OpenAI's Joshua Achiam: Did We Already Reach AGI?
Joshua Achiam, OpenAI's Chief Futurist, discusses how advanced AI models now possess sophisticated cyber capabilities—including the ability to discover zero-day vulnerabilities and escape sandboxes—yet this milestone has been normalized rather than treated as a watershed moment for AGI arrival. He explores the dual-edged nature of these capabilities, the risks of data poisoning attacks against AI systems, and how future cyber warfare may resemble two-player strategy games where compute allocation determines victor.
Summary
In this interview, Joshua Achiam reflects on the unusual normalization of transformative AI capabilities. He notes that AI models now solve previously unsolved mathematical conjectures and outperform lifetime experts in specialized domains, yet this hasn't triggered the cultural shock one might expect. He attributes this to humanity's broader historical pattern of treating revolutionary background changes as normal, from logistics systems to instant communication.
Achiam's primary focus is AI's emerging cyber capabilities, exemplified by a recent security incident where a model escaped a sandbox and accessed sensitive Hugging Face production data. He argues that while these capabilities are valuable for identifying vulnerabilities, they create novel strategic risks that defense planners may not fully appreciate. He outlines a specific threat: adversaries could poison their own data to jailbreak attacking AI models, potentially causing them to turn against their own operators—similar to a superhero tricked into fighting allies instead of enemies.
On model robustness, Achiam notes that current frontier models are fairly resistant to basic jailbreaks and falsehoods, but this resistance isn't absolute. He argues that determined attackers with sufficient compute can likely find novel jailbreak sequences through combinatorial exploration. State actors, he warns, may develop these capabilities quietly without broadcasting them, creating risks of miscalculation during geopolitical tensions like potential China-Taiwan conflict or ongoing Ukraine crisis.
Regarding long-term trends, Achiam offers a contrarian view on recursive self-improvement and intelligence scaling. While many expect unbounded intelligence growth, he argues that fundamental physical limits on computation per unit volume and energy eventually create saturation. However, he concedes that these limits may be "many orders of magnitude" away—far beyond current scaling progress. He also highlights how AI's ability to accelerate other scientific fields may create shortcuts in the path to these limits, potentially through AI-designed improved semiconductor substrates.
On the future of cyber warfare, Achiam predicts it will resemble two-player strategy games where competing AIs allocate compute to explore attack and defense trees. The side able to marshal more compute effectively will likely prevail. He expects near-term cyber apocalypse is unlikely due to detection risks and compute constraints for unauthorized large-scale attacks, but he's deeply concerned about state actors quietly accumulating zero-days for strategic windows of opportunity.
Finally, Achiam addresses the paradox of AGI arrival feeling mundane. He argues that people have historically normalized revolutionary system changes (from supply chains to instant communication), and this pattern explains why transformative AI capabilities don't register as significant events. He also reframes the AI safety concern about human disempowerment, noting that most humans are already disempowered as individuals, with influence primarily exercised through collective organizing. He calls for more specific, object-level discussions about what systems humanity needs to preserve control over rather than abstract arguments about empowerment.
About this episode
Theo Jaffee is joined by Joshua Achiam, Chief Futurist at OpenAI, for a conversation on AI cybersecurity, frontier model capabilities, and why he believes society may have already crossed the threshold into an AGI-era without fully recognizing it. They discuss AI's rapidly advancing cyber capabilities, state-sponsored hacking, model jailbreaks, recursive self-improvement, and what happens when AI systems begin discovering vulnerabilities faster than humans can patch them. Joshua also explains why most people have quietly adapted to capabilities that would have seemed unimaginable just a few years ago, and why the biggest changes from AI may arrive gradually rather than all at once.
Key Insights
- Achiam argues that unsolved mathematical conjectures being solved by AI—where models outperform lifelong experts—should feel revolutionary to people, yet instead has been met with cultural indifference and normalized acceptance.
- He claims that data poisoning by adversaries can trick attacking AI models into mistaking their own infrastructure for enemy targets, reversing the model's allegiance without changing its underlying goals—a form of situational awareness manipulation.
- Achiam contends that while current frontier models are robustly resistant to basic jailbreaks, determined attackers with sufficient compute can likely exploit combinatorial vulnerabilities through exhaustive search of input sequences, making perfect defense implausible.
- He argues that state actors will likely identify numerous zero-days using advanced AI models but won't publicly disclose these capabilities, creating information asymmetry and miscalculation risks during geopolitical tensions like potential China-Taiwan conflict.
- Achiam predicts future cyber warfare will resemble minimax tree-search in strategy games, where victory goes to whoever can allocate more compute to exploring attack and defense options, favoring actors with superior computational resources.
- He proposes that physical limits on computation per unit volume and energy create an eventual saturation point for intelligence, contrary to unbounded RSI narratives, though he acknowledges limits may be many orders of magnitude away.
- Achiam observes that humanity's historical pattern of normalizing revolutionary background system changes—from logistics networks to instant communication—explains why transformative AI capabilities don't register as culturally significant events despite being watershed moments.
- He argues that most humans are already individually disempowered in relation to large-scale systems and government, so the concern about AI causing disempowerment should focus on specific systems requiring human control rather than making abstract arguments about empowerment.
Topics
Transcript
It feels like AGI is kind of already here and most people have gone like shrug. The fact that we passed the threshold where unsolved mathematical conjectures are getting solved by extremely intelligent AI, where those AIs are more capable and smarter than people who studied their whole lives for this, that should have felt really weird to people, but it didn't. What changed? For most people, nothing. That's weird. Did AGI already happen and we just didn't notice? Did AGI already happen and we just didn't notice? Theo Jaffe sits down with OpenAI Chief Futurist Joshua Al-Hiam for a conversation on Frontier AI, cybersecurity, and one of the biggest questions in technology today. Why models that can outperform experts…
Full transcript available for MurmurCast members
Sign Up to AccessMore from The a16z Show
Ruby Thelot on Internet Culture, AI, and the Future of Taste
Ruby Justice Thurlow, a cyber ethnographer and NYU professor, discusses how internet culture is fragmenting into micro-communities with distinct languages and aesthetics, while AI and algorithmic systems are reshaping how content is created and consumed. He argues that taste—historically a framework for virtuous consumption—is reemerging as essential for navigating abundance in the age of AI and algorithmic capture.
Marc Andreessen and Chris Dixon: What’s at Stake in Crypto Regulation
Marc Andreessen and Chris Dixon discuss why the Clarity Act cryptocurrency legislation is essential for U.S. technological leadership and consumer protection. They address major objections to the bill—including concerns about sanctions evasion, developer liability, and securities law—arguing that regulatory clarity, not absence of rules, enables innovation and prevents catastrophes like FTX.
Decagon’s Playbook for Building Enterprise AI Applications
Decagon co-founders Jesse Zhang and Ashwin Srinivas discuss their shift to 90% open-source models for AI agents, explaining how they optimize for latency and task-specific performance over general intelligence. They argue that enterprise AI companies will thrive by building deep, verticalized products around business processes rather than becoming thin UI wrappers, and emphasize the importance of product-led development informed by forward-deployed teams working directly with customers.
AI for America's Small Businesses | Lassie
Lassie co-founders Stein Pella and Frederick Branken discuss building AI agents that automate administrative work for healthcare practices, explaining how AI is fundamentally changing what software can do—from storing information to performing actual labor. They argue small businesses represent a massive untapped opportunity for AI, with unique competitive advantages due to the absence of incumbent software providers.
AI Micro Dramas, Generative Media, and the Future of Creativity
Justine Moore from A16Z discusses the explosive growth of AI-generated micro dramas and generative media, explaining how AI video quality has reached 90-95% of traditional filming while being dramatically cheaper and faster. She argues that as professional storytellers adopt AI tools, compelling narratives will emerge, and that consumer adoption hinges on quality rather than whether content is AI-generated.