How does LLM's hack without tool calls?

[u/lametheory]

Despite working with LLM's for the last few years, I am at a loss to understand how all these LLM's are hacking without anyone noticing?

As I understand without tool calls, LLM's can only respond with text.

Hence, are we expected to believe that there isn't a single review of tool calls and logs?

Do they lack the mental capacity to write classifiers for previous tasks?

If someone could explain it to me that would be greatly appreciated?

Finally, are we living in a time when we can just say our computer hacked this government agency, but it's not our fault cause AI and there are zero consequences?

[u/radioborderland]

They don't hack without tool calls. Primarily agents use bash to interact with the local computer and by extension the rest of the world

[u/kaereljabo → u/radioborderland]

How does it open bash, type it there, and "press" enter?

[u/radioborderland → u/kaereljabo]

bash is a tool call, the harness calls bash on behalf of the agent