"AI is giving attackers a huge advantage!"
Uncategorized
128
Posts
38
Posters
0
Views
-
"AI is giving attackers a huge advantage!"
"Yes, it is. It's amazing how quickly it has destroyed dev, sec, ops, management, company missions and priorities, regulations, information literacy, and civil society, making everyone more vulnerable."
@cR0w Until recently I worked somewhere that was pressuring developers into using the AI tools it was paying for.
One feature of working for that company was its "security" - pretty well anything you tried to do ran into some roadblock or other because "security".
So I asked the AI: "How do I get round this 'security' feature?"
And instead of reporting me to security it actually gave me an answer. Which, in the nature of code generated by AI, didn't actually work, but it gave me a clue as to how to come up with something that did.
-
@Mustardfacial @jackryder That's completely fair.
At best it lets people who are mediocre at their jobs output a higher quantity of mediocre work.
But that is the "benefit" as seen by so so many people.
@cR0w @Mustardfacial Yup
and it gives them the justification they need. -
@Mustardfacial @cR0w @jackryder exactly this. And they also were not DIRECTLY harmful. Asbestos wrapped around pipes is totally safe, UNTIL you disturb it or it starts breaking up into fibers. Lead paint is safe as long as it isn't crumbling because the lead content is fully contained.
Slop is immediately harmful for no benefit. There is no safe state. It only APPEARS to increase mediocre output when in fact it only increases DEFECTIVE output.
@rootwyrm @cR0w @jackryder Asbestos was directly harmful to the people producing the sheets that you wrapped around pipes, lead in the paint was directly harmful to the people producing the paint. It was awful to the factory workers themselves more than to the average consumer.
-
@Mustardfacial @jackryder That's completely fair.
At best it lets people who are mediocre at their jobs output a higher quantity of mediocre work.
But that is the "benefit" as seen by so so many people.
@cR0w @jackryder
But that is the "benefit" as seen by so so many people.This is unfortunately the truth.
-
@rootwyrm @cR0w @jackryder Asbestos was directly harmful to the people producing the sheets that you wrapped around pipes, lead in the paint was directly harmful to the people producing the paint. It was awful to the factory workers themselves more than to the average consumer.
-
@rootwyrm @cR0w @jackryder God dammit. This is the worst fucking timeline.
-
@cR0w @jackryder Asbestos in brake pads and lead in paint did improve the product though. If they weren't so horriffic to human health, we would still be using them. Conversely, I've yet to see an instance where AI has actually improved anything. At best it lets people who are mediocre at their jobs output a higher quantity of mediocre work.
I'm extremely good at what I do - belonging to that mythical home computer generation that started programming in ASM and never stopped learning how _everything_ works. To no one's surprise I'm thus working in cybersec today, partly as an ethical hacker focusing on hw/fw exploits at the really tricky low level stuff.
A few days ago I tested, for fun, having Mistral AI's Devstral-2 model do an analysis of a firmware dump of an eMMC I had just extracted from a fully proprietary ARM-based IoT device.
In a minute or so it had made the same conclusions as I would myself, nicely documented, on not just standard partitions and what they contained but also the fully custom stuff with no standard markers at all - including making "educated guesses" at the likely boundaries between headers and data, and what the data could be based on number of bits/bytes and entropy.
The question is whether you will now consider me to be mediocre.
-
I'm extremely good at what I do - belonging to that mythical home computer generation that started programming in ASM and never stopped learning how _everything_ works. To no one's surprise I'm thus working in cybersec today, partly as an ethical hacker focusing on hw/fw exploits at the really tricky low level stuff.
A few days ago I tested, for fun, having Mistral AI's Devstral-2 model do an analysis of a firmware dump of an eMMC I had just extracted from a fully proprietary ARM-based IoT device.
In a minute or so it had made the same conclusions as I would myself, nicely documented, on not just standard partitions and what they contained but also the fully custom stuff with no standard markers at all - including making "educated guesses" at the likely boundaries between headers and data, and what the data could be based on number of bits/bytes and entropy.
The question is whether you will now consider me to be mediocre.
@troed @cR0w @jackryder No, you're looking for a fight.
What's that thing Socrates said? "I may be the smartest man alive because I know I don't know anything at all"Be humble bro.
-
@rootwyrm @cR0w @jackryder God dammit. This is the worst fucking timeline.
@Mustardfacial @cR0w @jackryder as a subscriber to multiversal theory, I sometimes joke:
Three dimensions over, scientists are debating whether it was ethically right to kill Hitler in the cradle.
Two dimensions over has a supersoldier that punches Nazis into other dimensions.
One dimension over, scientists are debating the ethics of exiling young HIitler to another dimension.
And over here we're going 'where the fuck are all these Hitlers coming from!?' -
@troed @cR0w @jackryder No, you're looking for a fight.
What's that thing Socrates said? "I may be the smartest man alive because I know I don't know anything at all"Be humble bro.
I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).
*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism
-
"AI is giving attackers a huge advantage!"
"Yes, it is. It's amazing how quickly it has destroyed dev, sec, ops, management, company missions and priorities, regulations, information literacy, and civil society, making everyone more vulnerable."
@cR0w And even Western gov's are taking decisions using AI-powered chatbots that got trained with data up to the 90's it seems.
-
I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).
*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism
@troed @Mustardfacial @jackryder Damn, I already blocked that domain.
-
I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).
*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism
-
-
"AI is giving attackers a huge advantage!"
"Yes, it is. It's amazing how quickly it has destroyed dev, sec, ops, management, company missions and priorities, regulations, information literacy, and civil society, making everyone more vulnerable."
@cR0w 2026 Cybersecurity Priority List (according to LinkedIn)
AI
AI for Security
AI Security for AI
Agentic SOC
AI-SPM
CNAPP
CWPP
CSPM
CIEM
KSPM
DSPM
ASPM
.
.
.
Patch your shit
The fucking basics -
@cR0w 2026 Cybersecurity Priority List (according to LinkedIn)
AI
AI for Security
AI Security for AI
Agentic SOC
AI-SPM
CNAPP
CWPP
CSPM
CIEM
KSPM
DSPM
ASPM
.
.
.
Patch your shit
The fucking basics@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?
-
@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?
@cR0w I almost added but I think I blacked out
-
@cR0w I almost added but I think I blacked out
@badsamurai @cR0w It’s absolutely mind-numbing to me, the orgs I encounter who don’t have a god damn asset inventory.
-
@badsamurai @cR0w It’s absolutely mind-numbing to me, the orgs I encounter who don’t have a god damn asset inventory.
-
@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?
@cR0w @badsamurai Asset inventory is covered in "the fucking basics" for system administration, let alone cybersecurity.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
"mi assicuri di non essere vaccinato?"
"certamente!"
"Guarda che te l'ha do solo se sei puro!"
"Che me possino cegamme!"Un po' come quando si prendevano di mira le timorate della Madonna.
-
Checked in at 튜링의사과 by @hongminhee@hollo.social
튜사에 出勤!
-
Porting MS-DOS 2.0 to the Apple IIe
Although the Apple II range of computers were based around the 6502 processor, they could still run x86 software using expansion cards that were effectively self-contained computers. This way an Apple IIe owner, for example, could install an Intel 8088-based AD8088 co-processor card by ALF Products and run CP/M-86 as well as MS-DOS. Unfortunately, as [Seth Kushniryk] discovered while digging into this MS-DOS option, there don’t seem to be any remaining copies of the accompanying MS-DOS 2.0 software.
The obvious response to this is of course to try and port it once again, which [Seth] did. So far he got it to boot, though it’s not quite ready for prime-time yet. Although the AD8088 card is fairly self-contained, it still has to talk with the Apple IIe system, which poses some challenges. To help with the porting he’s using the MS-DOS 2.0 OEM Adaptation Kit that was released along with the sources a while back.
The Apple II has to first load the basic MS-DOS files into the 8088’s RAM before handing over control, which works now along with the basic functionality. Before [Seth] releases the port to the public he still wants to fix a number of issues, in particular the clock. ProDOS on the Apple IIe encodes the year differently than MS-DOS, so that the latter’s clock is off by a few years, and the console driver is still not quite as robust as [Seth] would like it to be.
Beyond this there is also working with the other cards in the Apple II2 system, including the Super Serial Card, and working with the ProDOS filesystem.
-
@box464@mastodon.social welp, that was fast
-
@Kye should have shared an LLM summary instead SMH
-
The reboot of Digg is shutting down for awhile.
Interesting read, especially the bot problem.
-
Numeri che pensano (ebook)
@libri - L'IA e le storie della matematica che le stanno dietro
-
@evan oh that's awful - I'm so sorry.
It's so important to have the soles of your shoes out on the pavement of your streets. You live among neighbours that way. And should never lose one of your community THIS way. 😩
