Why AI Security Deserves More Attention

I don't build anything that's supposed to be secure with GenAI and I find the proposition of spending additional effort on a self inflicted problem to be counterproductive.

The only way to build a secure system is through careful design, coding, and extensive testing (manual and automated), ideally using tooling and techniques which limit the possibility of failure. Not by introducing tools and techniques that ignore codebase convention, duplicate code, and generally broaden an attack surface.

I've not talked to one security expert in my circles where this hasn't caused problems, both on the production side and on the identification side. The identification side has some upside, but it still requires serious human thought and intervention. Without it you get scenarios like burning out the curl maintainers and causing sociological issues.

Security requires accountability and human creativity at all facets. It cannot be substituted.