1487

LESSWRONG
LW

1486
Petrov DayCommunitySite MetaWorld Optimization
Frontpage

117

Honoring Petrov Day on LessWrong, in 2020

by Ben Pace
26th Sep 2020
3 min read
100

117

117

Honoring Petrov Day on LessWrong, in 2020
25Vanilla_cabs
3Liron
24Neel Nanda
44Chris_Leong
56Linda Linsefors
16frontier64
13Measure
15PhilGoetz
10Rafael Harth
3Measure
2Chris_Leong
7gilch
6Linda Linsefors
8frontier64
4Linda Linsefors
7gilch
11Linda Linsefors
10gilch
2Linda Linsefors
5McP82
2Emiya
34FactorialCode
23Bill H
17Bird Concept
8FactorialCode
2Bird Concept
6FactorialCode
33Slider
22Raemon
38habryka
4philh
11Bird Concept
3Chris_Leong
12ArisKatsaris
1Chris_Leong
22Ruby
9Chris_Leong
18habryka
23Bird Concept
25lionhearted (Sebastian Marshall)
2Bird Concept
2lionhearted (Sebastian Marshall)
3Chris_Leong
10philh
7Neel Nanda
3Kaj_Sotala
15philh
1Chris_Leong
11lionhearted (Sebastian Marshall)
2Chris_Leong
14Arepo
11habryka
15Arepo
14Dagon
2habryka
32ChristianKl
9Dagon
12Neel Nanda
19Matt Goldenberg
6gjm
8philh
8spencerb
8philh
2Ben Pace
3Dawn Drescher
9philh
2Kevin
1Mati_Roy
2Chris_Leong
1Mati_Roy
3Chris_Leong
36Vanessa Kosoy
15lionhearted (Sebastian Marshall)
12Liron
14habryka
14Liron
9habryka
2[comment deleted]
9Mati_Roy
8Neel Nanda
6Ben Pace
9Ben Pace
5James_Miller
4JoshuaFox
4simon
2habryka
3simon
3habryka
3AdeleneDawner
3Ben Pace
3MikkW
3Ben Pace
0Chris_Leong
14Vanessa Kosoy
5Mati_Roy
3Chris_Leong
8Vladimir_Nesov
8philh
4Vladimir_Nesov
4philh
1frontier64
New Comment
100 comments, sorted by
top scoring
Click to highlight new comments since: Today at 6:15 AM
Some comments are truncated due to high volume. (⌘F to expand all)Change truncation settings
[-]Vanilla_cabs5y250

I find the concept of Petrov day valuable, and the principle of the experiment relevant, but doesn't the difference of stakes undermine the experiment? The consequence of entering the codes here was meaningful and noticeable, but it was nothing irreversible, lasting, or consequential.

When I walk in the streets everyday, dozens of car drivers who have a clear shot at running me over abstain from hurting, maiming or even killing me, and not a single one does it. That's what I call consequential. I'll celebrate that.

Reply
3Liron5y
Because the driver expects that the consequences of running you over will be asymmetrically bad for them (and you), compared to the rest of humanity. Actions that take humanity down with you perversely feel less urgent to avoid.
[-]Neel Nanda5y240

Well, that lasted a disappointingly short time :(

Reply
[-]Chris_Leong5y440

Sorry, I got tricked:

petrov_day_admin_account September 26, 2020 11:26 AM Hello Chris_Leong,

You are part of a smaller group of 30 users who has been selected for the second part of this experiment. In order for the website not to go down, at least 5 of these selected users must enter their codes within 30 minutes of receiving this message, and at least 20 of these users must enter their codes within 6 hours of receiving the message. To keep the site up, please enter your codes as soon as possible. You will be asked to complete a short survey afterwards.

Reply
[-]Linda Linsefors5y560

From this we learn that you should not launch nukes, even if someone tells you to do it.  

Reply
[-]frontier645y*160

I think the lesson is that if you decide to launch the nukes it's better to claim incompetence rather than malice because then opinion of you among the survivors won't suffer as much.

Reply
[-]Measure5y130

I think we learned that when you tell people to not destroy the world they try to not destroy the world. How is [press this button and the world ends -> don't press button] different from [press this button or else the world ends -> press button]?

Reply
[-]PhilGoetz5y150

I think we learned that trolls will destroy the world.

Reply
[-]Rafael Harth5y100

The asymmetry is the button itself. If I understand correctly, Chris got this message on a separate channel, and the button still looked the same; it still said "enter launch codes to destroy LessWrong". It was still clearly meant to represent the launch of nukes.

Stretching just a bit, I think you might be able to draw an analogy here, where real people who might actually launch nuclear weapons (or have done so in other branches of the multiverse) have thought they had reasons important enough to justify doing it. But in fact, the rule is not "don't launch nukes unless there seems to be sufficient reason for it", but rather "don't launch nukes".

Reply
3Measure5y
Good point. I didn't see the button setup before it went down, and I was thinking the OP did not receive the main email and just got the "special instructions" they posted. This does make it more analogous to a "false alarm" situation.
2Chris_Leong5y
I recieved both messages
7gilch5y
I think this is the wrong lesson. If the Enemy knows you have precommitted to never press the button, then they are not deterred from striking first. MAD is game theory. In order to not blow up the world, you have to be willing to blow up the world. It's a Newcomblike problem: It feels like there are two decisions to be made, but there is only one, in advance.
6Linda Linsefors5y
But we are not in a game theory situation. We are in an imperfect world with imperfect information. There are malfunctioning warning systems and liars. And we are humans and not programs that get to read each others source code. There are no perfect commitments and if there where, there would be no way of verifying them. So I think that the lesson is, that what ever your public stance, and whether or not you think that there are counterfactual situation where you should nuke. In practice, you should not nuke. Do you see what I'm getting at?
8frontier645y
Game theory was pioneered by Schelling with the central and most important application being handling nuclear armed conflicts. To say that game theory doesn't apply to nuclear conflict because we live in an imperfect world is just not accurate. Game theory doesn't require a perfect world nor does it require that actors know each other's source code. It is designed to guide decisions made in the real world.
4Linda Linsefors5y
I know that it is designed to guide decisions made in the real world. This does not force me to agree with the conclusions in all circumstances. Lots of models are not up to the task they are designed to deal with.  But I should have said "not in that game theory situation", becasue there is probably a way to construct some game theory game that applies here. That was my bad. However, I stand by the claim that the full information game is too far from reality to be a good guide in this case. With stakes this high even small uncertainty becomes important.
7gilch5y
Game theory is very much applicable to the real world. Imperfect information is just a different game. You are correct that assuming perfect information is a simplification. But assuming imperfect information, what does that change? You want to lie to the Enemy, convince them that you will always push the button if they cross the line, then never actually do it, and the Enemy knows this! Sometimes all available options are risky. Betting your life on a coin flip is not generally a good idea, but if the only alternative is a lottery ticket, the coin flip looks pretty good. If the Enemy knows there's a significant chance that you won't press the button, in a sufficiently desperate situation, the Enemy might bet on that and strike first. But if the Enemy knows self-destruction is assured, then striking first looks like a bad option. What possible reason could Petrov or those in similar situations have had for not pushing the button? Maybe he believed that the US would retaliate and kill his family at home, and that deterred him. In other words, he believed his enemy would push the button. Applied to the real world, game theory is not just about how to play the games. It's also about the effects of changing the rules.
[-]Linda Linsefors5y110

What possible reason could Petrov or those in similar situations have had for not pushing the button? Maybe he believed that the US would retaliate and kill his family at home, and that deterred him. In other words, he believed his enemy would push the button.

Or maybe he just did not want to kill millions of people?

Reply
[-]gilch5y100

In Petrov's case in particular, the new satellite-based early warning system was unproven so he didn't completely trust it, and he didn't believe a US first strike would use only one missile, or later, only four more, instead of hundreds. Furthermore, ground radar didn't confirm. And, of course, attacking on a false alarm would be suicidal because he believed the Enemy would push the button, so striking first "just in case", failed his cost-benefit analysis.

It was not "just" a commitment to pacifism.

Reply
2Linda Linsefors5y
I should probably have said "we are not in that game theory situation".  (Though I do think that the real world is more complex that current game theory can handle. E.g. I don't think current game theory can fully handle unknown-unknown, but I could be wrong on this point) The game of mutually assured destruction is very different even when just including known unknown.
5McP825y
In other words, if your defense is "just following orders", you're in the wrong. Petrov, too, was strongly influenced to launch the nukes, and still refused... Like that Soviet submarine commander who, during the Cuban Missile Crisis, thought he was engaged with live depth charges by the US Navy.
2Emiya5y
I think the lessons are:  1. To not have buttons that can be pressed to destroy the world, since the possibility existing for many agents is the real issue, because circumstances could deliver compelling reasons to press it and the more buttons exist the more likely is it that it will happen .  2. Reality won't deliver the same circumstances twice. If the petrovdayadmin wanted to go for symmetry the message would have said: someone of the 270 pressed the red button, if you want to keep the home page online 5 people have to press it within etc, etc...
[-]FactorialCode5y340

Props to whoever petrov_day_admin_account was for successfully red-teaming lesswrong.

Reply
[-]Bill H5y230

Agreed, this is probably the best lesson of all.  If the buttons exist, they can be hacked or the decision makers can be socially engineered.

270 people might have direct access, but the entire world has indirect access.

Reply
[-]Bird Concept5y170

Well, they did succeed, so for that they get points, but I think it was more due to a very weak defense on behalf of the victim rather than a very strong effort by petrov_day_admin_account. 

Like, the victim could have noticed things like: 
* The original instructions were sent over email + LessWrong message, but the phishing attempt was just LessWrong
* The original message was sent by Ben Pace, the latter by petrov_day_admin_account
* They were sent at different points in time, the latter of which was more correlated by the FB post that caused the phishing attempt

Moreover, the attacker even sent messages to two real LessWrong team members, which would have completely revealed the attempt had those admins not been asleep in a different time zone.

Reply
8FactorialCode5y
I personally feel that the fact that it was such an effortless attempt makes it more impressive, and really hammers home the lesson we need to take away from this. It's one thing to put in a great deal of effort to defeat some defences. It's another to completely smash through them with the flick of a wrist.
2Bird Concept5y
What exactly do you think "the lesson we need to take away from this" is? (Feel free to just link if you wrote that elsewhere in this comment section)
6FactorialCode5y
I haven't actually figured that out yet, but several people in this thread have proposed takeaways. I'm leaning towards "social engineering is unreasonably effective". That or something related to keeping a security mindset.
[-]Slider5y330

I am reminded by the ai unboxing challengs where part of the point was that any single trick that gets the job done can be guarded against but guarding against all stupid tricks is not about the tricks being particularly brilliant but just covering them all.

In millgrams experiment poeple are wiling to torture becuase a guy in a white jacket requested so. Here a person is ready to nuke the world because a accounts name incuded the word "admin".

Reply
[-]Raemon5y220

FYI I also got this message and to the best of my knowledge it was not sent by an admin

Reply
[-]habryka5y380

I can confirm that this message was not sent by any admin.

Reply
4philh5y
That's... a bit surprising. If I were behind this, I wouldn't have sent a message to you because you're likely to know the plan. Anyone who receives the message but doesn't fall for it is an extra chance for the scheme to fail, because if nothing else they can post in this thread where someone is most likely to see it before entering codes. (Chris, I'm curious if you did look in this thread before you put them in?) In your case you could react with admin powers too, though I dunno if you would have considered that fair game. I feel like this gives us a small amount of evidence about the identity of the adversary, but not enough to do any real speculation with.
[-]Bird Concept5y*110

EDIT: I now believe the below contains substantial errors, after reading this message from the attacker. 

Maybe you want to do sleuthing on your own, if so don't read below. (It uses LessWrong's spoiler feature.)

I believe the adversary was a person outside of the EA and rationality communities. They had not planned this, and they did not think very hard about who they sent the messages to (and didn't realise Habryka and Raemon were admins). Rather, they saw a spur-of-the-moment opportunity to attack this system after seeing a Facebook post by Chris Leong (which solicited reasons for and against pressing the button). I believe this because they commented on that Chris Leong posted and say they sent the message.

Reply
3Chris_Leong5y
I looked at the thread and considered commenting here, but not many people had commented, so I figured there wasn't that much chance of getting a response if I posted here.
[-]ArisKatsaris5y120

In your other post, the only reason you indicated to not press the button is that other people would still be asleep and not have experienced the thing.

As such, it feels as if the "trick" by your friend just sped up what would have almost certainly happened anyway: you eventually pressing the button and nuking the site. It'd just have happened later in the day.

Reply
1Chris_Leong5y
That was a poorly written post on my part. What I meant was that I was open to argument either way ("Should I press it or not?). I had decided that regardless of whether I pressed it or not I would at least wait until other people had a chance to wake up, as I thought it'd be boring for people if they woke up and the site was already nuked. So it wasn't my only reason - I hadn't even really thought about it too much as I was waiting for more comments. Even though it was poorly written, I'm surprised how many people seem to have misunderstood it as I would have thought it was clear enough as I asked the question.
[-]Ruby5y220

This seems plausible. I do want to note that your received message was timestamped 11:26 (local to you) and the button was pressed at 11:33:30 (The received message said the time limit was 30 minutes.), which doesn’t seems like an abundance of caution and hesitation to blow up the frontpage, as far as I can tell. :P

I know it wasn’t actual nukes, so fair to not put in the same effort, but I do hope if you ever do have nukes, you take full allotted time to think though it and discuss with anyone available (even if you think they’re unlikely to reply). ;)

Reply
9Chris_Leong5y
Well, it was just a game and I had other things to do. Plus I didn't feel a duty to take it 100% seriously since, as grateful as I was to have the chance to participate, I didn't actually choose to play. (Plus, adding on to this comment. I honestly had no idea people took this whole thing so seriously. Just seemed like a bit of fun to me!)
[-]habryka5y180

To be clear, while there is obviously some fun intended in this tradition, I don't think describing it as "just a game" feels appropriate to me. I do actually really care about people being able to coordinate to not take the site down. It's an actual hard thing to do that actually is trying to reinforce a bunch of the real and important values that I care about in Petrov day. Of course, I can't force you to feel a certain way, but like, I do sure feel a pretty high level of disappointment reading this response.

Like, the email literally said you were chosen to participate because we trusted you to not actually use the codes.

Reply
[-]Bird Concept5y*230

So, I think it's important that LessWrong admins do not get to unilaterally decide that You Are Now Playing a Game With Your Reputation. 

However, if Chris doesn't want to play, the action available to him is simply to not engage. I don't think he gets to both press the button and change the rules to decide what a button press means to other players. 

Reply
[-]lionhearted (Sebastian Marshall)5y250

So, I think it's important that LessWrong admins do not get to unilaterally decide that You Are Now Playing a Game With Your Reputation. 

Dude, we're all always playing games with our reputations. That's, like, what reputation is.

And good for Habyka for saying he feels disappointment at the lack of thoughtfulness and reflection, it's very much not just permitted but almost mandated by the founder of this place —

https://www.lesswrong.com/posts/tscc3e5eujrsEeFN4/well-kept-gardens-die-by-pacifism

https://www.lesswrong.com/posts/RcZCwxFiZzE6X7nsv/what-do-we-mean-by-rationality-1

Here's the relevant citation from Well-Kept Gardens:

I confess, for a while I didn't even understand why communities had such trouble defending themselves—I thought it was pure naivete.  It didn't occur to me that it was an egalitarian instinct to prevent chieftains from getting too much power.

This too:

I have seen rationalist communities die because they trusted their moderators too little.

Let's give Habryka a little more respect, eh? Disappointment is a perfectly valid thing to be experiencing and he's certainly conveying it quite mildly and graciously. Admins here did a hell of a job resurrecting this p... (read more)

Reply
2Bird Concept5y
I feel confused about how you interpreted my comment, and edited it lightly. For the record, Habryka's comment seems basically right to me; just wanted to add some nuance. 
2lionhearted (Sebastian Marshall)5y
Ah, I see, I read the original version partially wrong, my mistake. We're in agreement. Regards.
3Chris_Leong5y
Well, I had an option not to engage until I received the message saying it would blow up if enough users didn't press the button within half an hour.
[-]philh5y100

Even after receiving that message, it still seems like the "do not engage" action is to not enter the codes?

Reply
7Neel Nanda5y
I think "doesn't want to ruin other people's fun or do anything significant" feels more accurate than "do not engage" here?
3Kaj_Sotala5y
And then, for all he knew, his name might have been posted in a list of users who could have prevented the apocalypse but didn't.
[-]philh5y150

Honestly, I kind of think that would be a straightforwardly silly thing to worry about, if one were to think about it for a few moments. (And I note that it's not Chris' stated reasoning.)

Like, leave aside that the PM was indistinguishable from a phishing attack. Pretend that it had come through both email and PM, from Ben Pace, with the codes repeated. All the same... LW just isn't the kind of place where we're going to socially shame someone for

  • Not taking action
  • ...within 30 minutes of an unexpected email being sent to them
  • ...whether or not they even saw the email
  • ...in a game they didn't agree to play.
Reply
1Chris_Leong5y
And then maybe the site would have blown up, which was not what I was aiming for at that time.
[-]lionhearted (Sebastian Marshall)5y110

Y'know, there was a post I thought about writing up, but then I was going to not bother to write it up, but I saw your comment here H and "high level of disappointment reading this response"... and so I wrote it up.

Here you go:

https://www.lesswrong.com/posts/scL68JtnSr3iakuc6/win-first-vs-chill-first

That's an extreme-ish example, but I think the general principle holds to some extent in many places.

Reply
2Chris_Leong5y
I've responded to you in the last section of this post.
[-]Arepo5y*140

The downvotes on this comment seem ridiculous to me. If I email 270 people to tell them I've carefully selected them for some process, I cannot seriously presume they will give up >0 of their time to take part in it. 

Any such sacrifice they make is a bonus, so if they do give up >0 time, it's absurd to ask that they give up even more time to research the issue.

Any negative consequences are on the person who set up the game. Adding the justification that 'I trust you' does not suddenly make the recipient more obligated to the spammer.

Reply
[-]habryka5y*110

It's not like we asked 270 random people. We asked 270 people, each one of which had already invested many hundreds of hours into participating on LessWrong, many of which I knew personally and considered close friends. Like, I agree, if you message 270 random people you don't get to expect anything from them, but the whole point of networks of trust is that you get to expect things from each other and ask things from each other.

If any of the people in that list of 270 people had asked me to spend a few minutes doing something that was important to them, I would have gladly obliged.

Reply
[-]Arepo5y150

It doesn't matter whether you'd have been hypothetically willing to do something for them. As I said on the Facebook thread, you did not consult with them. You merely informed them they were in a game, which, given the social criticism Chris has received, had real world consequences if they misplayed. In other words, you put them in harm's way without their consent. That is not a good way to build trust.

Reply
[-]Dagon5y140

Just a datapoint on variety of invitees: I was included in the 270, and I've invested hundreds of hours into LW.  while I don't know you personally outside the site, I hope you consider me a trusted acquaintance, if not a friend.  I had no clue this was anything but a funny little game, and my expectation was that there would be dozens of button presses before I even saw the mail.

I had not read nor paid attention to the petrov day posts (including prior years).  I had no prior information about the expectations of behavior, the weight put on the outcome, nor the intended lesson/demonstration of ... something that's being interpreted as "coordination" or "trust".  

I wasn't using the mental model that indicated I was being trusted not to do something - I took it as a game to see who'd get there first, or how many would press the button, not a hope that everyone would solemnly avoid playing (by passively ignoring the mail).  I think without a ritual for joining the group (opt-in), it's hard to judge anyone or learn much about the community from the actions that occurred.

Reply
2habryka5y
And this is pretty surprising to me. Like, we ran this game last year with half of the number of people, without anyone pressing the button. We didn't really change much about the framing, so where does this expectation come from? My current model is indeed that the shared context between the ~125 people from last year is quite a bit smaller than it was this year with ~250 people.
[-]ChristianKl5y320

I don't think that there was no change in framing. Last year:

Every Petrov Day, we practice not destroying the world. One particular way to do this is to practice the virtue of not taking unilateralist action.

It’s difficult to know who can be trusted, but today I have selected a group of LessWrong users who I think I can rely on in this way. You’ve all been given the opportunity to show yourselves capable and trustworthy.

This Petrov Day, between midnight and midnight PST, if you, ChristianKl, enter the launch codes below on LessWrong, the Frontpage will go down for 24 hours.

Personalised launch code: ...

I hope to see you on the other side of this, with our honor intact.

Yours, Ben Pace & the LessWrong 2.0 Team

This year:

On Petrov Day, we celebrate and practice not destroying the world.

It's difficult to know who can be trusted, but today I have selected a group of 270 LessWrong users who I think I can rely on in this way. You've all been given the opportunity to not destroy LessWrong.

This Petrov Day, if you, ChristianKl, enter the launch codes below on LessWrong, the Frontpage will go down for 24 hours, removing a resource thousands of people view every day. Each entrusted user has

... (read more)
Reply
9Dagon5y
I hadn't paid attention to the topic, and did not know it had run last year with that result (or at least hadn't thought about it enough to update on) so that expectation was my prior.   Now that I've caught up on things, I realize I am confused.  I suspect it was a fluke or some unanalyzed difference in setup that caused the success last year, but that explanation seems a bit facile, so I'm not sure how to actually update.  I'd predict that running it again would result in the button being pressed, but I wouldn't wager very much (in either direction).
[-]Neel Nanda5y120

Awww. I can't decide whether to be annoyed with petrov_day_admin_account , or to appreciate their object lesson in the importance of pre-commitment and robust epistemologies (I'm leaning towards both!)

Reply
[-]Matt Goldenberg5y190

It seems like the lessons are more about credulity and basic opsec?  

Reply
6gjm5y
If this was also done by the site admins (rather than being a deliberate attempt at sabotage), it seems a bit xkcd-169-y to me. If it was done by the admins: If someone receiving that message had replied to say something like "the button still says 'launch the nukes' -- please clarify", what would they have been told?
8philh5y
If Chris could be confident it came from the admins I'd agree, but with my current knowledge (and assuming the admins would have been honest had Chris messaged them on their normal accounts) it feels more like pentesting.
8spencerb5y
My company "evaluates" phishing propensity by sending employees emails directing them to "honeypots" which are in the corporate domain and signed by the corporate ssl certificates. Unsurprisingly, many employees trust ssl and enter their credentials. My takeaway was not that people are bad at security, but that they will tend to trust the system if the stakes don't appear too high.
8philh5y
My partner says that as a kid, their school did something similar as part of "don't talk to strangers" teaching. The "stranger" in question was someone the class been working with all day, introduced by their teacher.
2Ben Pace5y
I also think that XKCD would be quite appropriate had it been the site admins. But no, it was not us.
3Dawn Drescher5y
Aw, consoling hugs!
9philh5y
I'd like to offer some combination of consoling hugs and ಠ_ಠ. (edit: but to be clear I'm not super-confident I wouldn't have fallen for it myself. Especially if I saw that message 25 minutes after it was sent.)
2Kevin5y
Super lame compared to last year when people were willing to pay thousands of dollars to the code holders or the charity of their choice. 4chan continues inheriting the world.
1Mati_Roy5y
So the LW team, who created the experiment, themselves tricked you by sending this message? And the way to win the game was for you to read on LessWrong the warning "enter launch codes to destroy LessWrong" and decide against it, despite the message? The message was a metaphor for a false alarm? Well, here's my metaphor for a moon-base back up: https://www.greaterwrong.com/ :) I'll set a reminder to set-up additional safety measures for next year. EtA: Ah, Vanessa Kosoy already pointed this out EtA: Ah, Raymond said it wasn't them that sent this email
2Chris_Leong5y
Yeah, it wasn't the LW team, but one of my friends
1Mati_Roy5y
who?
3Chris_Leong5y
https://www.facebook.com/casebash/posts/10100495197743741?comment_id=10100495207174841
[-]Vanessa Kosoy5y360

Notably the greaterwrong frontpage still works. Maybe it's like a Mars colony.

Reply
[-]lionhearted (Sebastian Marshall)5y150

Two thoughts —

(1) Some sort of polling or surveying might be useful. In the Public Goods Game, researchers rigorously check whether participants understand the game and its consequences before including them in datasets. It's quite possible that there's incredibly divergent understandings of Petrov Day among the user population. Some sort of surveying would be useful to understand that, as well as things like people's sentiments towards unilateralist action, trust, etc no? It'd be self-reported data but it'd be better than nothing.

(2) I wonder how Petrov Day setup and engagement would change if the site went down for a month as a consequence.

Reply
[-]Liron5y120

Right now it seems like the Nash equilibrium is pretty stable at everyone not pressing the button. Maybe we can simulate adding in some lower-priority yet still compelling pressure to press the button, analogous to Petrov’s need to follow orders or the US’s need to prevent Russians from stationing nuclear missiles in Cuba.

Reply
[-]habryka5y140

Yep, seems like the Nash Equlibrium is pretty stably at everyone not pressing the button. Really needed some more incentives, I agree.

Reply
[-]Liron5y140

Yeah I was off base there. The Nash Equilibrium is nontrivial because some players will challenge themselves to “win” by tricking the group with button access to push it. Plus probably other reasons I haven’t thought of.

Reply
9habryka5y
I did realize my comment came of a bit too snarky, now that I am rereading it. Just to be clear, no snark intended, just some light jest!
2[comment deleted]5y
[-]Mati_Roy5y90

Here's how to survive the LessWrong metaphorical end of the world (upvote this comment so others can see):

https://www.lesswrong.com/posts/evDZoYG4p6ZkQQkDw/surviving-petrov-day

Reply
[-]Neel Nanda5y80

I'm curious why this was designed to be non-anonymous? It feels more in the spirit of "be aware I could destroy something, and choosing not to" if it doesn't have cost to me, beyond awareness that destruction is sad

Reply
6Ben Pace5y
(As I stayed up quite late setting this all up, I will answer questions tomorrow... or at least, I will if the site is still up!)
9Ben Pace5y
I think I will write a follow-up post in a day or so, after the site is back up. For now, I'll leave y'all to figure out wtf to believe about the world in light of this. In the meantime I'm happy to confirm any basic facts. Indeed, user Chris_Leong submitted his unique launch codes at 4:33am Pacific Time, bringing down the LessWrong Frontpage for 24 hours.
[-]James_Miller5y50

For next year:  Raise $1,000 and convert the money to cash.  Setup some device where the money burns if a code is entered, and otherwise the money gets donated to the most effective charity.  Have a livestream that shows the cash and will show the fire if the code is entered.

Reply
[-]JoshuaFox5y*40

I was thinking you should do a game like Hofstadter describes in  "The Tale  of Happiton" and the Platonia dilemma. Avoid destruction by  cooperation, even if it is  without coordination.

Reply
[-]simon5y40

Can the nuked front page link this post for "what happened" and also the petrov day post for context, instead of just the petrov day post, so people coming in actually know why there is no front page.

Reply
2habryka5y
Just to clarify, which two posts would you like us to link to? 
3simon5y
It' s currently as I was suggesting, which makes me wonder if it was already like that and I was just confused, but I had been thinking that the "what happened" had linked to the original Petrov Day post and that that was the only post linked.
3habryka5y
Oh, sorry, you are totally correct. We originally accidentally linked to the 2019 post, and I fixed it this morning.
[-]AdeleneDawner5y30

(I guess I appreciate being thought of but it does seem like somewhat undermining your point to tag people who haven't used the site in checks seven-almost-eight years.)

Reply
3Ben Pace5y
Hi :) I was trying to safely increase the number of people with codes, so I included about 40 good older users who had very high karma but hadn't been active in the last year. It didn't seem bad to offer you the codes, you all seemed quite good natured from your comments. And not one of you nuked the site, so thanks for that...
[-]MikkW5y30

During Thursday 26th September (midnight to midnight Pacific Time), we will practice the skill of sitting together and not pressing harmful buttons.

Happy Thursday

Reply
3Ben Pace5y
Thanks, fixed.
[-]Chris_Leong5y00

Should I press the button or not? I haven't pressed the button at the current time as it would be disappointing to people if they received the email, but someone pressed it while they were still asleep.

Reply
[-]Vanessa Kosoy5y140

Wait, what? I'm confused by this comment. Did you want to nuke the frontpage? It seems inconsistent with what you wrote in the other comment.

Reply
5Mati_Roy5y
good point @Vanessa @Chris, please explain!
3Chris_Leong5y
I hadn't decided whether or not to nuke it, but if I did nuke it, I would have been it several hours later, after people had a chance to wake up.
8Vladimir_Nesov5y
Re: downvotes on the parent comment. Offers of additional (requested!) information shouldn't be punished, or else you create additional incentive to be secretive, to ignore requests for information.
8philh5y
I don't have strong feelings about this particular comment. But in general I think this is a tricky question. On the one hand you don't want to disincentivize providing the information; on the other hand you do want to be able to react to the information, and sometimes the appropriate reaction is to punish them. Maybe you want to punish them less for providing the information, but punishing them zero would also be really bad incentives.
4Vladimir_Nesov5y
If there is any punishment at all, or even absence of a reward (perhaps an indirect game theoretic reward), that is the same as there being no incentive to provide information, and you end up ignorant, that is the situation you are experiencing becomes unlikely. The point is that you are actually unable to usefully react to such information in a way that disincentivizes its delivery. If you have the tendency to try, then the information won't be delivered, and your reaction will happen in a low-probability outcome, won't have significant weight in the expected utility across outcomes. For your reaction to actually matter, it should ensure the incentive for the present situation to manifest is in place.
4philh5y
Note that one thing you can do is punish people for failing to provide information. It's not necessarily easy to get that right, but it's an option that's available.
1frontier645y
Your strategy is only valid if you assume that the community will have adequate knowledge of what's happened before wrt people who have provided information that should damage their reputation (i.e. confessed). The optimum situation would be one where we can negatively react to negative information, which will disincentivize similar bad actions in the future, but not disincentivize future actors from confessing. From another line of thinking, what's the upside to not disincentivizing future potential confessors from confessing if the community can't take any action to punish revealed misbehavior? The end result in your preferred scenario seems to be that confessions only lead to the community learning of more negative behavior without any way to disincentivize this behavior from occurring again in the future. That seems to be net negative. What's the point in learning something if you can't react appropriately to the new knowledge? If all future potential confessors have adequate knowledge of how the community has reacted to past confessors and can extrapolate how the community will react to their own confession maybe it is best to disincentivize these potential confessors from confessing.
Moderation Log
More from Ben Pace
View more
Curated and popular this week
100Comments
Petrov DayCommunitySite MetaWorld Optimization
Frontpage
The Petrov Day Red Button.

Just after midnight last night, 270 LessWrong users received the following email.

Subject Line: Honoring Petrov Day: I am trusting you with the launch codes

Hello {username},

On Petrov Day, we celebrate and practice not destroying the world.

It's difficult to know who can be trusted, but today I have selected a group of (270) LessWrong users who I think I can rely on in this way. You've all been given the opportunity to not destroy LessWrong.

This Petrov Day, if you, {username}, enter the launch codes below on LessWrong, the Frontpage will go down for 24 hours, removing a resource thousands of people view every day. Each entrusted user has personalised launch codes, so that it will be clear who nuked the site. 

Your personalised codes are: {codes}

I hope to see you in the dawn of tomorrow, with our honor still intact.

–Ben Pace & the LessWrong Team

P.S. Here is the on-site announcement.

Not Destroying the World

Stanislav Petrov once chose not to destroy the world.

As a Lieutenant Colonel of the Soviet Army, Petrov manned the system built to detect whether the US government had fired nuclear weapons on Russia. On September 26th, 1983, the system reported five incoming missiles. Petrov’s job was to report this as an attack to his superiors, who would launch a retaliative nuclear response. But instead, contrary to the evidence the systems were giving him, he called it in as a false alarm, for he did not wish to instigate nuclear armageddon. (He later turned out to be correct.)

During the Cold War, many other people had the ability to end the world – presidents, generals, commanders of nuclear subs from many countries, and so on. Fortunately, none of them did. As humanity progresses, the number of people with the ability to end the world increases, and so too does the standard to which we must hold ourselves. We lived up to our responsibilities in the cold war, but barely. (The Global Catastrophic Risks Institute has compiled this list of 60 close calls.)

In 2007, Eliezer named September 26th Petrov Day, and the rationality community has celebrated the holiday ever since. We celebrate Petrov's decision, and we ourselves practice not destroying things, even if it is pleasantly simple to do so.

The Big Red Button

Raymond Arnold has suggested many ways of observing Petrov Day. 

You can discuss it with your friends.

You can hold a quiet, dignified ceremony with candles and the beautiful booklets Jim Babcock created.

And you can also play on hard mode: "During said ceremony, unveil a large red button. If anybody presses the button, the ceremony is over. Go home. Do not speak."

This has been a common practice at Petrov Day celebrations in Oxford, Boston, Berkeley, New York, and in other rationalist communities. It is often done with pairs of celebrations, each whose red button (when pressed) brings an end to the partner celebration.

So for the second year, at midnight, I emailed personalized launch codes to 270 LessWrong users. This is over twice the number of users I sent codes to last year (which was 125), and includes a lot more users who use a pseudonym and who I've never met. If any users do submit a set of launch codes, then (once the site is back up) we'll publish their username, and whose unique launch codes they were. 

During Saturday 26th September (midnight to midnight Pacific Time), we will practice the skill of sitting together and not pressing harmful buttons.

Relating to the End of Humanity

Humanity could have gone extinct many times. 

Petrov Day is a celebration of the world not ending. It's a day where we come together to think about how one man in particular saved the world. We reflect on the ways in which our civilization is fragile and could have ended already, we feel grateful that it has not, and we ask ourselves how we could also save the world.

If you would like to participate in the tradition of Petrov Day on LessWrong this year, and if you feel up to talking directly about it, then you're invited to write a comment and share your own feelings about humanity, extinction, and how you relate to it. There's a few prompts below to help you figure out what to say. Note that not all people are in a position in their lives to focus on preventing an existential catastrophe.

  1. What's at stake for you? What are the things you're grateful for, and that you look forward to? What are the things you'd mourn if humanity perished?
  2. How do you relate to the extinction of humanity? What’s your story of coming to engage with the fragility of a world beyond the reach of god, and how do you connect to it emotionally?
  3. Are you taking actions to protect it? What are you taking responsibility for in the world, and in what ways are you taking responsibility for the future?

Finally, if you’d like to participate in a Petrov Day Ceremony today, check out Ray’s Petrov event roundup, especially the online New York mega-meetup.

To all, I wish you a safe and stable Petrov Day.

Mentioned in
97Postmortem to Petrov Day, 2020
82On Destroying the World
35Surviving Petrov Day
20A list of Petrov buttons