I’ve had a couple of friends ask me if I’m prepping.
Prepping for what?
I see the UK is doing a Be Prepared campaign and Fucking Dan Bongino said something on a podcast. What’s that about?
I’ve had a couple of friends ask me if I’m prepping.
Prepping for what?
I see the UK is doing a Be Prepared campaign and Fucking Dan Bongino said something on a podcast. What’s that about?
I know some of it is from the problem of cyber security issues, very real ones, that stem from ai models, both the llm kind and the more advanced multi modal coding variety that have made finding vulnerabilities and then incorporating attacks into home brewed or nation state brewed targeting much, much easier and faster. This has resulted in very real network problems, and isn’t expected to get easier to defend against because it’s not like you just update for ai facilitated hacks and you’re done, they are just going to increase in numbers until basically an entirely different method of protecting systems is employed.
This has made many people nervous and believe that it’s only a matter of time before financial systems, energy sector systems, water systems, basically all the critical infrastructure, are attacked and have to go offline until long term fixes are found.
There will be people saying ai is all an illusion and just next word predictive analytics that can’t even do basic math, but those days are over, it was true months ago, but the modern models are much, much more capable and llms aren’t what’s being used to do the hacking, llms are being used to find known vulnerabilities that were largely ignored or orgs have been too slow to patch, but that’s not the only method being used to find new vulnerabilities. It’s a problem, cybersecurity in the ai companies have said they’re probably 18 months away from developing models that are specifically for defensive cybersecurity, so even they can’t and aren’t profiting from this issue right now, so it’s not just hype.
That being said, I’ve always been a believer in having a few days at least of food, water, medical supplies, and power generation. I don’t believe more than that will be necessary because if it is, we’re all screwed and no amount of prepping will ensure safety and over stocking will just make you a target and put a target on your family and property. Just be smart and have the basics you would need for a really bad weather event. You should always have that.
Should have kept critical infrastructure offline then 😁 this is their own doing.
Agreed
If people are using LLMs to find vulnerabilities then why doesn’t cybersecurity do the same. Run patches and updates through simulations until it’s as AI proof as possible. Is there a reason why AI can’t be used for white hatting?
Many are, but it’s not enough. Yes ai is expected to be used to automate white hatting, and already is by the most reasonable and advanced orgs, but greed and stupidity do exist and always will. Many companies fired or minimized security staff because they wanted to minimize overhead or thought ai would make one security staff member able to do the job of five. Many servers and sites just sit there run by private individuals or small companies that don’t even have a cybersecurity team.
A huge issue is ai tools have done a very specific thing that makes it harder to shore up - it used to be tedious and boring to implement hacks once a vulnerability was discovered, so a vulnerability would sit unused for days, weeks, months. Ai now ca do all that tedious, boring work for you, and lowers the bar for who can. That drastically increases the number of attacks and the discovery and dissemination of zero day hacks. Ai won’t be omniscient, so it won’t prevent everything even when it can be always on and just as capable defensively.
Also, it’s a good rule of thumb to expect destructive forces to take less time than constructive ones, depending on the target and the goals. Constructing things properly takes care and planning, but taking a sledgehammer to a system can be pretty swift if you know where to hit
So the root problem goes back to capitalism really. AI is the tool but greed and ignorance are the engine as usual.
That’s how I read it too. All because they hope it pays off for rich people… and maybe some of us poors. But probably not.
Whose AI are you using to secure your systems? If you’re in the UK and your using American AI to harden things, you could be just installing their back doors. Maybe you get the lesser AI and they use the top of the line.
Edit maybe they just quietly interfere with your cloud infra, under a secret presidential order.
I’m not sure what you’re talking about. A white hat would design their own AI for the specific purpose of stress testing a security system.
Not sure what you’re talking about. A white hat doing home hobbyist levels of DIY AI building will get blown out of the water by the corporations and governments sponsoring serious systems.
I don’t understand why you think someone contracted or works for a cybersecurity company would be some hobbyist DIY guy with a computer.
Cause you are talking about some guy, not the collective efforts of companies or governments.
What gave you the impression that I was just talking about some guy
A white hat, singular. Sorry if I misunderstood. In retrospect you could have been implying a white hat org.