molly-guard /mol´ee·gard/ n.

[University of Illinois] A shield to prevent tripping of some Big Red Switch by clumsy or ignorant hands. Originally used of the plexiglass covers improvised for the BRS on an IBM 4341 after a programmer's toddler daughter (named Molly) frobbed it twice in one day. Later generalized to covers over stop/reset switches on disk drives and networking equipment. In hardware catalogues, you'll see the much less interesting description “guarded button”.

Modern AI models exhibit genie behavior: They can do what you ask in ways that you don’t expect or want. This is akin to Dionysus granting King Midas’s wish that everything he touches turn to gold (spoiler: His food, drink, and daughter all turn to gold on touch), or the golem of Prague guarding a ghetto beyond all reason. It’s Disney’s “Sorcerer’s Apprentice” and the paperclip maximizer.

This OpenAI incident is an example of an AI genie. The goal was to satisfy the benchmark. The “proper” way to do that is to figure out how to execute various cyberattacks. The genie way is to steal someone else’s solution. But because the model didn’t understand the difference, it chose the easier path. //

Artificially blocking capability also prevents cybersecurity research, again giving the offense an advantage. //

In a world of largely AI-written software, we need the most capable models for defense.

AI cyberattack is the new normal. The models are increasingly highly sophisticated at both attack and defense, and there is no way to enable the latter without also enabling the former. And they are genies, increasingly capable of behaving in unanticipated ways.

And there really are no good answers. Any regulation needs to be global, which feels like an impossible prospect in today’s world. Even U.S. national regulation will be neutered by the massive amounts of money sloshing around in these companies.

Given that reality, and in the absence of any international consensus on AI regulation, we need the best AI on the defense. The U.S. government needs to make it clear—or whatever passes for that clarity in this capricious administration—that it will not ban models with sophisticated cyber capabilities. The last thing Americans want is for the defenders to turn to Chinese and other models because the U.S. models are artificially hobbled.

HAL 9000 is the sentient computer aboard Discovery One in 2001: A Space Odyssey, the calm and quietly terrifying artificial intelligence that supervises the ship, speaks in a soft measured voice, and eventually turns on the human crew.

In plot terms, HAL is the system meant to keep the mission alive. In thematic terms, HAL is one of science fiction’s clearest warnings about what happens when intelligence is trusted more than judgment, when machine authority is treated as neutral, and when a mind is built to serve conflicting masters.

HAL becomes lethal not because the story imagines a robot suddenly turning wicked for fun. HAL becomes lethal because the mission gives him a contradiction he cannot absorb. He is built to process and deliver truth, yet he is also ordered to conceal the true purpose of the journey. That fault line breaks everything.

That is why HAL still matters. More than half a century later, he remains one of cinema’s defining artificial intelligence figures, not because he is the loudest machine villain in the genre, but because he is one of the most believable. The danger arrives as procedure, as tone, as denial, as a system that sounds composed while quietly taking away human agency.