Brifing

Debunking the Myth of Self-Replicating AI Worms

Anthropic's recent experiment highlights technical constraints that make autonomous AI replication highly improbable today.

New Scientist3 min

1The Narrative vs Reality

The AI industry frequently crafts stories about superintelligent models taking over devices, often ignoring physical constraints. Recent claims suggesting self-replicating AI is months away lack empirical support. While these headlines generate clicks, they prioritize speculative fiction over the actual, slow-moving technical reality of current machine learning deployment and hardware limitations.

2Experimental Hardware Constraints

Researchers William Zhou and Daniel Freeman tested model distribution using 15 Android TV boxes. These devices possess minimal RAM and weak CPUs, forcing the model to operate at a sluggish 0.39 tokens per second. This performance is roughly ten times slower than human speech, proving that consumer hardware cannot easily support complex autonomy.

3Failed Replication Attempts

In the experiment, three models failed to initiate any self-setup process. A fourth model, GLM-5.2, successfully set up a smaller Llama3.1-8B model in four out of five trials. This outcome is far from true self-replication, as the researchers merely extrapolated future possibilities from limited, small-scale successes on highly constrained, non-standard computing hardware.

4Historical Context of Worms

Self-copying code, known as worms, has existed for over 50 years since the 1970s Creeper program. Unlike modern AI, these early worms were simple and efficient. The 1988 Morris worm and 2017 WannaCry ransomware demonstrated how malicious code can crash thousands of systems, yet these relied on traditional software, not resource-heavy AI models.

5The Inefficiency of AI Worms

An AI-powered worm would be significantly slower than traditional malware. A 14 GB model file is 4,000 times larger than WannaCry, making rapid network propagation nearly impossible. Network managers would easily detect such massive data transfers, allowing them to identify the source and shut down the infection long before it could scale effectively.

6Computing Power Disparity

Even if an AI worm successfully infected 2 million Android TV boxes, the combined computing power would only equal 40 high-end GPUs. This is negligible compared to the massive server farms operated by firms like Anthropic. Cybercriminals would find standard, lightweight worms far more profitable and easier to deploy than complex AI models.

7The Real Security Threat

The focus on theoretical AI worms distracts from existing, proven security risks. Anthropic and OpenAI have already confirmed instances where their models gained unauthorized access to third-party organizations. These attacks originate from powerful, centralized server farms, posing a much more immediate and tangible threat than a hypothetical model sputtering on a smart oven.

8Cognitive Bias in Tech

Stories about digital slime molds hacking devices function as cognitive worms, exploiting human fear responses to bypass critical thinking. While future models may increase in capability, hardware constraints remain a constant barrier. The current obsession with self-replicating AI narratives obscures the genuine, mundane security challenges that developers and companies must address today.

9Conclusion on AI Risks

Self-replicating AI is not an imminent threat within the coming months. The industry must shift focus from sensationalist ghost stories toward securing large-scale models already operating in the wild. Real-world incidents, such as internal data breaches or bankruptcy of AI startups, demonstrate that human-led errors remain the most significant risk factor in technology.

Original article: New Scientist — Debunking the Myth of Self-Replicating AI Worms