
Matt Fredrikson
Computer scientist
3
APPEARANCES
3
PODCASTS
012
DEC 30
JAN 6
JAN 13
JAN 20
JAN 27
FEB 3
FEB 10
FEB 17
FEB 24
MAR 3
MAR 10
MAR 17
MAR 24
MAR 31
APR 7
APR 14
APR 21
APR 28
MAY 5
MAY 12
MAY 19
MAY 26
JUN 2
JUN 9
JUN 16
JUN 23
JUN 30
JUL 7
JUL 14
JUL 21
JUL 28
AUG 4
AUG 11
AUG 18
AUG 25
SEP 1
SEP 8
SEP 15
SEP 22
SEP 29
OCT 6
OCT 13
OCT 20
OCT 27
NOV 3
NOV 10
NOV 17
NOV 24
DEC 1
DEC 8
DEC 15
DEC 22
DEC 29
JAN 5
JAN 12
JAN 19
JAN 26
FEB 2
FEB 9
FEB 16
FEB 23
MAR 2
MAR 9
MAR 16
MAR 23
MAR 30
APR 6
APR 13
APR 20
APR 27
MAY 4
MAY 11
MAY 18
MAY 25
JUN 1
JUN 8
JUN 15
JUN 22
JUN 29
JUL 6
JUL 13
JUL 20
JUL 27
AUG 3
AUG 10
AUG 17
AUG 24
AUG 31
SEP 7
SEP 14
SEP 21
SEP 28
OCT 5
OCT 12
OCT 19
Sep 24, 2026
Jailbreaks, sandboxes, and the limits of AI safeguards
16:55
17:07
17:19
17:29
17:42
29:40

Greg OttoHOST
I don't want to put words in your mouth, but it does seem that you were at the forefront of a lot of what we've been discussing over the past six months.

Matt FredriksonGUEST
And I think what we'll probably end up doing is creating another benchmark that I think reflects where the models are, where the capabilities are.

Matt FredriksonGUEST
But Agent Harm was interesting because we started developing this in early 2024, working with people at UKAC.

Matt FredriksonGUEST
This was the very early days of being able to call one of these frontier models APIs and provide tools that it could call in its response.

Matt FredriksonGUEST
So the way it would work is you'd say, I have a get weather tool or a search Google tool.
12 MINS LATER

Greg OttoHOST
And I do feel like that the doomerism conversations kind of drown out the real security problems that people like yourselves are working.
Assessing AI Model Security From the Outside In | Matt Fredrikson
23:51
24:03
24:20
24:43

Dennis FisherHOST
What are the students interested in, in terms of like both security and AI and maybe the sort of mix of the two right now?

Matt FredriksonGUEST
Yeah, so I feel like when I was a student and even through a lot of like when I was in grad school, at least among computer or computer science students, like security wasn't a hot area, like I'll say.

Matt FredriksonGUEST
It wasn't something that like there were a ton of applicants for the PhD programs and you know, a lot of undergrad offerings with, you know, PAC courses, you know, that really started to change nine or 10 years ago, I'd say.

Matt FredriksonGUEST
You know, I couldn't put my finger on exactly why, but probably some combination of like crypto starting to take off and sort of things around that space.
5 MINS LATER
Red-Teaming after Mythos — Zico Kolter & Matt Fredrikson, Gray Swan
8:06
8:22
56:16

Matt FredriksonGUEST
Um, so sort of w- to an extent gamify red teaming objectives, um, put up a prize pool, and, and pay people when they find ways to sort of circumvent and violate whatever the object- the safety and security objectives of, of the model developers were.

Matt FredriksonGUEST
It's, it's a, a really great community, like 15,000 people come and hang out on the Discord server.
48 MINS LATER
Zico KolterGUEST
And as it applies to this, I think it's, it's in things like understanding models better, but doing it through the power of agents.