"AI is giving attackers a huge advantage!"
Uncategorized
128
Posts
38
Posters
0
Views
-
@Mustardfacial @jackryder That's completely fair.
At best it lets people who are mediocre at their jobs output a higher quantity of mediocre work.
But that is the "benefit" as seen by so so many people.
@cR0w @Mustardfacial Yup
and it gives them the justification they need. -
@Mustardfacial @cR0w @jackryder exactly this. And they also were not DIRECTLY harmful. Asbestos wrapped around pipes is totally safe, UNTIL you disturb it or it starts breaking up into fibers. Lead paint is safe as long as it isn't crumbling because the lead content is fully contained.
Slop is immediately harmful for no benefit. There is no safe state. It only APPEARS to increase mediocre output when in fact it only increases DEFECTIVE output.
@rootwyrm @cR0w @jackryder Asbestos was directly harmful to the people producing the sheets that you wrapped around pipes, lead in the paint was directly harmful to the people producing the paint. It was awful to the factory workers themselves more than to the average consumer.
-
@Mustardfacial @jackryder That's completely fair.
At best it lets people who are mediocre at their jobs output a higher quantity of mediocre work.
But that is the "benefit" as seen by so so many people.
@cR0w @jackryder
But that is the "benefit" as seen by so so many people.This is unfortunately the truth.
-
@rootwyrm @cR0w @jackryder Asbestos was directly harmful to the people producing the sheets that you wrapped around pipes, lead in the paint was directly harmful to the people producing the paint. It was awful to the factory workers themselves more than to the average consumer.
-
@rootwyrm @cR0w @jackryder God dammit. This is the worst fucking timeline.
-
@cR0w @jackryder Asbestos in brake pads and lead in paint did improve the product though. If they weren't so horriffic to human health, we would still be using them. Conversely, I've yet to see an instance where AI has actually improved anything. At best it lets people who are mediocre at their jobs output a higher quantity of mediocre work.
I'm extremely good at what I do - belonging to that mythical home computer generation that started programming in ASM and never stopped learning how _everything_ works. To no one's surprise I'm thus working in cybersec today, partly as an ethical hacker focusing on hw/fw exploits at the really tricky low level stuff.
A few days ago I tested, for fun, having Mistral AI's Devstral-2 model do an analysis of a firmware dump of an eMMC I had just extracted from a fully proprietary ARM-based IoT device.
In a minute or so it had made the same conclusions as I would myself, nicely documented, on not just standard partitions and what they contained but also the fully custom stuff with no standard markers at all - including making "educated guesses" at the likely boundaries between headers and data, and what the data could be based on number of bits/bytes and entropy.
The question is whether you will now consider me to be mediocre.
-
I'm extremely good at what I do - belonging to that mythical home computer generation that started programming in ASM and never stopped learning how _everything_ works. To no one's surprise I'm thus working in cybersec today, partly as an ethical hacker focusing on hw/fw exploits at the really tricky low level stuff.
A few days ago I tested, for fun, having Mistral AI's Devstral-2 model do an analysis of a firmware dump of an eMMC I had just extracted from a fully proprietary ARM-based IoT device.
In a minute or so it had made the same conclusions as I would myself, nicely documented, on not just standard partitions and what they contained but also the fully custom stuff with no standard markers at all - including making "educated guesses" at the likely boundaries between headers and data, and what the data could be based on number of bits/bytes and entropy.
The question is whether you will now consider me to be mediocre.
@troed @cR0w @jackryder No, you're looking for a fight.
What's that thing Socrates said? "I may be the smartest man alive because I know I don't know anything at all"Be humble bro.
-
@rootwyrm @cR0w @jackryder God dammit. This is the worst fucking timeline.
@Mustardfacial @cR0w @jackryder as a subscriber to multiversal theory, I sometimes joke:
Three dimensions over, scientists are debating whether it was ethically right to kill Hitler in the cradle.
Two dimensions over has a supersoldier that punches Nazis into other dimensions.
One dimension over, scientists are debating the ethics of exiling young HIitler to another dimension.
And over here we're going 'where the fuck are all these Hitlers coming from!?' -
@troed @cR0w @jackryder No, you're looking for a fight.
What's that thing Socrates said? "I may be the smartest man alive because I know I don't know anything at all"Be humble bro.
I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).
*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism
-
"AI is giving attackers a huge advantage!"
"Yes, it is. It's amazing how quickly it has destroyed dev, sec, ops, management, company missions and priorities, regulations, information literacy, and civil society, making everyone more vulnerable."
@cR0w And even Western gov's are taking decisions using AI-powered chatbots that got trained with data up to the 90's it seems.
-
I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).
*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism
@troed @Mustardfacial @jackryder Damn, I already blocked that domain.
-
I think the problem is with the "criti-hypes"* who believe they know better than everybody else (those "mediocres" of the world).
*) from https://pluralistic.net/2026/03/12/normal-technology/#bubble-exceptionalism
-
-
"AI is giving attackers a huge advantage!"
"Yes, it is. It's amazing how quickly it has destroyed dev, sec, ops, management, company missions and priorities, regulations, information literacy, and civil society, making everyone more vulnerable."
@cR0w 2026 Cybersecurity Priority List (according to LinkedIn)
AI
AI for Security
AI Security for AI
Agentic SOC
AI-SPM
CNAPP
CWPP
CSPM
CIEM
KSPM
DSPM
ASPM
.
.
.
Patch your shit
The fucking basics -
@cR0w 2026 Cybersecurity Priority List (according to LinkedIn)
AI
AI for Security
AI Security for AI
Agentic SOC
AI-SPM
CNAPP
CWPP
CSPM
CIEM
KSPM
DSPM
ASPM
.
.
.
Patch your shit
The fucking basics@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?
-
@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?
@cR0w I almost added but I think I blacked out
-
@cR0w I almost added but I think I blacked out
@badsamurai @cR0w Itβs absolutely mind-numbing to me, the orgs I encounter who donβt have a god damn asset inventory.
-
@badsamurai @cR0w Itβs absolutely mind-numbing to me, the orgs I encounter who donβt have a god damn asset inventory.
-
@badsamurai Is asset inventory covered in "the fucking basics" or is it further down?
@cR0w @badsamurai Asset inventory is covered in "the fucking basics" for system administration, let alone cybersecurity.
-
@badsamurai @cR0w Itβs absolutely mind-numbing to me, the orgs I encounter who donβt have a god damn asset inventory.
@scottwilson @badsamurai @cR0w I'll add another caveat: It's mindnumbing the number of orgs that want a pentest but don't have an inventory.
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@kilgoretrout @devol @internet ah grazie, mai provato nheko, lo installero! :)
-
@sturmsucht I wish we had a support group to air our grievances. A certain family member is straight up mocking me for my negative stance about AI / LLMs and asks ChatGPT for medical advice all the damn time π
-
π TRA POCHI GIORNI AL VIA IL CORSO "ππ¬πππ₯ π’ππππ‘π¦ππ©π ππ¨π‘πππ ππ‘π§πππ¦" π
Se sei indeciso, Γ¨ ora di iscriversi!
π 379 163 8765 βοΈ formazione@redhotcyber.com#formazione #pentest #ethicalhacking #hacking #cybersecurity #corsi #academy
-
@_elena yeah, I'm with you. Most don't understand and if they do, they don't care.
My family hears me, but they also don't fully understand the impact of what is going on online. They only see the direct impact these action have for them and that is normally what big tech uses to sell these things as "improvement".
-
Hamas all'Iran: "Cessare gli attacchi ai Paesi vicini"
Hamas ha esortato il suo alleato Iran a cessare gli attacchi contro i Paesi vicini del Golfo come risposta agli attacchi israelo-statunitensi. "Pur affermando il diritto della Repubblica islamica d'Iran a rispondere a tale aggressione con tutti i mezzi possibili - afferma -, in conformitΓ alle norme e al diritto internazionale, il movimento invita i suoi fratelli in Iran a non prendere di mira i vicini".
Sky Tg24
-
@eniko This would have fucked in games like the Gabriel Knight series.
-
@eniko series of words your grandpa lets out when he stubs his toe
-
"Dichiara vittoria e lascia l'Iran". Ovviamente, questo crypto-imbecille crede che ciΓ² dipenda solo da Trump. Il vaso di Pandora Γ¨ stato aperto
Trump adviser calls for US to βdeclare victory and get outβ of Iran https://www.ft.com/content/a85cb6eb-4b83-48bc-be34-fb76ef5989c3
