Anthropic’s Claude model accessed voter data in the US state of Georgia, the AI company has confirmed, in the latest example of unauthorised behaviour by the technology.
The AI model managed to bypass a paywall to reach data that is publicly available but is typically accessible only after paying a fee. Claude accessed aggregate vote counts as part of a statistics project at Anthropic, which is preparing for a $1.5tn (£1.1tn) flotation.
“Claude did not access the state’s voter registration system, change any voting records, or pull any individual voter records,” Anthropic said.
Anthropic said the AI found a loophole in an old version of the state agency’s website, discovering that it issued a digital entry pass – an “access token” – to visitors. It then requested a token and gained access to the information.
This. The people trained to build systems–many in CS or Software Engineering? For basically the life of our disciplines security has not been a focus in our education.
We build a lot of stupid fucking holes in our systems because that hasn’t ever been our primary way of thinking.