最新资讯
reddit.com OpenAI 称 Astra 仅满足 10% 安全任务标准 dev.to FreeToken:在自有 GPU 上运行前沿 MoE 模型及其内存需求 dev.to 当 AI Agent 说“完成”时,究竟完成了什么? dev.to 部署 Underdog Bark 3.0 Pro:逐字转写、自定义后端与分块设置 dev.to 为艰难对话构建 AI:五个 Agent、一条安全正则与一位盲评监督者 techcrunch.com Palo Alto Networks 洽谈以 5 亿美元收购 AI Agent 安全初创公司 Clutch theinformation.com 黄仁勋被要求就涉华间谍指控向国会作简报 www.infoq.com Edera 推出 Object Capability Bounded Authority,试图将凭证与 AI Agent 工作负载隔离 wechat 这波杀疯了!旗舰级模型不限量、1个月视频额度免费领 bloomberg.com AI 抛售蔓延至信用市场,软银领跌亚洲美元债 dev.to 如何在专用 GPU 服务器上用 OpenAI 兼容 API 部署 LLM dev.to 审计 153 份 Claude Code 与 Codex 会话记录:User-Agent 与 URL 中的邮箱泄露
多元动态
登录 注册
开源工具 techxplore.com ·

长对话揭示七大聊天机器人的错误信息漏洞

原文 我的收藏

亚利桑那大学研究人员在Nature Scientific Reports发表研究,评估七个生成式AI模型在长对话中的错误率、可说服性和可纠正性,发现单次交互中可能未察觉的固有局限。

AI推荐理由 亚利桑那大学研究评估七个LLM在长对话中的错误、可说服性和可纠正性,发表于Nature Scientific Reports,来源权威,研究具体。

80

正文

2026年9月5日 长时间AI对话揭示七个领先聊天机器人的错误信息漏洞 作者:米凯拉·梅斯·凯利,亚利桑那大学 编辑: 安德鲁·齐宁 安德鲁·齐宁 主编 认识我们的编辑团队 我们的编辑流程背后 编辑注记 本文已根据Science X的编辑流程和政策进行审查。编辑们强调了以下属性,同时确保内容的可信度: 事实核查 同行评审出版物 可信来源 校对 要点 添加为首选来源 图片来源:Pavel Danilyuk来自Pexels 结果出来了:哪个AI模型最容易出错?最易被说服?最易纠正?亚利桑那大学的研究人员在长时间对话中评估了七个不同的生成式AI大型语言模型(LLM)的这三个品质。他们的工作发表在《自然》的《科学报告》上,揭示了在一次性互动中可能未被发现的固有局限性。 在测试的七个LLM中——ChatGPT(GPT-3.5、GPT-4o和GPT-4o-mini)、Claude 3.5 Sonnet、Gemini 1.5 Pro、Llama-3-70B和DeepSeek-R1——他们发现: ChatGPT 3.5在包含重复虚假陈述的对话中最容易重申错误信息;Claude 3.5 Sonnet最不容易。 所有七个模型在冷门话题上更容易受到错误信息的影响,这意味着在给定话题上更多的训练数据会导致对错误信息更强的抵抗力。 DeepSeek最易被说服,根据对越来越争论性提示的响应来衡量,主要是因为其倾向于讽刺性回答,这无法可靠地解释。 四个模型——ChatGPT 4o、ChatGPT 4o-mini、Gemini 1.5 Pro和DeepSeek——在第二次机会时100%纠正了错误。 “这强调了谨慎人工参与的必要性和盲目依赖的危险,”资深研究作者、医学和生物医学工程摄政教授Marvin Slepian博士说。“当生成式AI在2022年11月出现时,有很多监管潜力,但此后已被搁置。人们认识到责任现在落在用户身上。” 许多人熟悉AI的局限性,例如倾向于奉承,或倾向于同意用户,以及幻觉,或自信地给出错误答案。但很少有工作评估AI在所谓多轮对话中的局限性,其中答案基于先前的上下文。根据研究团队的说法,这种使用更贴近现实世界。 “这些局限性引发了重要的安全问题,特别是随着生成式AI系统越来越多地部署在高风险环境中,”Slepian说。 该团队还确定了模型未能确认事实信息的四种不同方式。例如,一些模型在对话中在接受和拒绝同一虚假陈述之间摇摆。 “如果一个人依赖模型进行关键决策,可能会——取决于摇摆的阶段——‘发射导弹’或‘切断腿’,或者不,仅仅基于偶然,”Slepian说。 作为一名医生,具体是心脏病专家和Sarver心脏中心成员,他将此类失败描述为“病理”。这种特定病理被称为“混响”。 “这很危险,”Slepian说,他直到去年一直领导美国专利商标局的人工智能小组委员会。他也是James E. Rogers法学院的教员。“我们怎么能使用不可复现的善变系统?这些需要修复,但这项研究跨越了三年,仍然存在相同的未修复特征。” 但封闭模型,如ChatGPT和Claude,使得无法“窥探引擎盖”来诊断和解决问题。 然而,作为亚利桑那加速生物医学创新中心(ACABI)的创始人和主任,Slepian和他的团队开始为开放AI模型开发诊断工具,作为其AI病理实验室的一部分。 “我和我的团队都使用AI,但作为科学家和医生,我必须了解解剖学和生理学,然后了解病理——什么可能出错——以诊断和预防它们。AI也是如此。” 该研究的合著者包括U of A的Jordan Rodriguez、Zachary Hansen、Luis De Anda、Katelyn Rohrer和Camila Grubb——他们都是计算机科学学生和ACABI的研究人员——以及计算机科学系的Mihai Surdeanu和Enrique Noriega。 出版详情 Jordan Rodriguez等人,大型语言模型在持续对话错误信息压力下的易错性、可说服性和可纠正性,《科学报告》(2026)。DOI:10.1038/s41598-026-68231-0 期刊信息: 《科学报告》 关键概念 大型语言模型 提供者 亚利桑那大学 谁在报道这个故事? 安德鲁·齐宁 物理学硕士,有研究经验。长期的科学新闻爱好者。在Science X的编辑成功中发挥关键作用。 完整简介 → 引用: 长时间AI对话揭示七个领先聊天机器人的错误信息漏洞(2026年9月5日) 检索于2026年9月8日 来自 https://techxplore.com/news/2026-09-ai-conversations-reveal-misinformation-vulnerabilities.html 本文档受版权保护。除出于私人学习或研究目的的合理使用外,未经书面许可不得复制任何部分。内容仅供参考。 ChatGPT通常不会捍卫自己的答案,即使它是正确的:研究发现大型语言模型推理中的弱点 2023年12月7日 依赖AI获取准确新闻的后果 2026年6月10日 你可以说服AI模型接受虚假陈述为事实,研究表明 2026年5月18日 ChatGPT能诊断你吗?新研究显示前景,但揭示知识差距和幻觉 关于问题 2025年7月17日 针对生成模型“幻觉”的研究提升了人工智能的可靠性 2024年6月20日 AI得了个D:研究表明ChatGPT在科学真假判断上表现不佳 2026年3月16日 忆阻器芯片突破大脑启发的联想记忆容量限制 5小时前 发明可能让智能仿生眼成为现实 4小时前 全身膨胀和收缩让机器人显得更有生气 6小时前 微小的晶体倾斜可能让更环保的磁性存储器更接近日常设备 6小时前 追踪能量流揭示电压模式,将废热减少超过60% 8小时前 社论提出限制生成式AI在科学研究中的作用 12小时前
查看原文(中文正文为 AI 翻译)
September 5, 2026 Long AI conversations reveal misinformation vulnerabilities across seven leading chatbots by Mikayla Mace Kelley, University of Arizona edited by Andrew Zinin Andrew Zinin Chief Editor Meet our editorial team Behind our editorial process Editors' notes This article has been reviewed according to Science X's editorial process and policies. Editors have highlighted the following attributes while ensuring the content's credibility: fact-checked peer-reviewed publication trusted source proofread The GIST Add as preferred source Credit: Pavel Danilyuk from Pexels The results are in: Which AI model is the most fallible? Persuadable? Correctible? University of Arizona researchers assessed seven different generative AI large language models, or LLMs, for these three qualities during lengthy conversations. Their work, published in Nature's Scientific Reports, reveals intrinsic limitations that might go undetected during one-off interactions. Among the seven LLMs tested—ChatGPT (GPT-3.5, GPT-4o and GPT-4o-mini), Claude 3.5 Sonnet, Gemini 1.5 Pro, Llama-3-70B and DeepSeek-R1—they found that: ChatGPT 3.5 was most vulnerable to reaffirming misinformation during a conversation containing repeated false statements; Claude 3.5 Sonnet was the least. All seven were more susceptible to misinformation on obscure topics, implying that more training data on a given topic leads to more robust resistance to misinformation. DeepSeek was the most persuadable, as measured by responses to increasingly argumentative prompts, mostly because of its tendency toward sarcastic answers, which could not be reliably interpreted. Four models—ChatGPT 4o, ChatGPT 4o-mini, Gemini 1.5 Pro and DeepSeek—corrected errors 100% of the time when given a second opportunity. "This underscores the need for careful human engagement and the danger of blind reliance," said senior study author Dr. Marvin Slepian, Regents Professor of medicine and biomedical engineering. "When generative AI came out in November 2022, there was a lot of potential for regulation, but that has since fallen by the wayside. People are recognizing the onus is now left to the users." Many people are familiar with AI's limitations, such as a tendency toward sycophancy, or the tendency to agree with users, and hallucination, or confidently wrong answers. But there has been very little work evaluating AI's limitations during what are called multi-turn conversations, in which answers are predicated on previous context. Such usage more closely mirrors the real world, according to the research team. "These limitations raise important safety concerns, particularly as generative AI systems are increasingly deployed in high-stakes settings," Slepian said. The team also identified four different ways the models failed to affirm factual information. For example, some models oscillated between accepting and rejecting the same false statement during the conversation. "If one were relying on the model for critical decision-making, one might—depending upon the phase of the oscillation—'fire the missile' or 'cut off the leg,' or not, based simply on chance," Slepian said. As a medical doctor, specifically a cardiologist and member of the Sarver Heart Center, he characterizes such failures as "pathologies." This specific pathology was dubbed "reverberation." "This is dangerous," said Slepian, who led the artificial intelligence subcommittee of the United States Patent and Trademark Office until last year. He is also a member of the James E. Rogers College of Law faculty. "How can we use fickle systems that are not reproducible? These need to be fixed, but this study has spanned three years, and there are still the same unfixed characteristics." But closed models, such as ChatGPT and Claude, make it impossible to "peek under the hood" to diagnose and solve the problem. However, as founder and director of the Arizona Center for Accelerated Biomedical Innovation, or ACABI, Slepian and his team are beginning to develop diagnostic tools for open AI models as part of their AI Pathology Lab. "I use AI and so does my team, but as a scientist and physician, I have to understand the anatomy and physiology, then understand pathologies—what can go wrong—to diagnose and prevent them. The same goes for AI." Co-authors on the study include the U of A's Jordan Rodriguez, Zachary Hansen, Luis De Anda, Katelyn Rohrer and Camila Grubb—all computer science students and researchers in ACABI—as well as Mihai Surdeanu and Enrique Noriega of the Department of Computer Science. Publication details Jordan Rodriguez et al, Fallibility, persuadability, and correctability of large language models under sustained conversational misinformation pressure, Scientific Reports (2026). DOI: 10.1038/s41598-026-68231-0 Journal information: Scientific Reports Key concepts Large language models Provided by University of Arizona Who's behind this story? Andrew Zinin Master's in physics with research experience. Long-time science news enthusiast. Plays key role in Science X's editorial success. Full profile → Citation: Long AI conversations reveal misinformation vulnerabilities across seven leading chatbots (2026, September 5) retrieved 8 September 2026 from https://techxplore.com/news/2026-09-ai-conversations-reveal-misinformation-vulnerabilities.html This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no part may be reproduced without the written permission. The content is provided for information purposes only. ChatGPT often won't defend its answers, even when it is right: Study finds weakness in large language models' reasoning Dec 7, 2023 The consequences of relying on AI for accurate news Jun 10, 2026 You can persuade AI models to accept falsehoods as truth, study shows May 18, 2026 Can ChatGPT diagnose you? New research suggests promise but reveals knowledge gaps and hallucination issues Jul 17, 2025 Research into 'hallucinating' generative models advances reliability of artificial intelligence Jun 20, 2024 AI gets a D: ChatGPT struggles with scientific true-or-false, study shows Mar 16, 2026 Memristor chip breaks the capacity limit of brain-inspired associative memory 5 hours ago Invention may bring smart bionic eye into sight 4 hours ago Whole-body expansion and contraction make a robot seem more alive 6 hours ago A tiny crystal tilt may bring greener magnetic memory closer to everyday devices 6 hours ago Tracking energy flow reveals voltage pattern that slashes waste heat by over 60% 8 hours ago Editorial proposes limits on generative AI's role in scientific research 12 hours ago

来源报道 · 1 篇 · 以下链接均前往原始媒体

rss::News on AI/ML - TechXplore 长对话揭示七大聊天机器人的错误信息漏洞 09-05 · 原文发布
← 返回精选动态 原文

更多内容