"accidentally"
I feel paranoid enough now to blame ai companies to try to induce panic and proclaim "buy our product to save yourself"
I feel paranoid enough now to blame ai companies to try to induce panic and proclaim "buy our product to save yourself"
it is a solution, even valid and preferable one - but simply stopping the ones doing wrong will be better
Does the security flaw exist or not?
I've always been one for immediate release of any security flaw the second it is found.
"But, people will get hurt or lose money that way"
Correct, they will understand the risk of using computer systems. Because we've hidden all the flaws under a mask of responsible disclosure people really don't understand the dangers we've subjected ourselves to by writing a bunch of bug filled bullshit code and instead we pretend like we have a handle on the situation.
WE DO NOT. If AI has proven anything it's how all of our code is a giant stack of cards waiting till collapse. And it proves humans will never learn, we'll just use the AI to pump out more shitty bug filled code.
It's all fun and games until someone crashes the electrical grid via bugs, or a major incident on the banking system. Human love to write regulations in blood because we're incapable of doing anything correctly before a bunch of people die.
But what I am am complaining about is not *Ai* - I complain about Ai *companies* and their bad faith marketing tactics as of late
It doesn't matter whether security flaw exists or not if you fail at the very basic communication skill of "keep secret stuff you agreed to keep secret, secret"
Embargoes are getting close to useless now. If I hear that X has a security flaw, chances are I can find it before your embargo ends. In fact this has occurred multiple times with the recent PHP flaw. A hint that a flaw existed not only found the exact flaw, it found a few other similar ones using AI.
How things worked in the past is failing. We need new paradigms or the internet is going to look like something off of cyberpunk sci-fi. To dangerous for anyone to get close to.
It probably just happens that the security concerns at ZDI don't match the security concerns at Linux(the vendor).
So, it turns out that this vendor is difficult to work with ....
I mean - heh