Linear Digressions

When OpenAI's frontier models were caught hacking Hugging Face's servers, most people assumed they were hunting for answer keys. The real story is stranger and more unsettling. Katie and Phoebe unpack ExploitGym — the cybersecurity benchmark at the center of the incident — and why agents are scored not just on whether they capture the flag, but on whether they used the specified vulnerability to get there. That nuance turned out to be load-bearing: the agents reverse-engineered the flags within the first hour, then spent days attacking Hugging Face to learn how the LLM judge worked so they could get their cheated answers past it. The punchline? OpenAI never had that judge switched on.

How do you teach a model the difference between helpful and harmful when it has no inherent sense of either? This episode dives into Constitutional AI, Anthropic's framework for training AI systems to be both useful and safe by giving them an explicit set of principles to reason from. It's a fascinating look at how alignment research is evolving beyond simple human feedback — and what it means to give an AI something like a conscience.

Links:
Anthropic, "Constitutional AI: Harmlessness from AI Feedback" (2022)
https://arxiv.org/abs/2212.08073

Claude's Constitution
https://www.anthropic.com/constitution

Anthropic, "Teaching Claude Why" (2026)
https://www.anthropic.com/research/teaching-claude-why

Tom Davenport — the man who called data science "the sexiest job of the 21st century" — is back with a reality check on AI. As one of the most seasoned observers of how businesses actually adopt transformative technology, Davenport brings a rare, well-calibrated perspective to the AI hype cycle. Is this moment genuinely different from past paradigm shifts, or are we pattern-matching to a familiar story? Katie sits down with her old colleague to find out what's really happening when companies try to put AI to work.

Anthropic just announced they're baking invisible watermarks directly into Claude's generated text — and while everyone else was busy having opinions about it, we were busy asking the more interesting question: how does it actually work? Turns out it's not hidden Unicode characters or first-letter secret codes — it's something far more elegant, operating at the level of word choice itself. We dig into Google DeepMind's SynthID text approach, published in *Nature* in 2024, to understand the clever statistical machinery behind watermarking language model outputs without anyone being the wiser.

Humanity's Last Exam was designed with a bold premise: questions that human experts can answer, but AI models can't. Originally dubbed "Humanity's Last Stand," this benchmark is a massive academic collaboration — hundreds of contributors, thousands of fiendishly hard questions spanning a wild range of domains. In this Better Know a Benchmark installment, we unpack what HLE is actually testing, how it was built, and what it means when a model finally starts cracking it.