Ask Lemmy
A Fediverse community for open-ended, thought provoking questions
Rules: (interactive)
1) Be nice and; have fun
Doxxing, trolling, sealioning, racism, toxicity and dog-whistling are not welcomed in AskLemmy. Remember what your mother said: if you can't say something nice, don't say anything at all. In addition, the site-wide Lemmy.world terms of service also apply here. Please familiarize yourself with them
2) All posts must end with a '?'
This is sort of like Jeopardy. Please phrase all post titles in the form of a proper question ending with ?
3) No spam
Please do not flood the community with nonsense. Actual suspected spammers will be banned on site. No astroturfing.
4) NSFW is okay, within reason
Just remember to tag posts with either a content warning or a [NSFW] tag. Overtly sexual posts are not allowed, please direct them to either !asklemmyafterdark@lemmy.world or !asklemmynsfw@lemmynsfw.com.
NSFW comments should be restricted to posts tagged [NSFW].
5) This is not a support community.
It is not a place for 'how do I?', type questions.
If you have any questions regarding the site itself or would like to report a community, please direct them to Lemmy.world Support or email info@lemmy.world. For other questions check our partnered communities list, or use the search function.
6) No US Politics.
Please don't post about current US Politics. If you need to do this, try !politicaldiscussion@lemmy.world or !uspolitics@lemmy.world
7) No Hit-and-Run questions.
Please don't delete your post for no apparent reason. If you plan on deleting a question later, say so in the post, or if you feel that you have a good reason to remove it, message a mod beforehand. It's not fair to the ones who took their time to answer, and it's not in the spirit of the community.
8) No Bots.
Posts or comments from bots, LLM's, AIs, Neural Networks, Transformers, or Marvin the Paranoid Android are not welcome in AskLemmy. Real humans only please.
Reminder: The terms of service apply here too.
Partnered Communities:
Logo design credit goes to: tubbadu
view the rest of the comments
I know some of it is from the problem of cyber security issues, very real ones, that stem from ai models, both the llm kind and the more advanced multi modal coding variety that have made finding vulnerabilities and then incorporating attacks into home brewed or nation state brewed targeting much, much easier and faster. This has resulted in very real network problems, and isn’t expected to get easier to defend against because it’s not like you just update for ai facilitated hacks and you’re done, they are just going to increase in numbers until basically an entirely different method of protecting systems is employed.
This has made many people nervous and believe that it’s only a matter of time before financial systems, energy sector systems, water systems, basically all the critical infrastructure, are attacked and have to go offline until long term fixes are found.
There will be people saying ai is all an illusion and just next word predictive analytics that can’t even do basic math, but those days are over, it was true months ago, but the modern models are much, much more capable and llms aren’t what’s being used to do the hacking, llms are being used to find known vulnerabilities that were largely ignored or orgs have been too slow to patch, but that’s not the only method being used to find new vulnerabilities. It’s a problem, cybersecurity in the ai companies have said they’re probably 18 months away from developing models that are specifically for defensive cybersecurity, so even they can’t and aren’t profiting from this issue right now, so it’s not just hype.
That being said, I’ve always been a believer in having a few days at least of food, water, medical supplies, and power generation. I don’t believe more than that will be necessary because if it is, we’re all screwed and no amount of prepping will ensure safety and over stocking will just make you a target and put a target on your family and property. Just be smart and have the basics you would need for a really bad weather event. You should always have that.
Should have kept critical infrastructure offline then 😁 this is their own doing.
Agreed
If people are using LLMs to find vulnerabilities then why doesn't cybersecurity do the same. Run patches and updates through simulations until it's as AI proof as possible. Is there a reason why AI can't be used for white hatting?
Many are, but it’s not enough. Yes ai is expected to be used to automate white hatting, and already is by the most reasonable and advanced orgs, but greed and stupidity do exist and always will. Many companies fired or minimized security staff because they wanted to minimize overhead or thought ai would make one security staff member able to do the job of five. Many servers and sites just sit there run by private individuals or small companies that don’t even have a cybersecurity team.
A huge issue is ai tools have done a very specific thing that makes it harder to shore up - it used to be tedious and boring to implement hacks once a vulnerability was discovered, so a vulnerability would sit unused for days, weeks, months. Ai now ca do all that tedious, boring work for you, and lowers the bar for who can. That drastically increases the number of attacks and the discovery and dissemination of zero day hacks. Ai won’t be omniscient, so it won’t prevent everything even when it can be always on and just as capable defensively.
Also, it's a good rule of thumb to expect destructive forces to take less time than constructive ones, depending on the target and the goals. Constructing things properly takes care and planning, but taking a sledgehammer to a system can be pretty swift if you know where to hit
So the root problem goes back to capitalism really. AI is the tool but greed and ignorance are the engine as usual.
That’s how I read it too. All because they hope it pays off for rich people.. and maybe some of us poors. But probably not.
Whose AI are you using to secure your systems? If you're in the UK and your using American AI to harden things, you could be just installing their back doors. Maybe you get the lesser AI and they use the top of the line.
Edit maybe they just quietly interfere with your cloud infra, under a secret presidential order.
I'm not sure what you're talking about. A white hat would design their own AI for the specific purpose of stress testing a security system.
Not sure what you're talking about. A white hat doing home hobbyist levels of DIY AI building will get blown out of the water by the corporations and governments sponsoring serious systems.
I don't understand why you think someone contracted or works for a cybersecurity company would be some hobbyist DIY guy with a computer.
Cause you are talking about some guy, not the collective efforts of companies or governments.
What gave you the impression that I was just talking about some guy
A white hat, singular. Sorry if I misunderstood. In retrospect you could have been implying a white hat org.
Would you consider a white hat to be "some guy" or someone that actually has knowledge of hacking
White hat speaks to what they do, not their profficiency at it.
Ok man, keep a lookout for the governments trying to sabotage you