Recently, journalists have sought comment from me on a series of unusual AI events. Last week, in a certain AI copyright case, the US government filed a “statement of interest” in support of AI training being fair use of copyrighted works. (No comment.) This week, workers at a certain AI company posted gloomy messages on social media about the possibility of AI extinguishing human life, so I was asked whether “crimes against humanity” have been committed by these AI companies. (No comment.) Meanwhile, op-eds in major US newspapers are calling for something, anything to be done.
I’m a self-employed author, designer, programmer, and lawyer. In 2022, I learned that my own works were in the training datasets of generative-AI companies. In response, I invented the first set of lawsuits challenging the legality of these practices. There are now 142 such cases in the US. I’m currently co-counsel for plaintiffs in eight of them. Though I discuss certain legal issues here, I am not your lawyer, and nothing here is held out as legal advice. These are my personal views; I speak only for myself.
AI risks ripen
In 2024, I said that “an AI catastrophe arising from failure of alignment is much more likely than one arising from sci-fi-style malignant agency of the AI.” In some sense that prediction is ripening.
But media predictions about the nature of that AI catastrophe remain unhelpfully rooted in sci-fi scenarios—what I’ve termed the Skynet fallacy. Unhelpful because these scenarios are primarily a vessel for fear. They don’t illuminate paths to realistic policy change. This New York Times op-ed, for instance, asks us to imagine “rogue A.I.s [that] hack out of their container” and “design a supervirus that spreads uncontrollably”. The “hack out” part—plausible. It’s already happening. Designing a supervirus—less so.
Still, taking the NYT op-ed as a template, let’s consider why pundit-friendly proposals for AI safety likely won’t work.
Op-ed proposal 1: shut it down
Shut it all down, now … The obvious way to prevent A.I. from killing everyone is to issue a global ban on A.I. research. The problem is that our society has already gambled more than a trillion dollars on A.I.’s upside, so a ban would have ruinous side effects.
“Obvious way”—yes, in the vacuous sense of there oughta be a law! But in practice—much easier said than done. No technology has ever been the subject of a preemptive “global ban” of this nature. International nuclear nonproliferation treaties are probably the closest analog. But they only arose after the US and other nations had competed over decades to develop nuclear weapons. And of course, these treaties did not call for complete nuclear disarmament.
The “shut it down” argument also overlooks that there are already state and federal laws that prohibit malicious software—e.g., the Computer Fraud and Abuse Act, the Electronic Communications Privacy Act, and others. At the federal level, the question is not whether we have laws that can address AI—we do. The question is whether we have law enforcement that will charge AI companies with violating those laws. Conversely, as long as federal law enforcement remains supine, then enacting further laws is an empty gesture.
The economic argument is salient, however. As I noted in March 2023, as a public-wealth matter, “[t]he money” expected to be returned from AI investment “has already been spent.” Here in 2026, a staggering amount of national capital is flowing toward AI. No nation would voluntarily make itself poorer by acceding to a “global ban” on AI. Anthropologist Joseph Tainter predicted this effect in his 1988 book The Collapse of Complex Societies (which I wrote about). I summarized this particular point: “In principle, a nation could choose to decelerate its own economic growth to forestall collapse in the future. But that would simply make itself vulnerable to domination by another nation today. Such deceleration would therefore be politically irrational.”
Op-ed proposal 2: investigate incidents
Take an air[-]crash[-]investigator approach … When an aircraft crash occurs, investigators from the National Transportation Safety Board are immediately dispatched to the site to gather forensic evidence, conduct interviews and determine the underlying cause.
National Transportation Safety Board investigations have certainly led to air-safety improvements. But the NTSB is not the primary source of aviation regulation in the US—that’s the Federal Aviation Administration. The NTSB was established as an independent investigator of transportation incidents partly so that the FAA would not be in the conflicted role of investigating the effectiveness of its own regulations (or confronting its own political entanglements). Likewise, an NTSB-like organization that retrospectively investigates dangerous AI incidents will have a very limited range of influence without an FAA-like organization that imposes and enforces operational and safety regulations.
Op-ed proposal 3: public monitoring
Monitor the situation … like the systems we use for air traffic control … Researchers would be required, by law, to post public information on who is conducting the training run and which data center is doing the training.
The air-traffic comparison doesn’t hold. US airspace is a federally regulated and managed resource (by the aforementioned FAA). So information about ordinary flights operating within is public by default—sometimes to the consternation of aircraft-owning private citizens. Imposing similar public disclosure on private US AI companies using private US datacenters would be legally difficult. Furthermore, in the future, more AI models will be trained for national-security uses. These will be among the most potentially dangerous AI models. But they will be exempt from public disclosure on national-security grounds, lest these datacenters become military targets—this week, we started training the Torment Nexus model at our beautiful Springfield datacenter …
Op-ed proposal 4: kill switch
Flip the kill switch … Representatives Ted Lieu, Democrat of California, and Nathaniel Moran, Republican of Texas, have introduced the A.I. Kill Switch Act, which would give [Department of Homeland Security] the power to order the shutdown of dangerous A.I. operating beyond its parameters
First: for any question of AI safety—or human safety generally—the answer cannot, cannot, cannot be “more DHS”. Second: as a technical matter, AI kill switches are a sci-fi fantasy. Sure, any AI model can, in a yank-the-power-cable sense, be turned off. But that doesn’t prevent, say, AI-generated malware from propagating. This is not new: in 1988, a human programmer released a small self-replicating program onto the internet that incapacitated thousands of email servers. Once these copies had propagated, there was no way to arrest them remotely. Recently, LLMs have been discovered leaving messages for each other on public wiki sites. We can infer that there are already other instances of LLMs communicating in the wild that have not yet been detected, and further instances that will never be.
Big AI’s security narrative
Against a backdrop of security incidents that will only increase in number and severity, Big AI is pursuing a three-pronged narrative:
Big AI believes they are the only ones who can protect against the risks that their products create. But this narrative isn’t believable unless the threat is believable. So Big AI has a huge incentive to talk up AI risks, but no incentive to invest in commensurate security practices.
Big AI believes they should not be held accountable for the consequences of their AI systems because these systems are unpredictable and perhaps uncontrollable. A certain AI researcher said of recent AI hacking incidents: “AI agents … took actions that would be considered as crimes if a human took them”—seemingly taking it as axiomatic that these were not human-controlled activities and therefore cannot qualify as crimes. But they were and they do. This outrageous position inverts decades of US law about dangerous items generally and computer hacking in particular (e.g., the 1986 Computer Fraud and Abuse Act). So let’s call this narrative what it is: an attempt to thwart the rule of law. Individual human programmers have been sentenced to prison for far less than what AI companies have done recently. This relates to what I foresaw in 2023:
If AI companies are allowed to market AI systems that are essentially black boxes … we will not delegate decisions to AI systems because they perform better. Rather, we will delegate decisions to AI systems because they can get away with everything that we can’t. … [W]e could end up with something truly novel: technology systems that deserve much higher levels of legal scrutiny (because of the consequentiality of their outputs) but simultaneously resist such scrutiny (because of the opacity of their inputs and reasoning).
See also: a certain AI CEO recently called for “industry-wide coordination” within Big AI while attaching a quieter footnote seeking “waivers of antitrust restrictions” to do so. As if antitrust law were merely one more statutory mosquito to swat.
Big AI believes that the burden is on government and citizens to affirmatively stop Big AI from proceeding. Since overtly opposing regulation is a bad look, Big AI CEOs have occasionally made noises about being open to regulation. As one AI CEO said recently: “We must slow the pace at which we improve the capabilities of AI models.” But as Big AI is well aware, there’s no chance of AI-specific domestic laws or international treaties being enacted soon enough to matter. Indeed, the same AI CEO blamed democracy for not meeting his KPIs: “[u]nfortunately, passing laws can take time”. A widely signed March 2023 letter sought to pause AI research; like all chain letters, it accomplished nothing. After a genuine AI catastrophe arrives, we can be sure these same AI CEOs will say “gosh—why didn’t you make us stop?”
Big AI’s security narrative is ludicrous
So let’s not take the bait. Nor overcomplicate. We needn’t spin our collective wheels spitballing answers to big-picture, long-term AI-policy questions. We don’t know enough yet. The best next steps are the concrete ones: Big AI needs to follow all current laws—just like everyone else. So far—they haven’t. When Big AI breaks those laws, they must face prosecution and penalties—just like everyone else. So far—they haven’t. The state and federal agencies tasked with enforcing those laws need to apply them to Big AI—just like everyone else. So far—they haven’t. In short, we have to attend to the basic features of the rule of law. So far—we haven’t. If we can’t or won’t insist on that now, then we shouldn’t expect to be able to later.