Replying to
@Euan@speedlines.stctp.zone Marble Madness
Remote
Bird Wainer
@birdwainer@infosec.exchange
mastodon 4.8.0-alpha.3+glitchSoftware engineer and Mediocre Persistent Threat. Known abuser of LLMs. Scream while you still have a mouth.
38 Followers
114 Following
17 Posts
Joined November 08, 2022
Website:
Replying to
@tinker@infosec.exchange It's important not to underestimate the psychological factors at play in the corporate AI push. Huge chunks of most organizations, and especially in leadership roles, are completely disconnected from actual work. Your boss probably only has a vague idea of what you actually do and their boss (boss^2) has no idea at all. Most of what they do all day is around managing i.e.: emails, meetings, talking etc. And AI IS a transformative technology to them precisely because it transforms something that they don't understand (coding, creating, etc.) into something that they do understand - managing an underling. That's at the root of this disconnect.
Replying to
@Em0nM4stodon@infosec.exchange I am continually amazed at the way that the average American will accept a degree of surveillance from Amazon/Google/Facebook etc. that would leave them absolutely apoplectic if instituted by the government. Just because there is a veneer of convenience associated doesn't make it better.
Replying to
@cR0w@infosec.exchange If we can get AI finding and fixing vulns at the exact same speed that it creates new ones we could have a perfect system for burning tons of money without actually accomplishing anything.
Replying to
@tinker@infosec.exchange I'd love to start something like this in my town, particularly because the nearest places with actual bike mechanics are a decent drive away. 2 questions for you:
- What is a good way to go about getting the word out about something like this?
- How do you figure out the supplies aspect of it? I'm thinking like brake pads, cables, that sort of thing.
Replying to
@cR0w The thing that I find crazy is that all of the vendor marketing is basically like "Look our AI has super hacking abilities and it will totally hack stuff even though we keep specifically asking it not to. You definitely need to hook it up to your defensive systems." I find the underlying logic baffling because you are telling me that your automated tool is powerfully capable but also bad at respecting boundaries and does things that you, the creators of said tool, don't want it to do on a regular basis and because of that I should connect it to my most sensitive systems?
I am currently looking for work. I'm a software engineer and red teamer with several years of experience. Most recently I've been doing a lot of research and some open source dev. I've worked in a bunch of different languages but recently Python and Go, starting to switch into Rust for newer projects.
Some presentations that I've done in the past can be found here: https://birdwainer.net/presentations/
Any boosts or connections would be greatly appreciated.
Replying to
@anakin78z@mograph.social An equally interesting idea would be a D&D campaign where you have to deal with the aftermath of the previous group of adventurers. Rebuild the houses they inadvertently burned, replant the crops that they ruined, re-sanctify the graves that they desecrated. That sort of thing.
Replying to
@carnage4life@mas.to Wasn't their legal argument that when they scanned and uploaded all of those books it was fair use because it was "transformative". A judge ruled that using books this way was transformative and therefore fair use. So they now have to argue that distillation isn't transformative and therefore isn't fair use. Which seems like a real stretch and also pretty ridiculous.
Replying to
@anakin78z@mograph.social I had this weird idea about clerics trying to help people with night terrors after their town was the site of a conflict between necromancers and an adventuring party. But yeah something analogous to the Damage Control comics in the Marvel Universe.
Replying to
Replying to
Lately I've been trying to do a post-winter clean up of my ditchline and i have pulled out a lot of empty glass beer bottles. It really has me wishing they would bring back the 5 cent deposit/return system on glass bottles because then I could save up all of those nickels in a sock and use it to hit the next person throwing their trash in my ditch.
You guys! Microsoft has updated the T's and C's for Copilot.
https://www.microsoft.com/en-us/microsoft-copilot/for-individuals/termsofuse
"Copilot is for entertainment purposes only. It can make mistakes, and it may not work as intended. Don’t rely on Copilot for important advice. Use Copilot at your own risk."
Copilot now carries the same warning that used to be at the end of Psychic Friends commercials!
Replying to
@agreeable_landfall@mastodon.social @SteveBellovin@infosec.exchange I would argue that it always has to be marginally worse for two reasons:
- AI, by design, makes no distinction between instructions and data, which means it inherently has no defense against the entire class of injection attacks.
- Because of point 1 above, you have to sanitize it's outputs as well as it's inputs, and that sanitization is itself going to be a set of finite rules subject to the incompleteness theorem.