I wrote yesterday about red-team cybersecurity and how the attack testing teams don’t see a lot of use for AI in their jobs. But maybe the security guys should be getting into AI. Because all these agents are a hilariously vulnerable attack surface that will reap rich rewards for a long while to come.
Hey, look on the bright side, David - the user is no longer the weakest part of a cybersecurity system, so they won’t face as many social engineering attempts on them.
Seriously, though, I fully expect someone’s gonna pull off a major breach through a chatbot sooner or later. We’re probably overdue for an ILOVEYOU-level disaster.
But maybe the security guys should be getting into AI.
Sadly in my exp the security people are getting more and more into using LLMs for various stuff. Could also just be because that is where all the money is now.
Some days it feels like developers are headed for a Morlock/Eloi split, except the Eloi are sickly and unappetizing due to a steady diet of glue pizza and mushroom surprise
Yeah, I was very disappointed in the risky business guys who while initially skeptic at LLMs and very mad that after the christchurch neo-nazi shooting cloudflare protected them. Went to “well Trump’16 wasn’t that bad on cybersecurity, and project 2025 is also pretty good, even if a bit odd in tone, we will have to stay positive and wait and see Haha!” and being a bit more into AI hype. (the latter pays a lot of their bills of course).
And look at this AI critic/sysadmin who also is for sale (yes, this bit is joking from my end).
aw man I’m glad you brought that up. I generally like their show, but gestures broadly at all of that. I also wonder how much of it is money-driven.
iirc it was in one of the episodes just after Trump had won and I was just listening and going ‘euh, think yall are a bit too joking about this’.
Removed by mod
Try this, it should help turn the headlines somewhat comprehensible.
Didnt get here in time to see the original comment, thought your link was gonna go here.
Removed by mod
- Prompt-inject: to input a malicious prompt to an LLM bot to make it act in ways not intended by the bot’s operator
- Copilot Studio AI: an LLM product by Microsoft
- via: preposition for “by way of, through, by means of”
- email: a popular online messaging system
- grab: to take hold of something
- a company: a type of business organization
- whole: all of a thing, not merely a part of it
- Salesforce: a suite of customer relations management software sold by a company of the same name
Yes, I think “Prompt-inject Copilot Studio AI via email, grab a company’s whole Salesforce” is a perfectly cromulent English title for a post about supplying, via email, malicious input to a company’s Copilot Studio AI LLM bot which then allowed the people sending that email to take control of that company’s Salesforce CRM software.
Maybe that’s a little advanced for A1 level English. Maybe try moving on to A2 or even B1.
Removed by mod
Ah, sorry. The article is right under the title if you click on the link near the top of this page. The site also has more of them if you need. As for pronouns, you can call me by he/him. Thanks for asking.
you seem like the kind of dork whose brain literally explodes when you read this sentence
Removed by mod
the fuck is wrong with you
If I had a nickel for every time someone went on tirade subthread about David’s use of newspaper headline syntax…
This time it’s really weird because there’s hardly even anything nonstandard here. It’s the same structure as in sentences like “Take Toyota Prius for a test drive, win free movie tickets”; “Buy a six pack of Sandels beer, get a free beer mug” or “Fuck bitches, get money”.
literally unreadable
image description
the most ordinary newspaper headline I could find: the San Francisco Chronicle’s front page where the title is “INVASION!” in the biggest font they could justify (pun intended) and the subtitle is “Allies pouring into Northern France!” because it’s a headline about the Nazi killing parts of world war 2 I like and recommend
hackneyed; stale
