Algorithmic Sabotage Research Group - Asrg

The Algorithmic Sabotage Research Group (ASRG) sits at a fraught intersection: researchers testing the limits of automated systems, corporate interests dependent on those systems, and the public whose safety and livelihoods can be affected by both. Whether approached as a provocateur, whistleblower collective, or reckless actor, ASRG forces a necessary conversation about how society designs, governs, and responds to adversarial work on algorithmic systems.

What ASRG does

Why the work attracts attention

Key tensions and trade-offs

A responsible path forward

What ASRG reveals about the broader ecosystem

Conclusion ASRG-style groups are symptomatic of a maturing socio-technical field. Their work spotlights real dangers and forces uncomfortable questions about who holds power over algorithmic systems and how accountability should be achieved. The right response is not blanket suppression or uncritical praise: it is a set of pragmatic, ethical, and legal reforms that balance transparency with harm minimization, incentivize remediation, and build durable governance around systems whose failures can ripple across society.

Policymakers, platform operators, and researchers should treat ASRG’s provocations as a diagnostic: the vulnerabilities they expose are opportunities to harden systems and align incentives—if stakeholders respond responsibly instead of reflexively litigating or ignoring the signals.

The Aesthetics of Resistance: Inside the Algorithmic Sabotage Research Group (ASRG)

The Algorithmic Sabotage Research Group (ASRG) is not your typical tech think tank. Describing itself as a "conspiratorial, aesthetico-political, practice-led research framework," it operates at the volatile intersection of digital culture, militant activism, and information technology. While mainstream AI safety research often focuses on making models more "helpful" or "harmless" for corporate use, the ASRG seeks to dismantle the very "algorithmic empire" that enables modern forms of domination. A Manifesto for Techno-Disobedience

At the heart of the group’s identity is the Manifesto on Algorithmic Sabotage, a series of ten provocative statements that frame sabotage not as mindless destruction, but as a sophisticated form of "counter-power". The group argues that algorithms are often used to enforce structural injustices, from racial stereotypes in generative AI to the "necropolitical" surveillance of marginalized communities. Key principles of their approach include:

Techno-Politics First: They believe the first step in addressing technological harm is political, not technical. Real change comes from social autonomy and mutual aid, not just better code.

Militant Agency: ASRG advocates for "wildcat direct action" against hegemonic technology. This involves creative misuse and "insurrectionary desire" to disrupt the automaticity of capitalist systems. algorithmic sabotage research group asrg

Intersectionality: Their work is deeply rooted in radical feminist, anti-fascist, and decolonial perspectives, challenging the reductive "optimizations" that ignore human interdependence. Bridging Theory and Praxis

The ASRG distinguishes itself by turning high-level theory into "praxis"—the practical application of ideas. They facilitate collaborative tools and workshops designed to help people "get their hands into the guts of systems". This "practice-led" research might involve scrambling image data to evade facial recognition or developing tactics for "techno-disobedience" that allow communities to reclaim digital spaces.

By framing sabotage as an "emancipatory defense," the ASRG provides a roadmap for those who feel trapped by algorithmic authoritarianism. They remind us that technology is not an inevitable force of nature, but a built environment that can be challenged, hacked, and ultimately reshaped by the collective "counter-intelligence" of those it seeks to control. Don't show me your AI. It is rude! - Tactical Tech

The Algorithmic Sabotage Research Group (ASRG): Deciphering the Art of Digital Resistance

As artificial intelligence and automated systems increasingly dictate the terms of modern life—from hiring algorithms to predictive policing—a specialized niche of critical inquiry has emerged to challenge this "algorithmic hegemony." At the forefront of this movement is the Algorithmic Sabotage Research Group (ASRG).

Neither a traditional academic body nor a standard hacking collective, the ASRG represents a fusion of media theory, political activism, and technical subversion. Their work explores a provocative question: If an algorithm is inherently biased or oppressive, is the most ethical response to break it? What is Algorithmic Sabotage?

To understand the ASRG, one must first define "algorithmic sabotage." In the industrial era, sabotage involved literal "clogs in the machine"—physical acts to halt production. In the digital age, sabotage is semiotic and structural. It involves:

Obfuscation: Intentionally feeding "noise" or false data into tracking systems to render their profiles useless.

Adversarial Attacks: Using technical exploits to trick machine learning models into making incorrect classifications.

Data Poisoning: Corrupting the datasets used to train AI to prevent the development of harmful predictive tools.

The ASRG views these acts not as "vandalism," but as a necessary form of digital self-defense. The Philosophical Core of ASRG

The group’s research often draws from "Luddite" philosophy—not in the sense of being anti-technology, but in being pro-human. They argue that many modern algorithms are designed to extract value and enforce social control. The Algorithmic Sabotage Research Group (ASRG) sits at

Their published works and "how-to" guides often focus on Counter-Operational Media. This involves creating tools that don't just "fix" a bug in a system, but render the system’s logic completely non-functional. For example, if a facial recognition system is being used for mass surveillance, ASRG-style sabotage focuses on making the environment "unreadable" through camouflage, infrared interference, or algorithmic "dazzle." Key Areas of Inquiry

The ASRG’s body of work typically spans three primary domains:

Labor & Automation: Investigating how workers (such as delivery drivers or content moderators) can "game" the algorithms that manage them to regain autonomy and fair pay.

The Archive of Resistance: Documenting historical and contemporary instances where marginalized groups have successfully subverted automated systems.

Critical Technical Practice: Developing open-source code and artistic interventions that expose the hidden "black box" logic of corporate and state AI. Impact and Controversy

The ASRG occupies a controversial space. To tech corporations, their research is often seen as a security threat. To civil liberties advocates, they provide the blueprint for maintaining privacy in an era of "surveillance capitalism."

By treating sabotage as a legitimate research methodology, the ASRG forces us to confront the power dynamics of the code that governs our world. They suggest that the "glitch" is not always a mistake; sometimes, it is an act of liberation. Conclusion

The Algorithmic Sabotage Research Group serves as a vital reminder that technology is not a neutral force. As algorithms become more pervasive, the ASRG’s work in documenting and theorizing resistance ensures that the "human element" remains capable of pushing back against the machine.

In the silent war between generative AI developers and the artists whose work trains them, a new kind of guerilla tactic has emerged. It doesn’t involve lawsuits, picket lines, or congressional testimony. Instead, it lives inside the weights of a neural network—a digital landmine designed to explode when an AI tries to draw a specific image.

At the center of this counter-offensive is a loose, decentralized collective known as the Algorithmic Sabotage Research Group (ASRG) .

While the name sounds like something lifted from a William Gibson novel, the ASRG is a very real, albeit shadowy, coalition of machine learning researchers, digital artists, and adversarial AI specialists. Their mission statement is short and provocative: "To render the unauthorized scraping of creative works for generative AI economically inviable through technical sabotage."

This article dives deep into who the ASRG is, how their "poison pills" work, the ethical firestorm they have ignited, and whether their brand of algorithmic warfare can actually survive the next generation of AI models. Why the work attracts attention


After years of sabotage research, the ASRG has also developed a defensive playbook:

The ASRG did not emerge from a university lab or a corporate R&D department. According to leaked whitepapers and anonymous interviews with founding members (who all insisted on Signal voice calls with voice changers), the group coalesced in late 2022—just weeks before the public explosion of Stable Diffusion and Midjourney.

The catalyst was a discovery known as "concept bleeding." Researchers noticed that diffusion models were not just learning artistic styles; they were memorizing specific training images. If an artist’s work appeared hundreds of times in LAION-5B (the open dataset that powered Stable Diffusion), the model could reproduce near-exact replicas of that artist’s portfolio.

For the ASRG, this wasn't a bug—it was a vulnerability.

"If the model can memorize my brush strokes," one ASRG operative wrote in a manifesto posted to a now-deleted Github repository, "then the model can be forced to memorize a bomb."

The group’s first public action was the release of Nightshade 1.0 (though the group insists they merely "inspired" the open-source tool). But their flagship internal project, code-named "Glaucus," goes far beyond simple pixel manipulation.


Unlike traditional data poisoning (where you corrupt a dataset before training), the ASRG focuses on post-hoc sabotage—poisoning the inference pipeline.

Here is how their flagship technique works:

The "Cross-Model Contagion" The ASRG’s most terrifying discovery is cross-model contagion. Because many fine-tuned models (like those on Civitai) are built by merging weights from base models, a poison that infects Stable Diffusion 2.1 can spread to derivative models like a virus. The ASRG has reportedly mapped "poison transmission vectors" across the Hugging Face ecosystem.

"We aren't trying to break one model," reads an ASRG internal memo obtained by this journalist. "We are trying to collapse the trust gradient of all open-source weights. If you don't know whether a dataset contains our samples, you cannot safely train a model."


While version 1.0 was academic, version 2.1 added "dynamic payloads"—the poison sample changes its adversarial noise based on the model architecture attempting to read it. It analyzes the model's activation functions in real-time.

The primary mission of ASRG is to advance the state-of-the-art in adversarial machine learning. This involves:

The ASRG’s toolkit would borrow from adversarial machine learning, critical infrastructure studies, and artistic activism. Key research vectors would include: