0ddj0bb @BsidesBloomington
He/him they/them; atheist (sometimes militant, sometimes just wanting to live my life)
Former CEO of @CircleCityCon@infosec.exchange;
Go check out Glass of 0J my youtube channel https://Glassof0j.com
Tiktok: @glassof0j@tiktok.com
@da_667@infosec.exchange i reduced all my false positive alerts by putting all logs to /dev/null. That AI capabilities watching that directory really do a fantastic job of tuning out the tool's overzealous detections.
I'll be Delving into the whistleblower reporting on Delve's Compliance AI platform which appears to be largely operating as a commercial front for rubber stamping auditor firms from India while claiming to be an AI platform to help its customers navigate, prepare for, and attain certification/attestation for their SOC2 and ISO 27001 audits/assessments.
The conclusion:
It isn't AI
The reports are all canned
The evidence is pre-genned by Delve
The reports are all signed off by the India based auditors which are supposed to be US based firms.
Every firm that used Delve has likely committed fraud by extension.....
What can we learn from this?
Find out at 8PM EDT tonight
Delving into Fraudulent AI Products
Never been to DefCon so you're unsure how you can ever be a #hacker? Well good news is going to #DEFCON (or any hacker conference) is not what makes you a hacker and there are many activities outside of conferences to engage with.
@dnsprincess@infosec.exchange and 0DDJ0BB discuss a variety of ways to participate in Hacker communities without going to conferences.
Glassof0J Hacker Community Activities with DNSPrincess
@acdha@thepit.social these ghouls always imagine theyre going to be wiped out of existence by someone else.....
because they are fantasizing about doing it to everyone else already and assume everyone else is like them
we said release all the names and we meant it.
Chomsky can go to hell.
Well here it is! It's been since like October since @dnsprincess@infosec.exchange and I recorded this but I'm finally uploading it.
We discuss #AI #Privacy and #Ethics as it pertains to personal usage and development for the general user space. (Corporate applications of AI are a separate matter entirely and is a topic well worth discussing later)
It premiers Apr 6 1130AM EDT so book mark this and be ready to watch!
Glassof0J AI Privacy and Ethics with DNS Princess
Hi your fish smells weird. has it been stored correctly?
Well it might have stayed out just a bit too long because our fridge unit broke down for a couple days but it should be fine.
No. You need to get new fish and stop serving fish right now until you can serve fresh fish
But that would cause me to close my store for a short period of time!
Yes but no one will get sick which would cause many more problems than you not being able to serve a meal to someone.
But im on a deadline! customers are expecting to have fish today! i cant wait for fresh fish to come in.
Im sure your customers dont want to consume spoiled fish more than they dont want a late meal.
Are you sure we cant just serve them some of the fish that wasnt out too terribly long? im sure that fish is okay right?
No. your fish supply has been contaminated and we cant trust it. we have to have new verifiably fresh fish we can serve to customers.
But youre stopping the business.
im protecting the business from lawsuits due to your customers getting poisoned from fish at this point youre well aware is contaminated and not safe for consumption.
but this will cost us to lose business with customers
not as much as a massive food poisoning scandal will. the damage is already done. now its about limiting further damage.
how many of yall have had this conversation before? but not about fish?
For those who missed it, you can still view the #Glassof0J livestream from Friday.
I cover North Korea taking Drift Protocol for 285 million dollars by in person physically courting them into a fake B2B integration over the course of 6 months.
i also cover #Glasswing from #Anthropic #AI and try to expand on what projects like these mean for vulnerabilities, future of security work, and the level of mediocrity at scale businesses are willing to accept.
North Korea and AI Are Coming For Our Jobs!
https://youtube.com/live/NvQTwK83wtk?feature=share
Where the hell has #Glassof0J been?
Well im getting back to it. just may be more stream of through and less manicured episodes.
What would you like to see Glass of 0J cover?
Where the hell has 0DDJ0BB been?
https://youtu.be/F_DsUURCakY?si=VflxrzrW6yUSogAz
"Better to Die in Iran
to go out in style
than to prosecute a rapist
or convict a pedophile"
#JesseWelles does it again
okay. so say i wanna build some kinda ai or learn how llms and slms work by building and tinkering.
how do i go about doing that without asking ai to do it for me?
(what many videos and guides are literally telling people to do. )
i want to actually learn this stuff not just participate blindly in the abstraction.
goal is to study how building ai works, how to secure the dev and build process as well as setup a sandbox to test suspectibilty of models to poisoning and injection (and maybe how to detect and respond to that)
AI Doomerism
Going live at 845PM EDT
https://youtube.com/live/v7wq4-n8-fE?feature=share
#Glassof0J #AI #Glasswing #Anthropic #Mythos #InfoSec #Hacking
North Korea and AI Are Coming For Our Jobs!
And now it is Live!
DNS Princess joins 0DDJ0BB once again to discuss #AI with regards to personal #privacy as well as the ethics and dangers of using or developing AI for certain purposes.
We cover usage in phones, retail, therapy, executive management decision making and more.