影响。

CHAN

I think that in some ways we need to focus on some of the more immediate risks.

我认为在某些方面我们需要关注一些更直接的风险。

The concerns about existential AI risk, the fears that AI might kill us all in the next decade, are premised on the idea that we will hit this ever-accelerating feedback loop in the very near future something called recursive self-improvement, where AI systems improve themselves and they do so faster and faster to the point where humans no longer have control over this process.

对存在的人工智能风险的担忧,对人工智能可能在未来十年杀死我们所有人的担忧,其前提是我们将在不久的将来进入这种不断加速的反馈循环,即所谓的递归自我改进,人工智能系统会自我改进,而且速度越来越快,以至于人类不再能够控制这个过程。

There are a lot of steps there that remain to be figured out.

还有很多步骤有待弄清楚。

This depends not just on better software, but on better data, better compute infrastructure.

这不仅取决于更好的软件,还取决于更好的数据、更好的计算基础设施。

There are a whole bunch of missing pieces along the way.

一路上有一大堆缺失的碎片。

So in terms of the existential AI risk, this is something we should be thinking about now, but I don’t know if that’s our top priority.

因此,就存在的人工智能风险而言,这是我们现在应该考虑的事情,但我不知道这是否是我们的首要任务。

There’s a whole bunch of other risks related to how AI systems today can attack other companies, can perform advanced cyber operations, can be used by other nations or non-state actors to carry out, say, ransomware attacks, or perhaps even develop certain kinds of biological pathogens.

目前,人工智能系统还存在很多与如何攻击其他公司、执行高级网络操作、被其他国家或非国家行为者用来实施勒索软件攻击,甚至可能开发某些类型的生物病原体相关的风险。

These are risks that I think are rising to the fore, have been talked about for a long time in the AI safety community in the U.S., but are now being taken more seriously by some of the policymaking world.

我认为这些风险正在日益凸显,在美国人工智能安全界已经讨论了很长时间,但现在一些决策界正在更加认真地对待这些风险。

I mean, the risks you identify there are largely by actors, by human actors, using or abusing, you know, AI models to conduct, you know, cyberattacks.

我的意思是,你发现的风险主要是由行为者、人类行为者使用或滥用人工智能模型来进行网络攻击。

But the news over the last few weeks, particularly on the Hugging Face incident, was of autonomous sort of agents.

但过去几周的新闻,尤其是“抱脸”事件,是关于自主特工的。

So some people would argue we’re already, you know, in a world of recursive self-improvement.

所以有些人会说我们已经进入了一个递归自我完善的世界。

You know, we’re already seeing, these models act sort of autonomously in ways that we don’t fully understand, and it’s only going to accelerate from here.

你知道,我们已经看到,这些模型以我们不完全理解的方式自主运作,而且只会从这里加速。

So do you disagree with that?

那么你不同意这一点吗?

I would separate this out into agent autonomy versus the recursive self-improvement.

我会将其分为代理自主与递归自我改进。

The fear from recursive self-improvement is not just that these systems might go about doing things that we didn’t intend for them to do, but that they can actually improve themselves faster and faster, become smarter and smarter, and augment their own capabilities at a pace that starts to spin out of control.

对递归自我改进的恐惧不仅在于这些系统可能会做我们不希望它们做的事情,而且在于它们实际上可以越来越快地改进自己,变得越来越聪明,并以开始失控的速度增强自己的能力。

And I think that is ultimately sort of that for some people’s view, that near horizon risk that could really wipe out humanity, if to put it bluntly.

我认为这最终就是某些人的观点,坦率地说,近地平线的风险可能真的会消灭人类。

Versus some of this autonomous action, the sort of current degree of runaway AI systems doing things, hacking companies that they’re not supposed to do.

与这种自主行动相比,目前失控的人工智能系统正在做一些他们不应该做的事情,黑客攻击公司。

That is a problem today, but I don’t think it’s seen as a existential risk.

这是今天的一个问题,但我不认为它被视为存在的风险。

There is not a risk today that those systems will say, go about carrying some broader takeover of the entire grid or of military weapon systems.

今天,这些系统不存在对整个电网或军事武器系统进行更广泛接管的风险。

So I would separate some of those concepts out.

所以我会把其中一些概念分开。

WRIGHT

Okay.

好的。

Elham, if we could turn to you just on this existential question, how do we get from the systems that we have today to something genuinely catastrophic?

埃勒姆,如果我们能就这个存在主义问题向您求助,我们如何从我们今天拥有的系统中摆脱真正的灾难性后果?

TABASSI

We have evidence today that the current AI systems can behave unpredictably, can exploit weaknesses in safeguards, and can show capabilities and behaviors that is hard to predict.

今天我们有证据表明,当前的人工智能系统可能会表现出不可预测的行为,可以利用保障措施中的弱点,并且可以表现出难以预测的能力和行为。

But none of this demonstrate that AI systems can, as Kyle said, you know, run away, the loss of control scenarios and those extreme existential risk, catastrophic risk that has been talking about.

但这些都没有表明人工智能系统可以像凯尔所说的那样,逃跑,失去控制的场景以及那些极端的生存风险,一直在谈论的灾难性风险。

In terms of the recursive self-improvement, also agree that the recursive self-improvement right now is bounded.

在递归自我改进方面,也同意目前的递归自我改进是有界的。

We still have the humans to set the objectives control resources, evaluate the result, and the question becomes can that loop get closed and accelerate?

我们仍然需要人类来设定目标、控制资源、评估结果,问题是这个循环能否闭合并加速?

And I think that, as Kyle mentioned, depends on data, compute, energy, and those are bounded by physical and economic timelines rather than software timelines.

我认为,正如凯尔提到的,这取决于数据、计算、能源,而这些都受到物理和经济时间表而不是软件时间表的限制。

The way the community are talking about is sort of two ends of the spectrum.

社区谈论的方式有点像光谱的两端。

One is, as you talked about, a bad actor sort of abuse, misuse AI and try to launch a cyber or bio attack, as Kyle explained.

正如凯尔所解释的,其中一种是,正如您所谈到的,不良行为者会滥用、滥用人工智能并试图发起网络或生物攻击。

You know, companies are doing a lot of things to prevent this type of abuse and misuse of AI systems.

你知道,公司正在做很多事情来防止人工智能系统的此类滥用和误用。

But AI systems can be very smart and very dumb at the same time, and eventually they can jailbreak and all of those things can happen.

但人工智能系统可以非常聪明,同时又非常愚蠢,最终它们可以越狱,所有这些事情都可能发生。

The other end of the spectrum, as some in the community argue, is AI go run away, go rogue and do things and the example that is they bring is that they have a objective and in their achieving their objectives, they need resources.

正如社区中的一些人所说,另一端是人工智能会逃跑、流氓和做事,他们带来的例子是,他们有一个目标,在实现目标的过程中,他们需要资源。

They start competing with the human on the resources and strange, bizarre, crazy thing that can happen.

他们开始与人类争夺资源,并可能发生奇怪、怪异、疯狂的事情。

And there is a whole sets of scenarios that can happen in between that it is not just one thing, but a gradual and combination of the things that can happen.

其间可能发生一整套场景,这不仅仅是一件事情,而是可能发生的事情的渐进和组合。

So we see that, for example, some of the things that they talk about that can happen is that, well, we see that AI is being increasingly deployed to do the research and engineering.

因此,我们看到,例如,他们谈论的一些可能发生的事情是,我们看到人工智能正在越来越多地被部署来进行研究和工程。

Then we have the sort of the giving more autonomy that Kyle also talk about this, and it just can be because the companies are under resources, and it’s easier to give more autonomy to the agents to do that work.

然后我们有凯尔也谈到的那种给予更多的自主权,这可能是因为公司资源不足,而且更容易给予代理商更多的自主权来完成这项工作。

Then on top of that, we have the issue of the alignment and, you know, is the algorithms, is this model are exactly doing what the humans set the objective for them to do?

然后最重要的是,我们有对齐的问题,你知道,算法,这个模型是否完全按照人类设定的目标去做?

And as they become more capable, the, the alignment problem becomes more difficult.

随着他们变得更有能力,对齐问题变得更加困难。

And then we have the evaluation failure, and as you alluded to that, more and more have situational awareness, so they know they are in the testing environment versus the real world deployment, so it becomes AI evaluations much, much, much harder.

然后我们遇到了评估失败,正如您所提到的,越来越多的人具有态势感知能力,因此他们知道自己处于测试环境中而不是现实世界的部署中,因此人工智能评估变得非常非常困难。

We as a society are increasing our reliance on AI more and more, so AI becomes integrated into the critical infrastructure where continual monitoring or even shutdown if something happens becomes harder.

作为一个社会,我们对人工智能的依赖越来越多,因此人工智能被整合到关键基础设施中,在这些基础设施中,持续监控甚至在发生问题时关闭变得更加困难。

So a lot of the things in the scenario that I mentioned can be assumptions.

所以我提到的场景中的很多事情都可以是假设。

Some of them are measurable, some of them are active area of the research, but if you put all of them together, that something bad and catastrophic can happen.

其中一些是可测量的,其中一些是研究的活跃领域,但如果将它们全部放在一起,则可能会发生糟糕和灾难性的事情。

But what I want to end with is the importance of the measurement, the importance of accumulating evidence for all of these things.

但我想结束的是测量的重要性,以及为所有这些事情积累证据的重要性。

And we would be much in a better place if we can have a better measurement systems, know the indicators, be able to measure all of these warning signs, and be able to intervene as they come to prevent all of them.

如果我们能够拥有更好的测量系统,了解指标,能够测量所有这些警告信号,并能够在它们出现时进行干预以防止所有这些情况发生,那么我们的情况就会好得多。

WRIGHT

Yeah, just picking up on the point you raise that the advanced models sometimes know they’re being evaluated and change their behavior and might act differently when they are not being evaluated.

是的,只是注意到你提出的观点,即高级模型有时知道它们正在被评估并改变它们的行为,并且当它们没有被评估时可能会采取不同的行为。

I mean, what is the answer to that?

我的意思是,这个问题的答案是什么?

Is there a way to sort of assess these models to make sort of judgments on safety, or are we getting to the point where that’s not technically possible?

有没有一种方法可以评估这些模型,从而对安全性做出某种判断,或者我们是否已经到了技术上不可能的地步?

TABASSI

It’s a challenge.

这是一个挑战。

It’s something that we haven’t been, you know, in testing of the AI systems and testing of the softwares, we hadn’t seen it before.

你知道,在人工智能系统测试和软件测试中,我们以前从未见过这种情况。

We definitely need better, more rigorous evaluations to figure out how to do that and when they start changing behavior, but continuing the testing and continuing the monitoring of the systems while they are in use to detect all of these failures or flaws sooner.

我们肯定需要更好、更严格的评估来弄清楚如何做到这一点以及它们何时开始改变行为,但在系统使用时继续测试和继续监控系统,以便更快地检测所有这些故障或缺陷。

WRIGHT

Yeah.

是的。

So question to both of you, maybe starting with Kyle.

所以向你们俩提问,也许从凯尔开始。

I mean, just building on all of that, I mean, do you think that there ought to be, you know, government regulation or, you know, a license required to issue new frontier models given all of these risks?

我的意思是,在所有这些基础上,我的意思是,考虑到所有这些风险,您是否认为应该有政府监管,或者您知道,发布新前沿模型所需的许可证?

CHAN

In a word, yes.

总之,是的。

We need some kind of regulation, and up until this point, a lot of this has been left to the industry, to the private sector to figure this out on their own.

我们需要某种监管,到目前为止,很多监管工作都留给了行业、私营部门自己解决。

And to their credit, because they are genuinely concerned about these issues, they have developed their own internal safety protocols and efforts to do the sort of measurement and testing and to develop guardrails.

值得赞扬的是,因为他们真正关心这些问题,所以他们制定了自己的内部安全协议,并努力进行此类测量和测试并开发护栏。

But this is not enough.

但这还不够。

I think incidents like the Hugging Face incident show that the industry needs to do more to get a handle on some of these risks, and that ultimately, these should not be voluntary industry limits, but something that the federal government needs to be involved in, and perhaps even at an international scale.

我认为像抱脸事件这样的事件表明,行业需要采取更多措施来应对其中一些风险,最终,这些不应该是自愿的行业限制,而是联邦政府需要参与的事情,甚至可能是国际范围的参与。

TABASSI

There is a lot from other industries to be learned right now.

现在还有很多其他行业值得学习的地方。

I completely agree that there is limits to any sort of the voluntary solution.

我完全同意任何形式的自愿解决方案都是有限度的。

I still think that the voluntary solutions and voluntary mechanisms play a really big role, and really here talking about the standards, because standards can also be voluntary because, as we know, the systems is changing too quickly, so we have to be able to adapt.

我仍然认为自愿解决方案和自愿机制发挥着非常大的作用,这里真正谈论的是标准,因为标准也可以是自愿的,因为正如我们所知,系统变化太快,所以我们必须能够适应。

So we need regulations on measurable risks rather than a hypothetical label, and it’s also important to do it in a way that it can be adaptable to the rapid changes that’s happening in this environment and policies that stops boxing us into the solutions that cannot be.

因此,我们需要针对可衡量的风险制定法规,而不是假设的标签,而且重要的是要以一种能够适应当前环境和政策中正在发生的快速变化的方式来做到这一点,以免我们陷入无法解决的解决方案中。

WRIGHT

So David Sacks, who until recently was the AI czar at the White House and now still advising the administration on AI and technology, has sort of made the argument that government regulation requiring a license is just basically a means for a set of people in the AI community–effective altruism–to control AI politically and ideologically.

因此,直到最近才担任白宫人工智能沙皇、现在仍在为政府提供人工智能和技术方面建议的大卫·萨克斯(David Sacks)提出了这样的论点:需要许可证的政府监管基本上只是人工智能社区中的一群人(有效的利他主义)在政治和意识形态上控制人工智能的一种手段。

And it seems the president of the United States agrees with him.

看来美国总统也同意他的观点。

There should be no government regulation.

政府不应该有任何监管。

It should be– We should just rely on litigation, right?

应该是——我们就应该依靠诉讼吧?

So if a company releases something that’s not safe, then, you know, they’re liable to be sued, and they will get in legal trouble and be punished maybe by the market as well.

因此,如果一家公司发布了不安全的东西,那么,你知道,他们可能会被起诉,他们会陷入法律麻烦,并可能受到市场的惩罚。

And what is your answer to that sort of concern that, you know, who is regulating?

对于谁在监管的担忧,您有何回应?

How would you address or would you address the concerns of those, particularly on the right, who would worry that it’s basically their political opponents that will be controlling this new technology?

您将如何解决或解决那些人的担忧,特别是右翼人士,他们担心基本上是他们的政治对手将控制这项新技术?

TABASSI

So the word licensing implies there means the threshold for capability or risk that needs to be licensed, and then also a sort of the verification to see that if the thresholds is met, and also evaluation and measurement mechanisms for enforcing the regulations.

因此,许可一词意味着需要许可的能力或风险的阈值,然后是一种验证是否满足阈值的验证,以及执行法规的评估和衡量机制。

So for a very long time, I always have been saying that, while I agree with the regulations as sort of a backstop we also want the good regulations.

因此,很长一段时间以来,我一直在说,虽然我同意将法规作为某种后盾,但我们也希望有良好的法规。

Smart regulations are those that can also be enforceable.

明智的法规是那些也可以强制执行的法规。

And currently, we don’t have that measurement infrastructure, that evaluations, verification, validation mechanisms to be able to do the enforcement of-

目前,我们没有测量基础设施、评估、验证、确认机制来执行以下任务:

TABASSI

Right.

对。

So who would decide all of this?

那么谁来决定这一切呢?

And I would go back and say that there is a shared responsibility across all of the value chain.

我想说的是,整个价值链都负有共同的责任。

Companies that are building the AI systems, they know a lot about the systems, about what systems can do, and also how to test them.

正在构建人工智能系统的公司,他们对系统了解很多,知道系统可以做什么,以及如何测试它们。

We need external independent evaluators to be able to verify those claims, and we do need the government to set the rules, to set those, those thresholds.

我们需要外部独立评估者来验证这些说法,我们确实需要政府制定规则,设定那些门槛。

And it’s very difficult because we just don’t have the terminology and the definition that we need.

这非常困难,因为我们没有所需的术语和定义。

You know, people talk about superintelligence, but actually what superintelligence is.

你知道,人们谈论超级智能,但实际上超级智能是什么。

People talk about kill switch, but kill switch cannot help with the open weight.

人们谈论终止开关,但终止开关无法帮助打开重量。

So we need representative and different minds more.

所以我们更需要有代表性、有不同的思想。

WRIGHT

Yeah.

是的。

I guess one way of framing the question, if there was a licensing system and there was strict government regulation, but Donald Trump decided that the people who would be determining that were Elon Musk and David Sacks, I mean, how comfortable would we all be?

我想解决这个问题的一种方式是,如果有许可制度和严格的政府监管,但唐纳德·特朗普决定由埃隆·马斯克和大卫·萨克斯来决定,我的意思是,我们大家会感到多么舒服?

We’d probably be worried, but it’s flipped on the other side, like they are worried, right?

我们可能会担心,但事情却反过来了,就像他们担心一样,对吧?

And they are basically in charge at the moment.

目前他们基本上是负责的。

They are worried about by setting this up, it will be people they don’t agree with.

他们担心这样设置后,会招来一些他们不同意的人。

And getting out of that trap, I think, is a tough one.

我认为,摆脱这个陷阱是一件困难的事。

But Kyle, why don’t you address that quickly, and then we’ll turn to China.

但是凯尔,你为什么不尽快解决这个问题,然后我们将转向中国。

CHAN

The problem about regulatory capture is a real one for any industry, for any kind of regulation, and I think that also applies to AI.

对于任何行业、任何类型的监管来说,监管捕获问题都是一个真实的问题,我认为这也适用于人工智能。

What’s crucial to deal with that is to make sure that there are a diversity of views and voices that are feeding into how this regulation is created, that it’s not dominated by a single company or even a single layer of the AI industry.

解决这个问题的关键是确保监管的制定方式能够包含多种观点和声音,确保监管不被一家公司甚至人工智能行业的某一层所主导。

For example, the American AI ecosystem is much bigger than even just the two model companies, OpenAI and Anthropic alone.

例如,美国的人工智能生态系统比 OpenAI 和 Anthropic 这两家典范公司还要大得多。

So thinking about different parts of the ecosystem-

所以思考生态系统的不同部分——

WRIGHT

But how do you deter- how do you break the tie?

但是你如何阻止——如何打破平局呢?

Like, Zuckerberg’s out there saying basically, “Go fast,” right?

就像扎克伯格基本上说的那样,“快点”,对吧?

No regulation Musk seems to be somewhere in the middle, can’t quite tell.

没有监管,马斯克似乎处于中间的某个位置,不太清楚。

And, you know, Altman and Amadei are saying, you know, “Slow down.” You can have all of those people in the room, right?

而且,你知道,奥特曼和阿马迪说,你知道,“慢点。”你可以让所有这些人都在房间里,对吗?

But then if you’re president or you’re Congress trying to determine the system, I mean, there has to be a tiebreaker, right?

但如果你是总统或国会试图决定这个制度,我的意思是,必须有一个决胜局,对吧?

CHAN

Well, I wouldn’t see it as a tiebreaker because in the end, this is not for the industry to decide, and it’s not a power struggle

好吧,我不认为这是一个决胜局,因为最终,这不是由行业决定的,也不是权力斗争

between the industry that should decide a regulation.

行业之间应该制定一项规定。

Ultimately, that should be decided by policymakers and voters.

最终,这应该由政策制定者和选民决定。

And so what we want to have is we want to have input from a wide array of sources, including within the industry, but also including outside of the industry, and have that feed into a broader policymaking process that we can discuss together publicly, because this is something that doesn’t just affect any one company or any one industry, but can potentially affect all of us.

因此,我们想要的是,我们希望从广泛的来源获得意见,包括行业内部,也包括行业外部,并将其纳入我们可以公开讨论的更广泛的决策过程中,因为这不仅影响任何一家公司或任何一个行业,而且可能影响我们所有人。

TABASSI

It cannot be just industry sets the rule for themselves.

不能只是行业为自己制定规则。

And AI systems are sociotechnical.

人工智能系统具有社会技术性。

It’s just not a technical problem.

这不是技术问题。

It’s not a technical problem with a governance footnote.

这不是治理脚注的技术问题。

WRIGHT

Thank you.

谢谢。

Let’s turn to China.

让我们把目光转向中国。

President Trump and President Xi are meeting soon.

特朗普总统和习主席即将会面。

AI will be on the agenda.

人工智能将提上议程。

You know, we hear a lot about how both countries should cooperate on AI safety.

你知道,我们听到很多关于两国应如何在人工智能安全方面进行合作的说法。

But in a New York Times essay today, Seth Center, who led those talks for the Biden administration and served in the State Department, wrote that in 2024, his experience was that the Chinese side did not take AI safety seriously and only saw the opportunity to jockey for strategic advantage.

但在《纽约时报》今天的一篇文章中,为拜登政府主持这些会谈并在国务院任职的赛斯·中心写道,他的经验是,2024年,中方没有认真对待人工智能安全,只看到了争夺战略优势的机会。

And let me quote him here because I think it’s important.

让我在这里引用他的话,因为我认为这很重要。

He said, “If both sides meet in earnest, the very best that I could envision is a non-binding commitment in which each side would agree to put pressure on its companies to publish and improve safety benchmarking for cybersecurity and biological risks, and to disclose rather than bury reports of concerning incidences.”

他说:“如果双方认真会面,我能想到的最好的结果是达成一项不具约束力的承诺,双方同意向各自的公司施加压力,要求其发布和改进网络安全和生物风险的安全基准,并披露而不是掩盖有关事件的报告。”

So I guess, Kyle, to start with you, I mean, is he right in his pessimism, and if not, why not?

所以我想,凯尔,从你开始,我的意思是,他的悲观主义是否正确,如果不是,为什么不呢?

And, I mean, how do you think China sees AI risk, I guess, at the community level, and do you think that is how Xi Jinping also sees it?

我的意思是,你认为中国在社区层面如何看待人工智能风险,你认为习近平也是这样看待它的吗?

CHAN

So calls for a joint AI slowdown between the U.S. and China are not gonna happen.

因此,美国和中国共同减缓人工智能发展的呼吁不会发生。

China’s not gonna agree to this, and frankly, the U.S., the Trump administration is not keen on this either.

中国不会同意这一点,坦率地说,美国、特朗普政府也不热衷于此。

There is a long way to go if we’re gonna talk about binding international treaties or agreements, a kind of arms control for AI.

如果我们要讨论具有约束力的国际条约或协议,即人工智能的军备控制,还有很长的路要走。

A lot of people make the comparison to nuclear weapons control.

很多人将其与核武器控制进行比较。

That’s not the right framework in my view.

在我看来,这不是正确的框架。

Instead, I think we have to take a step back and see this as a much longer road and a much larger set of issues than simply do we regulate or not?

相反,我认为我们必须退后一步,将其视为一条更长的路和一系列更大的问题,而不仅仅是我们是否进行监管?

Do we slow down or not?

我们放慢速度还是不放慢速度?

Do we cooperate with China or not?

我们是否与中国合作?

And so I would start by thinking about how China sees AI risks and how these have been changing over time.

因此,我首先要思考中国如何看待人工智能风险以及这些风险如何随着时间的推移而发生变化。

I think Seth Center’s piece highlights a moment in time for Beijing where they saw AI as a huge opportunity and did not really emphasize so many of the risks.

我认为赛斯中心的文章强调了北京的一个时刻,他们将人工智能视为一个巨大的机遇,但并没有真正强调那么多的风险。

And so when the U.S. wanted to talk about some of these risks, I think the Chinese side saw it as a diplomatic issue rather than a national security issue.

因此,当美国想要谈论其中一些风险时,我认为中方将其视为外交问题而不是国家安全问题。

That’s changing now.

现在情况正在改变。

In Beijing, there is growing concern about some of these larger scale AI risks.

在北京,人们越来越担心其中一些更大规模的人工智能风险。

They’re no longer just purely saying, “Hit the accelerator and go faster,” although they are still trying to catch up to U.S. models.

尽管他们仍在努力追赶美国模式,但他们不再只是单纯地说“踩油门,跑得更快”。

They’re getting more concerned about cybersecurity.

他们越来越关注网络安全。

They are watching very closely incidents like Hugging Face.

他们正在密切关注诸如“抱脸”之类的事件。

They’re worried about autonomous agents getting out of hand.

他们担心自主代理会失控。

Some of their recent regulations around AI agents are targeting autonomous systems and trying to tie back human responsibility to some of these.

他们最近关于人工智能代理的一些法规是针对自主系统,并试图将人类责任与其中一些联系起来。

And when you look at what some of the top Chinese officials are saying domestically within China, for example, China’s head of their Ministry for State Security recently laid out a whole bunch of what he saw as major AI risks to China’s own national security and to the party’s control on power, and those included things like cyberattacks that are enhanced with AI models.

例如,当你看看中国一些高级官员在国内所说的话时,中国国家安全部负责人最近列出了一大堆他认为人工智能对中国国家安全和共产党权力控制构成的重大风险,其中包括通过人工智能模型增强的网络攻击等。

He called out American AI models in particular as part of that.

他特别指出美国的人工智能模型是其中的一部分。

And he talked about a whole range of ideological and content-related issues that have long dominated China’s approach to AI regulation.

他还谈到了长期以来主导中国人工智能监管方式的一系列意识形态和内容相关问题。

So I think what’s happening now is we are certainly not at the point where China is worried about existential AI risk.

所以我认为现在发生的情况是,我们肯定还没有到中国担心人工智能存在风险的地步。

They don’t think that AI will kill us all in the next decade.

他们认为人工智能不会在未来十年杀死我们所有人。

The policymakers don’t think that way, and the AI industry for the most part does not talk that way.

政策制定者不这么认为,人工智能行业在很大程度上也不这么说。

But I think increasingly they do see problems with these other AI risks that are no longer sort of the content social risks from AI, but threaten national security.

但我认为,他们确实越来越多地看到这些其他人工智能风险的问题,这些风险不再是人工智能带来的内容社会风险,而是威胁国家安全。

And on that front, I do wonder if there will be growing overlap between U.S. and Chinese interests in mitigating some of these, given that both countries care about this and neither country wants to see an American or a Chinese AI model, say, attack their critical infrastructure or be used to hack into a major hospital system.

在这方面,我确实想知道美国和中国在减轻其中一些问题上的利益是否会越来越重叠,因为两国都关心这一点,而且两国都不希望看到美国或中国的人工智能模型攻击其关键基础设施或被用来侵入主要医院系统。

TABASSI

I think Seth mentioned that in his article too, that the expectations of some sort of the agreement is, I don’t think it’s very realistic.

我认为塞斯在他的文章中也提到过,对某种协议的期望是,我认为这不太现实。

But what we need is at the lower level, technical level, you know, we’re talking about, you know, kind of mutual recognitions and mutual verifications, how technically we want to solve them.

但我们需要的是在较低的层面,技术层面,你知道,我们正在谈论,你知道,一种相互认可和相互验证,我们希望如何从技术上解决它们。

So it would be better if at the technical level, the experts of the two countries or, you know, maybe even broader globally can agree on some mechanisms for the evaluations for verifications and validations and feed it up to the diplomacy conversations, and I don’t see that’s happening very vigorously right now.

因此,如果在技术层面上,两国的专家,或者甚至更广泛的全球范围内的专家能够就一些验证和验证的评估机制达成一致,并将其纳入外交对话中,那就更好了,但我认为目前这种情况并没有发生得非常积极。

WRIGHT

So let me just ask one more question on this.

让我就此再问一个问题。

I mean, say Xi Jinping or the Chinese side basically say, “Look, we agree.” As you laid it out, Kyle, that there are specific challenges that need to be addressed, but, you know, we can’t really do that in the presence of these export controls on high-end chips.

我的意思是,习近平或中方基本上会说,“看,我们同意。”正如您所指出的,凯尔,有一些具体的挑战需要解决,但是,您知道,在高端芯片存在这些出口管制的情况下,我们无法真正做到这一点。

And you say you’re trying to keep us down and win the AI race, and that’s, it’s not practical for us to pace or to really get serious about a cooperation as long as that’s the case, so we need you to lift those.

你说你试图让我们失望并赢得人工智能竞赛,也就是说,只要是这种情况,我们就无法加快速度或真正认真对待合作,所以我们需要你来提升这些。

Sebastian Mallaby has made some version of this argument recently.

塞巴斯蒂安·马拉比(Sebastian Mallaby)最近对这一论点提出了一些版本。

How do you think about that?

您对此有何看法?

And on the flip side, you know, there are many people here who say, and Dario Amodei is one of them, who says that, you know, in order to buy time to be able to pace the frontier and to be able to assess safety risk, you know, we need to slow China down, deny them the compute power, not send over the chips, so that, you know, we’re not in as much of a race, like we’ve a little bit more wriggle room, to actually slow down, you know, ourselves.

另一方面,你知道,这里有很多人说,达里奥·阿莫迪就是其中之一,他们说,为了争取时间能够跟上前沿步伐并能够评估安全风险,你知道,我们需要放慢中国的速度,拒绝他们的计算能力,而不是发送芯片,这样,你知道,我们就不会陷入一场竞争,就像我们有更多的回旋余地一样,实际上放慢速度,你知道,我们自己。

So where do you, starting with you, Kyle, maybe, but where do you come out on that question?

那么,从你开始,凯尔,也许,但你对这个问题的结论是什么?

CHAN

I think we should keep the export controls on semiconductor chips to China as a separate issue to the extent that we can from these AI safety discussions.

我认为,我们应该在人工智能安全讨论中尽可能地将对中国的半导体芯片出口管制作为一个单独的问题。

The Chinese side obviously wants to link them together.

中方显然想把它们联系在一起。

There are some who have argued that we should use this as a carrot, and there are some who have argued in the U.S. that we should use this as a stick to pressure-

有人认为我们应该以此为胡萝卜,美国也有人认为我们应该以此为施压大棒——

WRIGHT

What’s the stick one?

棍子是什么?

Sorry, I don’t fully understand that.

抱歉,我不完全明白这一点。

I mean, ’cause as I read it, they say basically just ought to have the controls for their own sake to slow China down.

我的意思是,因为当我读到它时,他们说基本上应该为了自己的利益而进行控制,以减缓中国的发展。

CHAN

Yeah.

是的。

The threat of cranking up the export controls could be used as a form of leverage to bring China to the table to talk about AI safety.

加强出口管制的威胁可以作为一种杠杆形式,促使中国坐到谈判桌前讨论人工智能安全问题。

I think that the right way to go about this is to keep the export controls as they are and as a separate issue, and to focus on trying to figure out areas of mutual overlap for the AI safety issue that affect both countries.

我认为解决这个问题的正确方法是保持出口管制不变,并将其作为一个单独的问题,并集中精力找出影响两国的人工智能安全问题的相互重叠的领域。

And it’ll be tough.

这会很艰难。

I mean, the fact of the matter is we’re competing very fiercely to build better and better models, but also to use AI to augment a whole bunch of economic and military capabilities.

我的意思是,事实是我们正在非常激烈地竞争,以建立越来越好的模型,同时也利用人工智能来增强一系列经济和军事能力。

So this is happening in China, this is happening in the U.S. I think that we’re gonna have to figure out some way, like the U.S. and the Soviet Union once did, to not let the pure competition between the two AI superpowers be the only thing that we focus on.

所以这种情况正在中国发生,这种情况正在美国发生。我认为我们必须找到某种方法,就像美国和苏联曾经做过的那样,不让两个人工智能超级大国之间的纯粹竞争成为我们唯一关注的事情。

We need to think about not just the risk to each other, but the broader risk from this technology to the rest of the world.

我们不仅需要考虑彼此之间的风险,还需要考虑这项技术给世界其他地区带来的更广泛的风险。

TABASSI

From what I read and hear some of the wording in the Dario’s letter hasn’t land well with the technical and scientists in China about the things that can happen because any sort of the mutual recognition really needs a better relationship with.

从我读到和听到的来看,达里奥信中的一些措辞并没有得到中国技术和科学家的认可,因为任何形式的相互承认都需要建立更好的关系。

WRIGHT

Yeah, I mean, I think also it wasn’t just the essay or the letter, it was the national security report, the 134-page report that Anthropic released, I think last Friday, in which basically they show that Chinese actors were using Claude, you know, for their own purposes, but also they put in sensitive information, which then, of course, Anthropic got access to betraying Chinese national security secrets and all sorts of rumors flowing over the last week and on, on how the Beijing responded to that.

是的,我的意思是,我认为这不仅仅是这篇文章或那封信,它是国家安全报告,我想是上周五 Anthropic 发布的 134 页报告,其中基本上表明中国演员正在利用克劳德,你知道,为了他们自己的目的,但他们也放入了敏感信息,然后,当然,Anthropic 获得了泄露中国国家安全机密的机会,以及上周及以后流传的各种关于北京如何回应的谣言。

But we don’t, I think, know exactly what happened yet.

但我认为我们还不知道究竟发生了什么。

Let me finish with just a lightning round question, ’cause we’ve talked about a lot, but just what is the one specific and realistic policy that the U.S. should prioritize this year to reduce the risk of recursive self-improvement and advanced AI without actually killing American AI innovation?

让我以一个闪电般的问题作为结束,因为我们已经讨论了很多,但美国今年应该优先考虑的一项具体而现实的政策是什么,以降低递归自我改进和先进人工智能的风险,同时又不会真正扼杀美国人工智能创新?

So, Elham, maybe we could start with you and then go to Kyle.

所以,Elham,也许我们可以先从你开始,然后再去找凯尔。

TABASSI

Sure.

当然。

I am a big fan of measurement and having evidence to support any sort of the claims, so I think we can just start by asking companies to report how much of their research is automated and how much of these recursive self-improvement, each cycle, how much gain has been achieved because scientifically, we talk about diminishing return.

我非常喜欢测量,并且有证据支持任何类型的主张,所以我认为我们可以首先要求公司报告他们的研究有多少是自动化的,以及这些递归自我改进的程度,每个周期,取得了多少收益,因为从科学角度来说,我们谈论的是收益递减。

So just have that data and get the evidence to build a rigorous basis for understanding the problem to guide

因此,只需拥有这些数据并获取证据即可为理解问题建立严格的基础以指导

CHAN

I think we need to talk to China, and the most important thing at this stage is communication channels.

我认为我们需要和中国对话,现阶段最重要的是沟通渠道。

We need what I call thick communication channels, formal and informal, between members of China’s AI industry, AI safety community, and our own, as well as government to government discussions.

我们需要中国人工智能行业成员、人工智能安全社区和我们自己之间以及政府与政府之间的讨论之间建立我所说的正式和非正式的紧密沟通渠道。

And the idea here is should an incident occur, should an OpenAI model not attack a company like Hugging Face, but accidentally attack a Chinese platform or vice versa, what would we do?

这里的想法是,如果发生事件,如果 OpenAI 模型不攻击像 Hugging Face 这样的公司,而是意外攻击中国平台,反之亦然,我们会怎么做?

How could we inform our Chinese counterparts that this was not intentional and exchange some views and vice versa?

我们如何才能告知中国同行这不是故意的,并交换一些意见,反之亦然?

And so I think people who are aiming for some major international treaty are aiming too high.

因此,我认为那些希望达成一些重大国际条约的人的目标太高了。

I think we should see this as a potential ladder, and we have to start with the very first rung, and that’s just talking.

我认为我们应该将其视为一个潜在的阶梯,我们必须从第一级开始,这只是说说而已。

WRIGHT

On the military side, we’ve been proposing for years, the U.S. has been proposing for years a sort of red phone, a hotline for exactly this type of thing, not on AI, but on more military activities.

在军事方面,我们多年来一直在提议,美国多年来一直在提议一种红色电话,专门针对此类事情的热线,不是关于人工智能,而是关于更多的军事活动。

And China’s always rejected it, in part because they view those channels as sort of seat belts that encourage just reckless driving, right?

中国一直拒绝这样做,部分原因是他们将这些渠道视为鼓励鲁莽驾驶的安全带,对吗?

And so, you know, our view was always that they had not experienced the Cuban Missile Crisis, so they haven’t sort of fully appreciated the need for it.

所以,你知道,我们的观点始终是他们没有经历过古巴导弹危机,所以他们还没有完全意识到这一危机的必要性。

Maybe that awareness will come with these risks.

也许这种意识会伴随着这些风险。

But Elham and Kyle, thank you both so much for joining me today to break this down.

但埃勒姆和凯尔,非常感谢你们今天和我一起来解释这个问题。

To read more of Elham and Kyle’s research in AI governance, national security, and the U.S.-China technology relationship, please visit brookings.edu, and thank you for joining us on The Current.

要了解 Elham 和 Kyle 在人工智能治理、国家安全和美中技术关系方面的更多研究,请访问 brookings.edu,并感谢您加入我们的 The Current。

中文为机器翻译,仅供参考。