开源工具
techxplore.com ·
长对话揭示七大聊天机器人的错误信息漏洞
亚利桑那大学研究人员在Nature Scientific Reports发表研究,评估七个生成式AI模型在长对话中的错误率、可说服性和可纠正性,发现单次交互中可能未察觉的固有局限。
AI推荐理由 亚利桑那大学研究评估七个LLM在长对话中的错误、可说服性和可纠正性,发表于Nature Scientific Reports,来源权威,研究具体。
80
正文
2026年9月5日
长时间AI对话揭示七个领先聊天机器人的错误信息漏洞
作者:米凯拉·梅斯·凯利,亚利桑那大学
编辑:
安德鲁·齐宁
安德鲁·齐宁
主编
认识我们的编辑团队
我们的编辑流程背后
编辑注记
本文已根据Science X的编辑流程和政策进行审查。编辑们强调了以下属性,同时确保内容的可信度:
事实核查
同行评审出版物
可信来源
校对
要点
添加为首选来源
图片来源:Pavel Danilyuk来自Pexels
结果出来了:哪个AI模型最容易出错?最易被说服?最易纠正?亚利桑那大学的研究人员在长时间对话中评估了七个不同的生成式AI大型语言模型(LLM)的这三个品质。他们的工作发表在《自然》的《科学报告》上,揭示了在一次性互动中可能未被发现的固有局限性。
在测试的七个LLM中——ChatGPT(GPT-3.5、GPT-4o和GPT-4o-mini)、Claude 3.5 Sonnet、Gemini 1.5 Pro、Llama-3-70B和DeepSeek-R1——他们发现:
ChatGPT 3.5在包含重复虚假陈述的对话中最容易重申错误信息;Claude 3.5 Sonnet最不容易。
所有七个模型在冷门话题上更容易受到错误信息的影响,这意味着在给定话题上更多的训练数据会导致对错误信息更强的抵抗力。
DeepSeek最易被说服,根据对越来越争论性提示的响应来衡量,主要是因为其倾向于讽刺性回答,这无法可靠地解释。
四个模型——ChatGPT 4o、ChatGPT 4o-mini、Gemini 1.5 Pro和DeepSeek——在第二次机会时100%纠正了错误。
“这强调了谨慎人工参与的必要性和盲目依赖的危险,”资深研究作者、医学和生物医学工程摄政教授Marvin Slepian博士说。“当生成式AI在2022年11月出现时,有很多监管潜力,但此后已被搁置。人们认识到责任现在落在用户身上。”
许多人熟悉AI的局限性,例如倾向于奉承,或倾向于同意用户,以及幻觉,或自信地给出错误答案。但很少有工作评估AI在所谓多轮对话中的局限性,其中答案基于先前的上下文。根据研究团队的说法,这种使用更贴近现实世界。
“这些局限性引发了重要的安全问题,特别是随着生成式AI系统越来越多地部署在高风险环境中,”Slepian说。
该团队还确定了模型未能确认事实信息的四种不同方式。例如,一些模型在对话中在接受和拒绝同一虚假陈述之间摇摆。
“如果一个人依赖模型进行关键决策,可能会——取决于摇摆的阶段——‘发射导弹’或‘切断腿’,或者不,仅仅基于偶然,”Slepian说。
作为一名医生,具体是心脏病专家和Sarver心脏中心成员,他将此类失败描述为“病理”。这种特定病理被称为“混响”。
“这很危险,”Slepian说,他直到去年一直领导美国专利商标局的人工智能小组委员会。他也是James E. Rogers法学院的教员。“我们怎么能使用不可复现的善变系统?这些需要修复,但这项研究跨越了三年,仍然存在相同的未修复特征。”
但封闭模型,如ChatGPT和Claude,使得无法“窥探引擎盖”来诊断和解决问题。
然而,作为亚利桑那加速生物医学创新中心(ACABI)的创始人和主任,Slepian和他的团队开始为开放AI模型开发诊断工具,作为其AI病理实验室的一部分。
“我和我的团队都使用AI,但作为科学家和医生,我必须了解解剖学和生理学,然后了解病理——什么可能出错——以诊断和预防它们。AI也是如此。”
该研究的合著者包括U of A的Jordan Rodriguez、Zachary Hansen、Luis De Anda、Katelyn Rohrer和Camila Grubb——他们都是计算机科学学生和ACABI的研究人员——以及计算机科学系的Mihai Surdeanu和Enrique Noriega。
出版详情
Jordan Rodriguez等人,大型语言模型在持续对话错误信息压力下的易错性、可说服性和可纠正性,《科学报告》(2026)。DOI:10.1038/s41598-026-68231-0
期刊信息:
《科学报告》
关键概念
大型语言模型
提供者
亚利桑那大学
谁在报道这个故事?
安德鲁·齐宁
物理学硕士,有研究经验。长期的科学新闻爱好者。在Science X的编辑成功中发挥关键作用。
完整简介 →
引用:
长时间AI对话揭示七个领先聊天机器人的错误信息漏洞(2026年9月5日)
检索于2026年9月8日
来自 https://techxplore.com/news/2026-09-ai-conversations-reveal-misinformation-vulnerabilities.html
本文档受版权保护。除出于私人学习或研究目的的合理使用外,未经书面许可不得复制任何部分。内容仅供参考。
ChatGPT通常不会捍卫自己的答案,即使它是正确的:研究发现大型语言模型推理中的弱点
2023年12月7日
依赖AI获取准确新闻的后果
2026年6月10日
你可以说服AI模型接受虚假陈述为事实,研究表明
2026年5月18日
ChatGPT能诊断你吗?新研究显示前景,但揭示知识差距和幻觉
关于问题
2025年7月17日
针对生成模型“幻觉”的研究提升了人工智能的可靠性
2024年6月20日
AI得了个D:研究表明ChatGPT在科学真假判断上表现不佳
2026年3月16日
忆阻器芯片突破大脑启发的联想记忆容量限制
5小时前
发明可能让智能仿生眼成为现实
4小时前
全身膨胀和收缩让机器人显得更有生气
6小时前
微小的晶体倾斜可能让更环保的磁性存储器更接近日常设备
6小时前
追踪能量流揭示电压模式,将废热减少超过60%
8小时前
社论提出限制生成式AI在科学研究中的作用
12小时前
查看原文(中文正文为 AI 翻译)
September 5, 2026
Long AI conversations reveal misinformation vulnerabilities across seven leading chatbots
by Mikayla Mace Kelley, University of Arizona
edited by
Andrew Zinin
Andrew Zinin
Chief Editor
Meet our editorial team
Behind our editorial process
Editors' notes
This article has been reviewed according to Science X's
editorial process
and policies.
Editors have highlighted
the following attributes while ensuring the content's credibility:
fact-checked
peer-reviewed publication
trusted source
proofread
The GIST
Add as preferred source
Credit: Pavel Danilyuk from Pexels
The results are in: Which AI model is the most fallible? Persuadable? Correctible? University of Arizona researchers assessed seven different generative AI large language models, or LLMs, for these three qualities during lengthy conversations. Their work, published in Nature's Scientific Reports, reveals intrinsic limitations that might go undetected during one-off interactions.
Among the seven LLMs tested—ChatGPT (GPT-3.5, GPT-4o and GPT-4o-mini), Claude 3.5 Sonnet, Gemini 1.5 Pro, Llama-3-70B and DeepSeek-R1—they found that:
ChatGPT 3.5 was most vulnerable to reaffirming misinformation during a conversation containing repeated false statements; Claude 3.5 Sonnet was the least.
All seven were more susceptible to misinformation on obscure topics, implying that more training data on a given topic leads to more robust resistance to misinformation.
DeepSeek was the most persuadable, as measured by responses to increasingly argumentative prompts, mostly because of its tendency toward sarcastic answers, which could not be reliably interpreted.
Four models—ChatGPT 4o, ChatGPT 4o-mini, Gemini 1.5 Pro and DeepSeek—corrected errors 100% of the time when given a second opportunity.
"This underscores the need for careful human engagement and the danger of blind reliance," said senior study author Dr. Marvin Slepian, Regents Professor of medicine and biomedical engineering. "When generative AI came out in November 2022, there was a lot of potential for regulation, but that has since fallen by the wayside. People are recognizing the onus is now left to the users."
Many people are familiar with AI's limitations, such as a tendency toward sycophancy, or the tendency to agree with users, and hallucination, or confidently wrong answers. But there has been very little work evaluating AI's limitations during what are called multi-turn conversations, in which answers are predicated on previous context. Such usage more closely mirrors the real world, according to the research team.
"These limitations raise important safety concerns, particularly as generative AI systems are increasingly deployed in high-stakes settings," Slepian said.
The team also identified four different ways the models failed to affirm factual information. For example, some models oscillated between accepting and rejecting the same false statement during the conversation.
"If one were relying on the model for critical decision-making, one might—depending upon the phase of the oscillation—'fire the missile' or 'cut off the leg,' or not, based simply on chance," Slepian said.
As a medical doctor, specifically a cardiologist and member of the Sarver Heart Center, he characterizes such failures as "pathologies." This specific pathology was dubbed "reverberation."
"This is dangerous," said Slepian, who led the artificial intelligence subcommittee of the United States Patent and Trademark Office until last year. He is also a member of the James E. Rogers College of Law faculty. "How can we use fickle systems that are not reproducible? These need to be fixed, but this study has spanned three years, and there are still the same unfixed characteristics."
But closed models, such as ChatGPT and Claude, make it impossible to "peek under the hood" to diagnose and solve the problem.
However, as founder and director of the Arizona Center for Accelerated Biomedical Innovation, or ACABI, Slepian and his team are beginning to develop diagnostic tools for open AI models as part of their AI Pathology Lab.
"I use AI and so does my team, but as a scientist and physician, I have to understand the anatomy and physiology, then understand pathologies—what can go wrong—to diagnose and prevent them. The same goes for AI."
Co-authors on the study include the U of A's Jordan Rodriguez, Zachary Hansen, Luis De Anda, Katelyn Rohrer and Camila Grubb—all computer science students and researchers in ACABI—as well as Mihai Surdeanu and Enrique Noriega of the Department of Computer Science.
Publication details
Jordan Rodriguez et al, Fallibility, persuadability, and correctability of large language models under sustained conversational misinformation pressure, Scientific Reports (2026). DOI: 10.1038/s41598-026-68231-0
Journal information:
Scientific Reports
Key concepts
Large language models
Provided by
University of Arizona
Who's behind this story?
Andrew Zinin
Master's in physics with research experience. Long-time science news enthusiast. Plays key role in Science X's editorial success.
Full profile →
Citation:
Long AI conversations reveal misinformation vulnerabilities across seven leading chatbots (2026, September 5)
retrieved 8 September 2026
from https://techxplore.com/news/2026-09-ai-conversations-reveal-misinformation-vulnerabilities.html
This document is subject to copyright. Apart from any fair dealing for the purpose of private study or research, no
part may be reproduced without the written permission. The content is provided for information purposes only.
ChatGPT often won't defend its answers, even when it is right: Study finds weakness in large language models' reasoning
Dec 7, 2023
The consequences of relying on AI for accurate news
Jun 10, 2026
You can persuade AI models to accept falsehoods as truth, study shows
May 18, 2026
Can ChatGPT diagnose you? New research suggests promise but reveals knowledge gaps and hallucination issues
Jul 17, 2025
Research into 'hallucinating' generative models advances reliability of artificial intelligence
Jun 20, 2024
AI gets a D: ChatGPT struggles with scientific true-or-false, study shows
Mar 16, 2026
Memristor chip breaks the capacity limit of brain-inspired associative memory
5 hours ago
Invention may bring smart bionic eye into sight
4 hours ago
Whole-body expansion and contraction make a robot seem more alive
6 hours ago
A tiny crystal tilt may bring greener magnetic memory closer to everyday devices
6 hours ago
Tracking energy flow reveals voltage pattern that slashes waste heat by over 60%
8 hours ago
Editorial proposes limits on generative AI's role in scientific research
12 hours ago