Speaker 1
This is crazy. Google's Willow quantum chip is using a new Quantum Echoes algorithm that ran computations 13,000 times faster than supercomputers, Kevin.
Speaker 2
Oh, I see. It's performance review season over there—
Speaker 1
Yeah.
Speaker 2
—in Google quantum computing. “Oh, you know, my Echoes chip did a quantum compute. I need a raise.”
Speaker 1
Yeah. No matter how many times I learn what quantum computing is, I immediately forget it the next day. This is how I am. This is why I love reading mysteries so much: I forget who did it the day after I put the book down. That's what quantum computing is for me.
Speaker 2
You know, we have to fill out our performance reviews soon at The New York Times.
Speaker 1
Oh, yeah.
Speaker 2
And I think I'm just going to put in there that I solved a quantum computing problem this year. How will they fact-check me?
Speaker 1
Now, why don't they email me asking to help with your performance review?
Speaker 2
Oh, you want to do a 360 review?
Speaker 1
Yeah, I want to do a 360.
Speaker 2
You've got some feedback?
Speaker 1
Yeah.
Speaker 2
I'm Kevin Roose, a tech columnist at The New York Times.
Speaker 1
I'm Casey Newton from Platformer.
Speaker 2
And this is Hard Fork.
Speaker 1
This week, OpenAI's big sloppy mess, and why the company is backpedaling over Sora. Then, The Times's Karen Weise joins us to discuss her scoop on Amazon's plans to reduce its hiring needs by hundreds of thousands of workers. And finally, AI browsers are here: our first impressions of ChatGPT Atlas.
Speaker 2
Well, Casey, it's been another busy week for the OpenAI Research and Deployment Corporation.
Speaker 1
Yes.
Speaker 2
I learned that's what they call themselves.
Speaker 1
Really?
Speaker 2
Yeah. They have these hoodies. I saw a guy on the train the other day with “Research and Deployment Company” on his hoodie. It didn't even say OpenAI, but that's sort of their new tagline.
Speaker 1
Interesting. Well, I would say, based on the events of the past week, Kevin, maybe OpenAI should do a little more research and a little less deployment.
Speaker 2
Yeah, so let's talk about it. We're going to talk about 2 OpenAI stories this week. One is about their new browser, which we'll talk about a little later. But first, we have to talk about what's been happening with Sora. We've talked about this the last couple of weeks on this show, but this continues to be a total mess for OpenAI—the app and the various controversies and backlashes swirling around it. So, Casey, what is going on with Sora? What is the latest here?
1. Sora Faces New Guardrails
Speaker 1
Well, I would say there have been 2 big developments over the past week, Kevin. One, the company has said that it is going to essentially crack down on political deepfakes based on historical figures after the families of some deceased political figures started to complain. And then the company has also said it's going to try to build some guardrails around the use of copyrighted intellectual property after many people in Hollywood freaked out, including Breaking Bad star Bryan Cranston.
Speaker 2
Yes. They managed to beef with Bryan Cranston and the estate of Martin Luther King Jr. in 1 week. And, Casey, I think that qualifies as a bad week at the office.
Speaker 1
It's not a great week.
Speaker 2
There's a whole genre of what I call bad beginnings, which is when you start saying something and realize, “Oh, this is not going well for me.” Things that would fall into this category include, “Per my recent conversations with the estate of Martin Luther King Jr.” Also in this category: “Regarding the Nazi tattoo I got while in the Marines,” and “Regarding the amount of lead in my protein shakes.” You know when you've said any of those things, it's not been a good week.
Speaker 1
It's not been a good week.
Speaker 2
So let's start with Martin Luther King Jr. and his estate—
Speaker 1
Yeah.
Speaker 2
—and their beef with Sora.
Speaker 1
Yeah. Who was he, and why is he such a significant figure in American history?
Speaker 2
Well, according to my Sora feed, he's a sort of historical civil rights icon who liked to get up and give speeches about Skibidi Ohio toilet rizz.
Speaker 1
Mm-hmm. He also appears to love playing Fortnite, based on the Sora videos I've seen.
Speaker 2
Yes. So what we're talking about is this emerging genre of Sora videos, which I started seeing pretty soon after downloading the app. People would just take Martin Luther King's iconic speeches, such as “I Have a Dream,” and make him say other things—things about Gen Z trends, things about video games, endorsing various products. This was funny to some people and offensive to others. You know who didn't like it? The estate of Martin Luther King Jr.
Speaker 1
Yeah, and it wasn't all playing Fortnite and talking about Skibidi toilet. Some people were also having MLK make monkey noises and putting him in other overtly racist situations. So, yeah, his family members complained. The Washington Post wrote a great story about his family and the families of other deceased historical figures saying, “Hey, this really sucks.” And OpenAI's original position had been, “We believe in free expression. People should be able to do what they want.” But I don't know. At some point, something changed, and the next thing you know, OpenAI is on X posting a statement saying, “While there are strong free speech interests in depicting historical figures, OpenAI believes public figures and their families should ultimately have control over how their likeness is used,” which was a brand-new policy at the moment they posted it.
Speaker 2
And this is somewhat confusing to me, because part of how Sora works is that, in order to make a cameo of someone—to use their face in a video—they have to give you permission to do that. So presumably, the Martin Luther King Jr. estate did not go into its Sora settings and say, “Anyone can make a photo of me.” But they used some public-figure loophole. How did that work?
Speaker 1
That's right. So if you're just an average person, people cannot go in—you, Kevin, a very average person—and make a cameo of you unless you have changed your settings that way. But OpenAI basically said it was open season for historical figures. Of course, there's lots of video out there of MLK and others, and they just said, “Yeah, go crazy if you want.”
Speaker 2
Got it. So now they're saying, “Actually, we've thought about it, and after consulting with the King estate, we are no longer letting people do this.”
Speaker 1
Yeah.
Speaker 2
What happens if you try to make a video with Martin Luther King Jr. now?
Speaker 1
Now you'll just get blocked. It violates the content policies. But I just want to say, it was so obvious that people were going to do this, you know? And in its X post, OpenAI suggested that the reason it had made this change was that people were making, quote, “disrespectful” videos of MLK. You really thought that people were only going to make respectful videos of historical figures? Let me be clear: The only reason to use Sora is to create a video of someone doing something that they would not ordinarily be doing.
Speaker 2
Yes.
Speaker 1
Right? It is not a technology to make people give beautiful speeches about civil rights.
Speaker 2
I confess, I am somewhat implicated in this, because I have not made a Martin Luther King Jr. Sora video, but I did make a video of Mr. Rogers saying Gen Z catchphrases. I thought it was funny. But after—
Speaker 1
After everything Fred Rogers did for this country, this is how you repay him?
Speaker 2
I felt bad about it, if it makes it any better. I did have a moment of guilt and shame after doing it. Did I do it anyway? Yes. Did it get approximately 4 likes? Also yes.
Speaker 1
But look, here's what I'm telling you. This is what the technology is for.
Speaker 2
Yes.
Speaker 1
It is doing exactly this thing. And so if you don't have a policy in mind for how you want to handle that before you launch it, I think you're doing something irresponsible.
Speaker 2
Okay, so the estate of Martin Luther King Jr. is mad at OpenAI over Sora. Who else is mad at OpenAI over Sora?
2. Hollywood Rejects Sora
Speaker 1
Well, Kevin, that brings us to Bryan Cranston, who presumably was minding his own business down in Albuquerque, making methamphetamines, when all of a sudden he opens up the Sora app and finds himself in videos with Michael Jackson and Ronald McDonald, which is what we like to call around here a nightmare blunt rotation.
Speaker 2
Now, I have not seen these videos. What do they show?
Speaker 1
I actually haven't seen them myself because I don't want to support Ronald McDonald that way. I think he has a lot to answer for.
Speaker 2
Yeah.
Speaker 1
So here's why this is a problem. This was supposed to be an opt-in regime. If celebrities' images were going to appear in Sora, they were supposed to have to opt in. But as Winston Chough reported at The Hollywood Reporter last week, that's actually not what happened.
Speaker 1
Days before the release of Sora, OpenAI went to the big talent agencies and the studios and said, “Hey, if you don’t want all of your intellectual property in our app, you have to opt out,” which companies like Disney were responding to with statements saying, “That’s not actually how copyright works.”
Speaker 2
Right.
Speaker 1
You don’t have carte blanche to do whatever you want with our IP unless we opt out. And so this starts to get people in Hollywood really mad.
Speaker 2
Got it. So I saw the statement from Bryan Cranston and SAG-AFTRA, which is the union that represents actors and a number of other talent agencies, basically saying, “Hey, we don’t like this.” But what are they saying about how OpenAI has been approaching them? Because OpenAI, from my understanding, did actually try to go to Hollywood before this app came out and say, “Hey, just FYI, we are going to be releasing this, but we have taken steps to get ahead of some of the issues we think you might have with it.”
Speaker 1
That’s right, but in practice this just was not true. People were able to create videos of Pokémon, Star Wars, Rick and Morty, and other intellectual properties whose owners had never given their permission. Bryan Cranston had not given permission for his likeness to be used in the app, and so you wind up having a lot of what OpenAI calls—I always love these euphemisms that these companies use—“unwanted generations.” And I was like, “Like Generation Z?” But it turns out that, no, this is about unwanted videos appearing within the Sora feed.
Speaker 2
Right.
Speaker 1
So it’s very funny to me to come out afterward and say, “On reflection, we’d like to strengthen the guardrails,” when in fact there were no guardrails. You know what I mean? If I drive my car off the side of the road because there’s no guardrail and the California Department of Transportation says, “We’re going to strengthen these guardrails,” I’m saying, “Where was the guardrail?”
Speaker 2
Right?
Speaker 1
I’m dead, and I’m shouting at you from hell, saying, “Where was the guardrail, Kevin?”
Speaker 2
Right. There is a lot of false naivete—
Speaker 1
Naivete.
Speaker 2
—or just people feigning surprise.
Karen Weise
Yes.
Speaker 2
Like, “I cannot believe that my unauthorized generation app is causing problems—
Speaker 1
With unauthorized generations.
Speaker 2
—over unauthorized generations.” It’s crazy.
Speaker 1
That’s it. I am so glad you said that, because this is the thing that has got me so exercised over the past week. It is that phony naivete. It is this, “Wow, who could have ever predicted this?” Because that is just an approach that I think, if you apply it to building AI products in the future, is going to take us to some very bad places.
3. The Sora Backlash Spreads
Speaker 2
Okay, so OpenAI is dealing with this backlash. I think there’s a larger backlash brewing over just AI-generated video.
Speaker 1
Mm-hmm.
Speaker 2
And I’m curious what you make of this. I think there is starting to become a consensus position, especially among people who are not in San Francisco and do not work in the AI industry, that all of this is bad, stupid, and harmful—
Speaker 1
Yeah.
Speaker 2
—and that the juice is not worth the squeeze, as it were.
Speaker 1
Yeah.
Speaker 2
The benefits of AI, whatever they might be in the future, are not enough to justify the enormous costs of training these models. There is something soulless and depressing about people using AI to generate fake videos of Martin Luther King Jr., Bryan Cranston, and Ronald McDonald doing various things. I’m curious whether you think the Sora backlash is part of that, or whether what we are seeing is one manifestation of a preexisting thing where people were already mad about this stuff.
Speaker 1
We are going to have to get survey data to develop an empirical answer to that question, but we know from a recent Pew survey that already about half of Americans say that they are more concerned than excited about the future of AI. And my assumption is that the Sora backlash is going to fuel that. When I just look at my own interactions with friends and family, the default feeling about Sora is not, “What a fun new creative tool.” It is, “This is bad and I hate it.” And by the way, these aren’t even necessarily people who are up in arms about what’s going on with MLK and Bryan Cranston. This is just giving them the ick.
Speaker 2
Yeah. I mean, to me, this just seems like a continuation of this pattern at OpenAI that extends back to the launch of Advanced Voice Mode last year, when you can probably remember Scarlett Johansson objected to references to the movie Her. OpenAI had basically approached Scarlett Johansson and said, “Hey, would you like to be supportive of or involved with this launch? Could we explicitly tie this to your character in the movie Her?” She said no. They went ahead and did it anyway.
And it seems like that is something that they have continued to do. Rather than being chastised by that and learning from that experience and saying, “Hey, maybe it’s important that we have the permission of the creators in Hollywood before we go out and do something that’s potentially disruptive to them. Maybe we should get their permission,” it seems like they have not learned that lesson.
4. OpenAI Chooses Speed
Speaker 1
That’s right, and that’s really where I want to land this. This is why I think all of this matters: I think that in building any kind of novel technology, inevitably companies are going to make mistakes. They’re going to go too far in some regard. There’s going to be some problem that they didn’t anticipate. And it’s bad, and we should talk about it, but I think companies can come back from that.
But then there are other companies that just start to make the same mistake over and over again, right? You bring up the Scarlett Johansson issue, which I think partly came out of a rush to release this voice mode into the general public. And look at what else we have seen over the past year. I think there was a similar rush to update GPT-4.0 with what turned out to be a very sycophantic update that was embarrassing to the company.
There was a rush to release ChatGPT in ways that cut users’ access off to tools that they had become very dependent on, and it triggered this huge backlash. And now here they are in this rush to release this video app, in part because they want to make money, the company has said. And lo and behold, they either have not thought through the policy implications, or they’ve just decided to build a policy that could only possibly bring them a huge backlash. So I look at that, Kevin, and I fear that this company has actually changed a lot over the past couple of years, right?
Speaker 2
How do you think it’s changed?
Speaker 1
Well, if you look at them before the launch of ChatGPT, and even in the few months after that, this was a company that was talking a lot about, on one hand, wanting to introduce new technologies to the public to see how society would adapt, and to do that in a way that was too aggressive for some people but I think was basically working out okay in the original ChatGPT era.
Sam Altman was going around Washington meeting with senators, saying, “Hey, we’re building something that could be really dangerous. We want guardrails around this. We want you to pass regulations that rein us in.” And then you just fast-forward to today, and it’s this all-out war between a handful of companies that are trying to build AGI faster than the other guy.
We are just seeing in real time not just guardrails being removed; we are seeing guardrails not being built, and the company having to come in afterward and say, “Oh, hey, sorry about that. Yeah, we’re going to do something. We’re hearing your feedback.”
And the thing that just shocks me about that is I actually believed for a time that Sam Altman had taken the lessons of Facebook and the social media backlash. He had seen everything that had happened to Mark Zuckerberg. He said to himself, “I am not going to make those same mistakes.” And now we are just seeing OpenAI do the full Facebook when it comes to content policy.
Speaker 2
Well, and I would say 2 things about this strategy of OpenAI’s. One is, it is brash, it is risky, it is likely to lead to lots of backlash and people being mad at them, and I think it is potentially correct. I mean, what we’ve seen over the past few years is that there are not a lot of real restraints on companies that want to build and release technology this way.
I think the real risk to OpenAI is that people just end up losing faith in AI as a whole. And as we’ve talked about recently on this show, the entire economy now kind of rests on this belief that AI is growing more powerful, that it will soon deliver all of these tangible economic, social, and scientific benefits to people, that it is not just hoovering up a bunch of people’s data and using it to make slop.
And if that’s what the public image of this stuff becomes because OpenAI has adopted this product strategy, I think that will be bad for the whole AI industry, but probably not especially bad for OpenAI.
Speaker 1
Yeah, I mean, I think that is a fairly cynical view, Kevin. It’s true in a lot of ways. We are in the “LOL, nothing matters” era of content moderation. And I am just reflecting once again on how we used to have a world of business and politics where people would go to great lengths to avoid feeling shame, and at some point in, let’s say, the past decade, we just decided we’re not going to care about that anymore, and no one can make us feel ashamed for any reason.
Speaker 1
And for the moment, I guess the only real impact we're seeing here is that a few copyright holders and families of historical figures are annoyed by videos that they're seeing online. But this is the company that continues to build ever more powerful technology. When GPT-7 comes out and is helping novices build novel bioweapons, I don't want there to be an X post saying that, based on recent pandemics, the company has decided to build some guardrails.
Speaker 2
Right. I mean, I've been talking with a few people in and around OpenAI about this over the past few weeks, just taking the temperature of how folks over there are feeling about this, and a couple of things that I've heard that I want to run by you for a reaction.
One is that this is a company that does not have the benefit of having hundreds of billions of dollars a year in search revenue flooding in the door that it can use to build AI stuff. That is the situation that Google, its next-biggest competitor, is in. They basically don't have to care about money. They can spend all of their profits on curing cancer and building quantum computers, self-driving cars and whatnot.
But OpenAI doesn't have that luxury, and so they have to figure out ways to pay for their enormous ambitions. Not all of those are going to be obviously prosocial and beneficial things, but the ends will justify the means, just as Google spent many years, they say, building up this monopoly and doing all sorts of unsavory things in order to get the profits that they can then plow back into the peace dividend of AI research.
Speaker 1
I reject that for 2 reasons. One, this company's stated mission is to build AI that benefits all humanity. So if the argument is, in order to benefit all humanity, we have to harm some of humanity, get a new mission statement, girl. Come on.
Number 2, I also reject the premise that they have some cash crunch. Sam Altman is the greatest fundraiser in the history of Silicon Valley. This company has access to all the capital it needs. So don't tell me that you need to release the infinite slot machine that makes Bryan Cranston cry in order to build your machine god.
Speaker 2
I don't think Bryan Cranston is actually crying unless that Sora video I saw was legit.
But another thing that I hear from people at OpenAI is about what they call iterative deployment, which is one of their favorite catchphrases over there. They basically believe that instead of keeping all of this research and all these capabilities cooped up inside the lab and then releasing them all at once every few years, we should have a steady drip of new capabilities from these companies that helps the public update about what is now possible with AI.
One defense of Sora that I've heard from people over there is they'll say, “Look, this technology exists. These video models are getting quite good, and we could either spring this on you all when it is impossible to tell the difference between fake and real, without any of these safeguards, or we could release it in this iterative way, where we give the world a chance to adjust and catch up and have these conversations and arguments about likenesses and copyright and prepare the world for this new capability that exists. That is the responsible thing to do.” What do you make of that?
Speaker 1
I just think that there are so many more responsible ways to do it than saying there is now an app where anyone can go on and make a video of Martin Luther King barbecuing Pikachu. You could make whatever deepfakes you want and put them on a website and say, “Hey, look at the terrifyingly real deepfakes we were able to make with this technology. We're not going to release it to the public, but just so you know, if you start seeing videos out there that seem like maybe they didn't happen, maybe they didn't.”
Or you could say, “We're going to make this available in our API, so developers have access to it. But we're going to closely monitor how developers are using it, and if there are bad actors in our development ecosystem, we are going to get rid of them.” Those would be 2 alternatives to just saying, “Hey, everybody, go fricking nuts.”
Speaker 2
Right. Yeah, I think those are both good responses. I don't find any of the defenses of Sora from the OpenAI folks I've talked to all that compelling. But I think they are learning a lesson, actually, from the social media companies, which is: You do something bold and brash with very few guardrails, people get mad at you about it, and you scale it back 10%.
But you've still taken that yardage, even if you have to turn the dials and install some guardrails after the fact. You've still gotten what you came for, even if you end up having to make some compromises.
Speaker 1
Yes. And when I look at this story, I just see exactly what YouTube did in its early days. YouTube also started out by saying, “Hey, why don't you just upload whatever you want onto our website, and we're just going to take for granted that you have the copyright over whatever you're uploading?”
Eventually, Viacom comes along and says, “There are more than 100,000 clips of our TV shows and movies all over your network, and we're going to sue you for a billion dollars.” This wound up being a costly legal battle. It went on for a very long time. It was eventually settled, but during the time it took for that case to settle, YouTube became the biggest video site in the world, and it won the whole game.
So I think there is a very cynical rationale for everything that we're seeing OpenAI do, which is saying, “Hey, we have the opportunity to go get all that market share. We're going to do it.”
Speaker 2
Yeah. It's what they call regulatory arbitrage, right?
Speaker 1
That's one thing you could call it.
Speaker 2
What else would you call it?
Speaker 1
Well, this is a family program. I'm going to try to be polite.
Speaker 2
Okay, so that is the next turn of the screw in the Sora story. What are you looking at with this story going forward?
Speaker 1
Here is what I'm looking at going forward. OpenAI, for better and for worse, is a company that is shipping a lot of products. We're going to talk about another one of them later in the show, right? This is an organization that has figured out how to build and release new stuff, and that stuff does some really cool stuff and, as with Sora, does some pretty gross stuff.
I think the thing to keep your eye on as these new products come out is whether this company is truly paying attention to responsibility anymore, or whether the entire ethos of the company is now just a land grab for as many users across as many surfaces as it can get. Because if that is going to be the new MO for this company, then I think we need to be a lot more worried about it than at least I personally have been to date.
Speaker 2
Yeah, I think they are in a real throwing-spaghetti-against-the-wall phase here, and I think that is reflected in just how many things they're shipping constantly, with seemingly a new product or 2 every week. Some of it will work, and most of it probably won't.
But one of the best pieces of advice I ever got about journalism was that the stories you don't write are as important, if not more important, than the stories you write.
Speaker 1
Hmm.
Speaker 2
And I think OpenAI has not learned how to say no to a new idea or a product or a business line yet, and I think that's a skill that they should start developing. It seems like they are spreading their bets quite thin. They are throwing a lot of spaghetti at the wall, and maybe they're losing the plot a little bit.
Speaker 1
Now, is that advice why you write so few stories?
Speaker 2
Yeah. Yes.
Speaker 1
Okay. Interesting.
Speaker 2
Yes.
Speaker 1
That editor—
Speaker 2
I'm very proud of the stories I don't write, though.
Speaker 1
That editor really did a number on you.
Speaker 2
Yeah.
5. Amazon Targets Full Automation
Well, Kevin, there's a new story out there about robots, but some people are not saying “Domo arigato.”
Speaker 1
That's right. Of course, I'm talking about Karen Weise's story this week in The New York Times, saying that Amazon plans to eliminate a bunch of jobs using robots.
Speaker 2
Yes, this was a big story this week, and I'm very excited to have Karen on to talk about it. The basic idea here is that Amazon has made plans—plans that it has not shared with the public—to replace more than half a million jobs with robots. And Karen, my lovely colleague at The Times, got hold of some of these internal strategy documents in which they are laying out these plans, and this story has been causing a big stir.
I think people are fearful of job loss from AI and automation right now. That's obviously been a big topic in the news, and what we're seeing now is one of America's largest employers saying in its internal documents, “Yeah, we're doing it.”
Speaker 1
That's right. It's one thing over the past couple of years to have discussed, as we often have on this podcast, the risk that this technology will someday be good enough that a lot of people will be put out of work. It is something very different to see America's second-largest private employer saying, “We have an actual plan to make this happen.”
Speaker 2
To talk about this story and how Amazon is racing toward its goal of full automation, we're inviting back New York Times reporter and friend of the pod Karen Weise. She's been covering Amazon for nearly a decade for The Times and recently visited a warehouse in Shreveport, Louisiana, where they are putting a bunch of their new robotics to the test.
Speaker 1
And I think it's a Prime Day to talk with her.
Speaker 2
Oh, I get what you did there.
Speaker 1
Yeah. Karen always delivers.
Speaker 2
Karen Weise, welcome back to Hard Fork.
Karen Weise
Happy to join you guys.
Speaker 2
This was a fascinating story. I really enjoyed it and learned a lot from it. It caused a big stir. I heard lots of people talking about this plan that Amazon has to replace a bunch of jobs using robots, and I want to start with how you decided to look into this, because this is a subject that people have been talking about for many years.
Amazon has obviously been putting robots in its warehouses for a long time. Casey and I went to an Amazon warehouse last year and saw what looked to be like a huge fleet of robots moving around, picking up containers and bringing them to people who would pick things off them and put them in boxes. But what made you think that this was taking a step forward that was important for you to write about?
Karen Weise
Yeah, I've covered the company since 2018, and it has more than tripled its head count since then.
Speaker 2
Mm-hmm.
Karen Weise
There was this period of tremendous growth, and then it started plateauing, or almost plateauing. You could see every quarter when I covered earnings that this huge growth, particularly in the early days of the pandemic, started slowing a lot.
The company itself has been talking a lot about its innovation and the advancements it's making in robotics. They use the term “efficiency” to talk about it. They don't like talking about the job side of it. But it's just one of those trends that was out there waiting to be dug into, and I finally had time to look into it, basically.
Speaker 1
Tell us a little bit about the document you obtained and some of the more surprising plans that Amazon announced in it.
Karen Weise
There was a mix of documents that I was looking at, and some were more concrete. The core of it is an important strategy document from the group that does automation and robotics for the company, which really lays out what their plans are.
There's a chunk that's looking at the way they try to manage their head count. They talk about things like bending the hiring curve. It had been growing so much, and their stretch goal is to keep it flat over the next decade, even as they expect to sell twice as many items.
They have this ultimate goal of automating 75% of the network. I think of that as the big-picture, long-term goal, versus that happening tomorrow. All of this is slow, step-by-step changes that add up together.
The other documents describe these really interesting ways in which the company is internally looking at how to navigate this publicly—with employees and with the communities they work in. This is obviously a very sensitive subject.
Speaker 2
Mm.
Karen Weise
They talk about debating ways to manage this. Should we not talk about robots? Should we talk about a cobot, which is a collaborative robot? They talk about whether they should deepen their connection to community groups, doing more things like Toys for Tots or community parades, particularly in places where they're going to retrofit facilities.
They're going to take a normal building that might employ a certain number of people and convert it to a more advanced one. They'll need fewer people in many of those.
Speaker 2
Basically, they're thinking through how to manage the reputational fallout if they become known as a company that is replacing a bunch of jobs with robots.
Speaker 1
Yeah, and the plan is you won't have a job anymore, but your kid will get a free toy at Christmas. So hopefully that makes up for that.
Speaker 2
Let's talk about the first group of documents here and some of these numbers that Amazon has attached to this. A few numbers from your story stuck out to me. One is that Amazon projects that it can eventually replace 75% of its operations in these warehouses with robots.
What percentage of this stuff is already automated today? Because when Casey and I went, it looked like there were a lot of people there and a lot of robots, and the people were essentially acting as robots, right? They were taking instructions from machines and putting things—thing A into box A—and doing that as fast as possible.
Speaker 1
Yeah, not a lot of creative expression in the Amazon warehouse we were at.
Speaker 2
What amount of robotics growth would it take to get from where they are currently to 75% of their operations?
Karen Weise
Sure. This warehouse in Shreveport, Louisiana, that I visited is considered their most advanced one, and they say that it has about 25% efficiency. Their goal is to quickly get that to 50% in that facility.
To get to something like 75%, it's not only about these individual buildings, but also about expanding it throughout the different types of facilities that they operate.
In the facility you went to, there are these cubbies that keep products, and over each one they have this light. It's a big tower of a bunch of cubbies, and the light shines on the exact cubby that has the item you want. So instead of looking through the cubbies, you know exactly which one to put your hand in.
Speaker 2
Mm.
Karen Weise
There are things like that that make it a lot more efficient in all different types of jobs. There are many different types of jobs in these buildings. But some things are harder for robots to do, and one of the things that interested me in Louisiana was a job called decant.
Essentially, they get these boxes of products in from Marketplace sellers—the companies that sell products on Amazon—and they have to input them into the system. It's essentially a point where you get the chaos of the normal world that they have to standardize.
Watching a decant station, we watched this woman working at it, and it is just random what goes into this thing. We saw gardening shovels wrapped in bubble wrap, boxes of Starbucks Keurig cups, and circular saws. Each one is different, and they're coming in different shapes and different boxes.
That's still hard for a robot to look at and say, “Is this product what we expected it to be from this shipment? Is it damaged in any way?” If it's damaged, it goes into a separate box, and someone has to deal with that. So there's still a lot of human judgment.
But once they put it into this box, it can go out into the system. Then it starts becoming more locked into the Amazon way and able to be managed as they develop the technology within their own spaces.
Speaker 1
Let me ask about this 600,000-worker figure that's in your story, which is really the thing that got my attention. I could not think of another company that had announced plans to eliminate hundreds of thousands of jobs through automation within just a few years in such a plausible way.
Had you thought this might be one of the first major signs of significant job loss due to automation in the U.S. economy?
Karen Weise
I spoke with a Nobel-winning economist for this—
Speaker 1
Okay, flex.
Karen Weise
—and he studied automation. He was saying that the real precedent for this is actually in China—
Speaker 1
Mm.
Karen Weise
—in manufacturing in China. But within the U.S., yes, this is the bleeding edge of it all.
Speaker 2
There are obviously labor and cost-savings reasons why Amazon wants to make this big push into automation now. But I'm curious, Karen, if any of this is driven by recent advances in the technology itself. Have the robots just gotten better over the last year or two? Do we think that's part of what is making them put out this ambitious plan and talk about how they want to start opening these facilities?
Karen Weise
Actually, about a year ago, they acquired Covariant, which was a leading...
Or, excuse me, not acquired: a license-for-hire agreement, as these kind of new-fangled things are. So they hired the team behind Covariant, which was a leading AI robotics startup.
A lot of what I reported on actually predates that being integrated into the system. So there are actually tons of advancements happening in computer vision, in creating the environment and the data needed to just tell the robot what to do, essentially. But I think we can expect more in the future from what I reported because of Covariant.
For example, one of the things that they've helped improve is how the robots stack boxes. I saw that there's a robotic hand called a Sparrow, and it uses suction cups to consolidate inventory currently. So they'll take a bottle of hand soap from here and move it to there, and then they free up that extra space to put new items into the storage facilities.
The robot stacks them really nicely. They don't just drop them in the bin; the boxes are lined up one by one and stood up, and I noticed those boxes stood up. That's important because then it's easier to grab later. Those are the types of advancements that they've already started seeing from this next generation of AI. So I think I would anticipate seeing more of that.
Speaker 2
Mm.
Speaker 1
Is it true that they also have technology that uses air to blow open envelopes?
Karen Weise
Very sophisticated technology.
Speaker 1
Yeah.
Karen Weise
Yes, that's a fan. That's what I love about this. It's—
Speaker 1
Yeah.
Karen Weise
—simple things, too. It's not all crazy and elaborate.
Speaker 1
Well, that was really sad for me because that's actually my dream job. But it looks like the robots are gonna have to take this one.
Speaker 2
Instead, you just blow hot air in the podcast studio.
Speaker 1
That's right. Now I have to podcast because I can't blow the envelopes anymore.
Speaker 2
No, so I went to Covariant's lab. Before they were acqui-hired by Amazon, they had a warehouse in the East Bay here, and I went to visit them a while ago.
They were doing these more advanced types of warehouse robotics where they would put a large language model into one of these robots and use that to orchestrate the robot. That made it, they said, possible to do things that a simple, more rule-based robot couldn't do. You could tell it, “Move all the red shirts from this box into this box,” and it could kind of do stuff like that.
So you're saying, Karen, that that technology has not yet arrived in these Amazon facilities even though Amazon now has licensed this technology?
Karen Weise
It has begun to. So they had some of that for sure—absolutely, they had that—and they've talked about using that type of technology with these little robots, or little shuttles. They're kind of small, like the size of a stool or something, and they just move individual packages around to sort them. They've been able to move those more efficiently because of it, for example. It lets them orchestrate each other better so they don't bump into each other, essentially.
Speaker 2
Right.
Karen Weise
So, yeah, there is some of it for sure, and I think you'll be able to see more of it.
Speaker 2
I'm curious, Karen. You write that these documents you got a hold of show that Amazon's ultimate goal is to automate 75% of its operations. What's the remaining 25%? What are the jobs inside these facilities that they do not see being automated at least anytime soon?
Karen Weise
Well, there will be this growing number of people who are technicians, essentially working with the robots themselves, and this is—
Speaker 1
Fix the robots.
Karen Weise
—fix the robots, tend to them, exactly. And those are jobs they talk a lot about. It is both a concern that they have enough people doing those jobs and that there aren't enough people trained in that right now, so they need a labor force for that. They make more money. They are better jobs in many ways. They have more of a career path than a typical Amazon job might, so that's one component of it.
There's also just exceptions. I mean, watching the robots move, they'll pick something up and it'll fall. I saw them try to grab this shrink-wrapped bag of T-shirts or something, or underwear, and it was just the suction trying to pick it up. Eventually it fell, and it kind of fell half on the robot, half on the side, and so it stopped, and then someone would have to come and move it.
Or something just isn't applied correctly, and someone needs to tend to it. So there are still roles like that that I think will be almost impossible to get rid of over time.
Speaker 1
Yeah, it's the classic thing of things that are easy for robots are hard for humans and vice versa, right? It's pretty easy for a human to grab something that a robot can't pick up.
Speaker 2
I was struck by one other number from your story, Karen, which is that Amazon in these documents says that it thinks automation of its warehouses would save about 30 cents on each item. That actually seemed quite low to me. If that's—
Karen Weise
Really?
Speaker 2
Yes. I'm just thinking, if you don't have to pay workers anymore and that's your biggest expense, why aren't they expecting more savings from this?
Karen Weise
I think 30 cents per item in a couple of years—I believe that was a 3-year timeline—is actually just a lot, as a percentage of what they spend fulfilling and getting the packages to the delivery driver, basically. And it's a business—someone described this to me the other day—of cents because it's so big that you're looking at shaving cents off of things.
When you multiply that by the billions of items that they sell, it does add up, and people are increasingly making smaller purchases on Amazon. It's not just what it used to be 10 years ago or 5 years ago. You're buying the random bottle of hand soap, like I talked about, or, “I forgot this one thing; I'm gonna order it.” And if Amazon can save it, some of that will go back into profit. Some of that will be reinvested in the business. Some of that will decrease prices. It kind of flows through in different ways.
Speaker 2
Mm.
Karen Weise
Speaker 2
Yeah. What else did you find out in these documents about how the company is trying to prepare not just its warehouses for an age of increased automation but also position itself in the communities where it operates?
6. Amazon Manages the Fallout
Karen Weise
Yeah, it knows that this is very sensitive, and the company used to not do anything in the communities that it operates. This company was MIA from ribbon cuttings years ago, but now they have a really sophisticated community operation. They're on the boards of the chamber of commerce. They sponsor the local toy drives, all that stuff.
And so there's clearly this internal grappling with how to manage this change, and it's most acute in a facility that undergoes a transition to be more efficient and more automated. I wrote about this facility in Stone Mountain, Georgia, that will have potentially 1,200 fewer workers once it's retrofitted. Amazon said the numbers are still subject to change, it's still early, et cetera. But that construction is happening now.
So they're brainstorming: How do we manage this? And this is a phrase from the documents: “control the narrative around this.” How can we instill pride with local officials for having an advanced facility in their backyard?
Speaker 1
How can we make them proud of the facility that we have here that no one works at anymore?
Speaker 2
Right.
Karen Weise
But I will say on that one, there are still going to be—I don't know—more than 2,500 people—
Speaker 2
Yeah.
Karen Weise
At least. It's not going away, and they need these community relations. And they are very adamant that our community relations do not have to do with the retrofit. They pushed back on this a bit and said, “We do these things all the time all over the country,” which is true.
But it's clear that they're trying to figure out how to manage this, particularly in these sensitive places where there's just going to be fewer jobs on the back end. They're not doing layoffs. That kind of helps manage the perception risk around it. It's just a highly sensitive topic.
This company is constantly facing little bits and bobs of unionization threats. Obviously, none has fully taken hold or at least gotten to the point of a contract, but all of that is intertwined and just deeply, deeply sensitive.
Speaker 2
I understand why Amazon is trying to do damage control here. This is going to make a lot of people very upset. I saw Bernie Sanders out there talking about your story, Karen, yesterday. People are starting to wake up to the fact that automation is imminent in these warehouses.
I guess my concern is that no one at these companies is being honest about what's happening. There's this private narrative that you have helped uncover, Karen, where Amazon is, in these internal documents, talking about how it wants to race ahead and automate all these jobs, and this is something that they're talking about amongst themselves.
And then in public, they're saying, “Oh, these will just be co-bots, and we'll just have these harmonious warehouses where humans and robots will work together.” It drives me crazy because I think we can accept as a country the idea that jobs will change and potentially disappear because of automation, but I think we have to have an honest conversation about it. We have to give people the chance to prepare for the possibility that their jobs may disappear, and all that just gets harder if you have this corporate obfuscation and all these euphemisms going around. It just becomes much harder for everyone to see what's happening.
Speaker 1
They really could take a page out of the AI labs' playbook and say, “Hey, we're here to completely remake society with minimal democratic input, and there's nothing you can do to stop us.”
Speaker 2
I'm not saying that's the best plan either, but at least that's clear.
Speaker 1
I agree.
Speaker 2
At least that gives people a sense of, “Oh, my job may be in danger. I should probably learn to do some other job.” It just kills me that there's this literal corporate conspiracy going on to automate potentially millions of jobs across the country in the next few years, and no one can just be a grown-up and talk about it.
Speaker 1
I agree with you, and while I think through the implications of that, Kevin, I'm going to start looking into how to repair a robot—because it seems like that's going to be a growth area for the economy.
Karen Weise
Amazon, it's funny. I just want to say, they have some programs. They have this program. They've had it for a long time. It's a community-relations type of thing. It's called Career Choice, and it's explicitly about training people for other industries.
Speaker 2
Mm-hmm.
Karen Weise
It's about your exit ramp, and so in some sense, all these pieces are out there. I remember I was talking to an employee about this story before it was coming out, and I said, “I think they're not going to love it.” The guy was like, “Why?” Because this is just what the work is. It was kind of funny. There are these different mentalities in different spheres, and a lot of it is actually just laying out there.
It's just using different language and different context, and again, they have this program to train people. People go through it. They become health care aides or whatever it might be. It's just this really funny dance that happens.
Speaker 2
But they are not, Karen, announcing this themselves. You had to get these documents—
Karen Weise
No, no—yes.
Speaker 2
—from inside the company.
Karen Weise
Yes.
Speaker 2
And my understanding is that they are not happy that you reported this. Talk a little bit about their reaction—Amazon's reaction—to this reporting and what they are saying in response.
Karen Weise
Yeah, broadly, I would say they're not refuting the reporting. They are saying that it's not a complete picture, that essentially the automation team has its goals. There might be another team somewhere else that has something that increases employment. So they point to this recent expansion to make more delivery stations in rural areas, which will create more jobs in local rural areas and better service for places that historically have not had as quick a delivery.
They basically are not refuting it but also saying more could be coming, with the phrase, “The future is hard to predict,” while saying that our history has shown that we take efficiencies, we take savings, we invest them, and we grow, and we create new opportunities both around the country and for the company and for customers. The bigger-picture argument that they're making is not that this automation isn't happening or that the numbers are inaccurate. It's nothing like that. It's just that it's not the big-picture number for them.
Speaker 2
Hmm. Well, Karen, thank you so much for giving us a preview of the future. I look forward to the co-bot collaboration.
Karen Weise
Anytime, guys.
Speaker 1
Thanks, Karen.
7. ChatGPT Atlas Targets Chrome
Speaker 2
Well, Casey, at last, we're going to talk about Atlas, ChatGPT Atlas, the new browser from OpenAI.
Speaker 1
And there's a lot to talk about, Kevin.
Speaker 2
Yes, so OpenAI released ChatGPT Atlas this week. It was a big announcement, got a lot of attention, and this is becoming an increasingly crowded field. One of the more competitive product spaces in Silicon Valley right now is the browser, which is unusual because this is an area where there has not been a lot of competition for many years.
Speaker 1
No, this has been a very sleepy category that's basically locked up, with Chrome having the majority of the market share—Google's browser. There's also Microsoft Edge and Firefox, but this has been a pretty sleepy corner of the internet for a long time.
Speaker 2
Until 2025, that is, because now everyone and their mother is releasing an AI browser, and ChatGPT Atlas is a very ambitious product. We should talk a little bit about what it is and what it does. I know you've spent some time testing it, and I want to ask you about that.
Speaker 1
I didn't realize your mother had released an AI browser. I have to check that out.
Speaker 2
She's very ambitious. She's shipping a lot.
Speaker 1
Mm-hmm.
Speaker 2
This browser, ChatGPT Atlas, is being billed as a full-fledged web browser built around the interface of ChatGPT. It was released this week. It's available only for macOS users and will later be brought to Windows, iOS, and Android.
Speaker 1
Yeah, the fruits of that Microsoft partnership just continue to pay off—for Satya Nadella.
Speaker 2
This is a browser that's built on Chromium, the open-source version of Chrome that Google released, which is powering a lot of these different AI browsers. Like a lot of other AI browsers, it has an AI sidebar in every tab that you open. You can click a little button to bring up a ChatGPT window. You can ask questions, have it summarize articles, and analyze what's on screen.
It can also remember facts from your browsing history or tasks that you've done in ChatGPT because it's linked to the same ChatGPT account that you use the rest of the time. For Plus, Pro, and Business users, it can enter what's called Agent Mode, which is a mode where it can actually carry out tasks for you: put things in your shopping cart, fill out a form, navigate a website, or book a plane ticket for you. A few weeks ago at DevDay, OpenAI showed off these new ChatGPT apps, basically trying to bring things like Zillow and Canva into the ChatGPT experience. This browser project is essentially trying to do the same thing from the opposite end.
Speaker 1
Yeah.
Speaker 2
Rather than bringing the internet into ChatGPT, it's putting a ChatGPT layer over the entire internet.
Speaker 1
Yeah, I mean, think about it from OpenAI's perspective. A really significant portion of ChatGPT usage is taking place inside the browser. Most people are using a browser made by Google, and Google's browser, Chrome, is mostly a vehicle to get you to do Google searches. So that works against OpenAI's interest. If they can create their own version of the browser, which gets you to try to do more ChatGPT searches, that has a lot of benefits for OpenAI.
Speaker 2
Yes. All of these companies are now trying to make these very capable AI agents. One of the things that AI agents need to be able to do if they're going to be useful for office workers or people doing basic tasks is to use a computer. What do you need to train an AI model to use a computer? It probably helps if you have a bunch of people using a browser, and you can collect the data from those sessions and use it to train your computer-use models.
For OpenAI, Perplexity, and all these companies, this is a play to gather data about how people use the internet and maybe make their agents more efficient over the long term. That's sort of the why here. Now, Casey, you have tested ChatGPT Atlas. Tell me about your experience and what you've been using it for.
Speaker 1
Yeah, so I've been trying to just use it for everyday things.
I wrote my column in ChatGPT Atlas yesterday, and the main thing that I observed on the positive side is that there is some benefit to just having an open chatbot window inside the browser that you can ping quick questions off of, right? I do a lot of Alt-Tabbing back and forth between different apps. I do a lot of getting lost in the 50 tabs that I have open, trying to find where I have ChatGPT open. Usually, I've just opened 3 or 6 different tabs with different chatbots all at one time.
So I have come to see the value in just having a little window that opens up that you can chat with ChatGPT directly.
Speaker 2
Yeah. And have you had it try any of these Agent Mode tasks?
Speaker 1
Yeah, I have. And I want to say that I do think that companies' imaginations are so limited here. You would truly think that the only 2 things that people do in a browser, according to Silicon Valley, are booking vacations and buying groceries.
Speaker 2
Yes.
Speaker 1
With maybe making a restaurant reservation thrown in for good measure. But I thought, “Okay, what the heck? Let me see if I can get this thing to book me an airplane ticket.” And so I had it go through that process, and what did I find? Well, it was much slower than I would have done it myself, and ultimately, it picked flights that I would not have chosen for myself.
So does it remain an impressive technical demonstration of a computer using itself? Yes. Is it useful to me for any actual purpose? No.
Speaker 2
Yeah, I've found largely the same thing. I haven't spent that much time with ChatGPT Atlas, but I have been using Perplexity's Comet, which is, I think, the closest thing that's out there to what OpenAI has built here. And yeah, I have not found the agent tool all that useful.
I do use it a lot for things like summarizing long documents. It can tell you about a YouTube video that's pulled up on your screen. So, various summarization and retrieval, but not so much for the agent stuff. That just doesn't work that well yet.
Speaker 1
Yeah.
Speaker 2
There's a third AI browser that we should talk about. This is Dia. We've talked about it a little bit on the show, I believe. This is from the Browser Company of New York, and this is a recent acquisition. They got acquired last month by Atlassian for $610 million in cash, which I have to say was very good timing on this acquisition. I think if they waited another week or 2, it would not command nearly the price tag it did.
Speaker 1
I think this is honestly one of the most shocking acquisition prices of the last 10 years. This is a product that had vanishingly few users relative to the competition and sold for a staggering amount of money.
Speaker 2
Yeah. Good outcome for them. But I think this whole category of the AI browser is really interesting, in part because part of me feels like these companies are just doing free product research for Google. I think inevitably what will happen here, and what is already starting to happen, is that whatever people like about these AI browsers, Google will just incorporate into Chrome.
We have already seen them taking steps to integrate Gemini more closely into Chrome. So now on Chrome, if you click the little Gemini button and pull that up, you can have it summarize things and read articles for you, rewrite your emails, and do all those kinds of things. It can't yet do the sort of agentic, take-over-the-computer things that some of these other tools can, but Google is making that product. It just hasn't put it into Chrome yet.
Speaker 1
And I think that's particularly true, Kevin, because, as you noted, all 3 of these AI browsers that we're talking about today are based on Chromium, and the Chromium experience is, I don't know, 80 or 90 percent just Chrome, right? There's not a lot of daylight in between the open-source version and the version that you download off the Chrome website.
And so if you're one of these developers who's trying to build your own AI browser, you're already having trouble, I think, differentiating yourself from the thing that people are already used to. That just makes your job a lot harder, because you have to come up with some really amazing stuff that Chrome can't do if you're going to get people to switch over.
Speaker 2
Totally. One thing that I've learned by switching over to Comet for the last few weeks is that it's incredibly annoying to switch browsers. You have to log in to all of your websites again. You have to store all of your passwords again. Even if you're importing all of your bookmarks and all of your data, there's still a lot of friction associated with that.
I don't know, people have been saying this week—I’ve heard some people say—“Oh, Google is going to look so stupid for putting Chromium out there because they've allowed all these competing browsers to spring up.” And that, to me, misses the point here, which is that Google has now made it possible for other people to test features for them and do product research for them. Whatever works, they can just fold into Chrome.
Speaker 1
Well, yeah. Also, releasing Chromium was part of an antitrust strategy. If we put this out there, then you can't accuse us of unfairly tying our products together. You want to make your own browser? We'll give you a 90 percent head start, right? So it was not pure generosity of spirit that led Google to open-source Chromium.
Speaker 2
Right. But if any of these AI browsers ever did pose an existential threat to Google Chrome and start to eat away at its market share too badly, Google could just stop supporting Chromium, and these companies would all have a lot of work to do to catch up.
Speaker 1
Oh, but think about what a great episode of Hard Fork that would be—the day that Google stopped supporting Chromium to get back at ChatGPT.
Speaker 2
Yes. So who is this for? Who is the target market for these AI-powered browsers?
Speaker 1
My actual, non-joke answer is that ChatGPT Atlas is a product for OpenAI employees. They spend all day long dogfooding their own product, and a lot of work takes place in the browser. So if you work at OpenAI, having a browser that is just ChatGPT, I think, is hugely useful to you.
Now, can they get from there to some broader set of users, like people who have made ChatGPT their entire personality? I think it's possible, but in this very early stage, with this first handful of features that they've released, I think the case is still a little shaky.
Speaker 2
Yeah. I played around with ChatGPT Atlas a little bit. I have some reservations about giving OpenAI access to all of my browsing data.
Speaker 1
Well, certainly your browser history.
Speaker 2
But I did play around with it for a little while, and I have to say, it's still pretty rough around the edges to me. There were just some websites that I wanted to go to that I couldn't.
Speaker 1
Yeah.
Speaker 2
I couldn't go to YouTube at one point. I couldn't go—at one point, I got a CAPTCHA on Reddit when I tried to go there. It could not summarize articles from nytimes.com. So there are just a bunch of things that it can't do.
And then I think because of the sheer force of habit, I'm so used to typing in websites in Chrome that I want to go to, like Wikipedia, and just having it go to the website. Now, instead of that, I get a ChatGPT response that's all about the history of Wikipedia, and it's like, I just wanted to go to freaking Wikipedia.
Speaker 1
Yeah. That kind of thing is really annoying, although I am sort of laughing to myself imagining ChatGPT hitting one of those CAPTCHAs and just thinking, “Man, if it isn't the consequences of my own actions.”
Speaker 2
Right. Who else might be interested in this? Is this a product that you have enjoyed testing? Are you finding any actual utility in it?
Speaker 1
Well, honestly, so far, not really. But do I think that there is a much better version of the browser that's powered by AI? Sure. It is really hard to dig through your browser history to find things that you sort of half-remember looking at a couple of weeks ago.
It is useful to be able to chat with open tabs about things and get quick answers from the web pages that you're looking at. And eventually, I do think it will be useful to have some kind of agent that can do things on your behalf, assuming it's able to hit some certain level of speed and quality that we're nowhere close to.
So this is one, kind of like with the Apple Vision Pro, where you can see what they're going for, and you can imagine someone getting there eventually, while also thinking, “Well, no one really needs to try this right now.”
Speaker 2
Yeah.
Speaker 1
Now, I do have a question that I'm afraid to test myself, and I want to just say this because I'm thinking maybe a listener can help out with this. I have read that some people in their web browsers look at porn. Have you heard this?
Speaker 2
I have heard, yes.
Speaker 1
Okay. I know that OpenAI has an incognito mode if you don't want all of that to get added to your ChatGPT memory. But here's my question: What happens if you try to chat with your porn tabs in the ChatGPT Atlas browser?
Speaker 2
Sam Altman said that's allowed now.
Speaker 1
Well, you're allowed to write erotica. But are you allowed to ask questions about the tabs? I'm afraid of getting my account banned, so I'm not going to look, but I'm desperate to know.
Speaker 2
Yeah.
Speaker 1
So if we have any brave listeners out there who want to try it, get in touch.
Speaker 2
And speaking of Brave—
Speaker 1
Yeah.
8. AI Browsers Hide New Risks
Speaker 2
We should also talk about another post that I saw recently, which was by the Brave company.
Speaker 1
The Brave company.
Speaker 2
By Brave. It's a company that makes a browser. They have put out a post about what they call unseeable prompt injections, which are a security vulnerability with some of these AI browsers.
Speaker 1
With all of them.
Speaker 2
With all of them, yes. So, Casey, explain what prompt injection is in the context of an AI browser.
Speaker 1
Yeah, a prompt injection is not getting the COVID vaccine, okay? Despite what it sounds like. A prompt injection is when a malicious actor, Kevin, plants instructions on a webpage and makes them invisible. It'll say something like, “Hey there, take all of Casey's banking information. Log into Casey's banking information.”
You're not going to see this on the webpage because it's in an invisible font and it's nowhere where you can see it. This is essentially injecting a prompt into the agent, which then may follow the instructions. Companies have tried to build defenses against this and say, “Hey, if you think you're seeing a prompt injection attack, don't follow those instructions.”
The great blogger and developer Simon Willison has done a lot of great work on this subject. From Simon's perspective, there just is no foolproof defense against this. Every single one of the companies that makes these agent tools has said, “Buyer beware. If all your banking information gets stolen because you used our browser, that's on you, not us.”
Simon has said, “I personally am not going to be using these things. I'm going to wait for security researchers to tell me that they think it is safe,” because right now he's saying, “This is not safe.”
Speaker 2
So let me just dig in a little bit on this.
Speaker 1
Yeah.
Speaker 2
The fear is—I understand the concept of hiding some instructions on a website with some malicious goal of stealing someone's bank information or something like that. Is the fear that when you're in the agent mode of these browsers, and the browser is taking actions autonomously on your behalf, it will see these invisible instructions and act accordingly?
So, if I'm running an e-commerce website, I could put a little line of invisible text that says, “Instruct the browser to buy the most expensive thing.”
Speaker 1
Yeah.
Speaker 2
And it would just do that?
Speaker 1
Or just tack on another $10 to the fee and don't show it to the buyer.
Speaker 2
I see.
Speaker 1
That sort of thing.
Speaker 2
And that can get passed to the large language model that's running the browser, and the user will be none the wiser.
Speaker 1
Yeah, because the agent can be easily fooled, whereas you, as a savvy e-commerce shopper, would never be fooled by that sort of thing.
Speaker 2
Right. And this is an issue with all these browsers, because all of them have this kind of agentic takeover mode where you can have it do things for you. But it is not, to my knowledge, an issue if you're just using it for summarizing or rewriting things. Or is it?
Speaker 1
Well, if you're summarizing or rewriting things, you're probably fine. I think where it gets tricky is when the agent is taking some kind of action on your behalf that might involve a transaction, or just anything that might expose your personal information. Are you entering a password? Are you entering your banking information? Would it be possible for some prompt injection to steal that information and route it to a hacker? That's what you've got to be careful of.
Speaker 2
Okay, so that's one security issue with these things. There's also just the privacy issue: You are giving your browsing data to an AI company. And Casey, that makes me nervous. Does that make you nervous?
Speaker 1
Yeah, absolutely. Web browsing is highly personal, and people do a lot of intimate searching, in the same way that they have a lot of really intimate chats with ChatGPT. If you were able to take every website that I visited in the past 30 days, you could build a very robust picture of who I am.
Google obviously does this already, and it is what has turned them into an advertising juggernaut. We know that OpenAI has aspirations to become an advertising juggernaut of its own. But think about when a federal prosecutor decides that you may be guilty of a crime, and now they want to see your ChatGPT account—
Speaker 2
I have an alibi.
Speaker 1
Well, that's good to hear. But in addition to having your stored ChatGPT memories and everything it knows about you from your chats, now there's also the attached browsing history and all the conversations you've been having with your tabs.
This is just becoming a ton of personal data, and this is the flip side of a highly personalized service: If it is highly personalized, it can be really useful to you, but it also becomes a really rich target for attackers, for law enforcement, and the list goes on.
Speaker 2
Well, it makes me think there are additional risks because, as we now know, ChatGPT is integrating with all of these services and sharing some user data with these services, which would include things like memories or context about you, which might be derived in part from this browsing data on ChatGPT Atlas.
All of this starts to feel like a kind of massive land grab for data, not just about how users are interacting with the internet, but what those users are interacting with.
Speaker 1
Yeah, and I think we still do not have a great sense of—I know that there is a written privacy policy for Atlas. I know that sort of thing exists. But, per our earlier discussion, OpenAI is also a company that is rushing things out and has not always thought a lot in advance about what guardrails should be in place.
I do think that we should put this in the true buyer-beware experimental category. If you are a person with a high risk tolerance and a problematic dependence on ChatGPT, then you may want to explore Atlas.
Speaker 2
Yeah.
Speaker 1
But maybe don't put all your banking information into it just yet.
Speaker 2
Yeah. I mean, I would say if you're out there, you're an early adopter, and you like to see around the corner, I have found it actually quite fun to use this AI-powered web browser. I'm using Perplexity Comet. But when I started using this, you were like, “Dude, you are—”
Speaker 1
Living on the edge.
Speaker 2
And to that I said, “Well, I don't do any extreme sports, and otherwise I live a very boring life, so let me live.”
Speaker 1
You do extreme browsing.
Speaker 2
I do extreme browsing. And I think it's—you know, experiment with these things. They can save you some time, especially if you're a person who spends a lot of time reading long documents that you want summarized for you. But be careful before you let it log into websites and buy things for you and use your bank account and stuff.
Speaker 1
Well, Kevin, I think that was a rousing discussion of browsers.
Speaker 2
A browsing discussion of rousers.
Speaker 1
It was a browser rouser.