• 0 Posts
  • 142 Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle










  • Except it wasn’t just “throwing everything and the kitchen sink at a server”. Modern LLMs have been trained well enough to not just create a list of potential attacks and execute them, but to:

    • create their own personality prompts aimed at pentesting and attack vector analysis
    • actually analyse the target before executing any of the attacks, optimising that flow (which is pretty much what a security expert would do)
    • scour the internet for recent references of the target and related keywords to see if their services have been exploited recently
    • using the target analysis of step 2 to create a list of known third party elements (ranging from the HTTP server being used, the proxies and detected security measures, geographical distribution and HA, all the way to JS libraries used to run the website/admin interface)
    • execute the attacks AND continuously tailor the solution based on the results

    of course this can be used for good too. I did this to pentest my own homelab stack. I used the very same flow to hack into a pair of smart glasses I own (not the creep glasses, mind you, but the “wearable monitor” kind of AR glasses - turns out the pair I own runs on a pretty decent base, a somewhat recent Linux kernel and minimal userspace, with some exploitable interfaces) within about a day.

    What’s truly dangerous is that these tools have the ability to turn a relatively simple “hack into the NASA servers” instruction into a detailed, executable plan of actually breaching the servers in question. That a person with more than one and less than three brain cells to rub together - someone who’d think this scene is super cool and completely legit looking - can, with minimal guardrails-bypassing, increase their own chance of hacking into ANY server, from less than 0.000000000000000001% to 20-30%. Now that’s scary.


  • Honestly, this could be a great equaliser.

    Home grown AI models have been shown to be extremely good at market analysis and predictions, some managing quite nice gains by daytrading small amounts and micro transactions - gains that previously were reserved to the coke-moustached shark investors and savvy finance geeks.

    If hosted models can bring results even just half as good as those, to the average people, that will be a make and break point for the finance fuckers. Because why would you go to an investment firm who offers maybe 40-50% gains YoY while taking 15-20% of the profits, when you can pay £20 for Claude or ChatGPT and have 300-500% returns on your base investment every month?





  • Re: ostracisation

    That very same behavioural pattern actually kept the stupid at bay - up until the internet happened.

    The internet, for all its positive effects, also gave the stupid they would’ve previously lacked if they allowed their stupid to show too much: community. It allowed even the most fringe idiots like conspiracy theory believers, to openly be dumb again - because there’s no longer a risk of being alone. They found “their people”, so to speak. And even if everyone else locally thinks they’re a moron… why does that matter when online there’s thousands who egg each other on and provide that much needed social connection?





  • Yes, yes we do.

    I’m about as left as it comes without being a tankie, but I do think people need to deal with insults better.

    I’m not talking about constant bullying or harassment - that has no place in society.

    But calling out absolutely idiotic behaviour, with a clever quip, is something people need to learn to accept. It’s not something you should get angry and defensive about, but rather take a moment to do some introspection - maybe I am being a dumbass. Maybe I should rethink what I just said/did.

    With that said, clever insults work only when used sparingly, and to deliver impact. Constant insults are bullying. A well placed “you absolute doughnut” can do its job. Constantly being told you’re shit can’t. Use them sparingly, use them well. And don’t forget positive reinforcement. If someone does a good job, tell them. Celebrate small successes. Learn from fuckups. Criticise constructively. And listen to constructive criticism.