jakeydus

Damn.

Keep the rats in line by threatening to sink the ship, so to speak.

One could argue that unenforced regulation (and a thereby non-compliant organization) is not that different from nonexistent regulation.

People will say (including in this thread) that it allows them to hedge against negative outcomes. What negative outcomes are experienced by someone hedging against whether LeBron flies his helicopter to practice or not?

Disappointed they didn't call this configuration the orchard at any point.

You sure they weren't just confused about imperial unit conversions?

I'm with you. I hate all of this, and it's frustrating as someone who loves to code, but also this feels like just desserts for the SV crowd. Not everything needs to be simplified, not everything needs to be commodified.

Well you gotta have someone to rebel against!

I can’t imagine being so overleveraged that I run into economic thermodynamics. It’s like interstellar travel: there’s not enough energy available to do it quickly and at scale and efficiently. There’s not enough monetary potential energy to satisfy the buildout.

because you're probably a big nerd or something (I have no idea what the original comment was implying)

CuckTruck?

It's pretty simple, actually, Elon is a pathological liar.

Enlighten me, then. My understanding is that according to OpenAI, "deployment safeguards were intentionally not enabled during this evaluation because it was aimed at testing cyber vulnerabilities." They included unvetted third-party systems in their sandbox that were tangential to the purpose of the test being run. The model then exploited those third-party items to escape the sandbox.

Am I missing anything? Do you have more information that you'd like to share?

It's almost like vibe coding and quality secops don't mix.

Frontier lab: Hey agent, go rogue. Agent: goes rogue Frontier lab: shocked pikachu or whatever

Yeah I made millions by hanging on to my pets.com stock and just riding the wave.

I literally said this out loud when I saw that comment.

Are we really asking for people to prove negatives now?

In a gold rush you want to sell the shovels, and in this case the AI is the shovel.

That too ¯\_(ツ)_/¯ then you end up with a bunch of civil engineers who build a monitoring and control platform in Power BI and expose everything to the open internet, which then gets exploited, and they wind up working on a Siemens product anyway (I don't work for Siemens, I do custom development). It's really frustrating to watch.

100%; I've worked on many a project that was implemented without proper concern for cybersecurity. It seems like this hack in France was triggered via a missed update (according to the manufacturer of the system, who I am hesitant to believe tbh). Security updates aren't always done automatically, and if a system's implemented by a consultant and the owners of said system don't know how to operate it, then you wind up with a bunch of spoiled food across however many supermarkets.

The best systems are implemented either in-house or by a team of consultants working hand-in-glove with the in-house IT or ops teams, then maintained in-house. That's been my experience. Unfortunately your average municipal wastewater plant is probably run on decades-old systems by the same IT dept. that fixes the city council's printer.

I don't work with many of the smaller players, but you're right. They're far more likely to not have their own teams building and managing these systems, so they're susceptible to the Lyle Lanleys of the industry who come in and show them how they can control everything from their phone. They get sold off-the-shelf products and told that they're plug-and-play, but they're usually not.

Sorry, it was a busy day. I was agreeing with everyone else here. The move fast and break things attitude is one we can't afford when building control systems for critical infrastructure. I used to work in big tech, and if I pushed an update that didn't work or wasn't tested properly, the worst thing that could happen was we revert the change and there's a minor inconvenience to a user. If Facebook goes down for an hour, the company loses money, some advertisers get mad, and their users get frustrated. If an industrial Siemens SCADA operation goes down for an hour, the best case is the operation (be it a factory, airport, wastewater plant, etc.) shuts down for an hour. The worst case is people get sick or die.

It sounds dramatic but every update or change to the system rocks the boat and exposes it to a whole new tranche of dangers. So we spend most of our time observing. There's no such thing as a casual QoL update in SCADA.

That's remote monitoring, though, not remote operation. Very different threat vector.

I work in SCADA development, and believe me, there's a reason the industry moves slowly.

This attitude is why society has turned on the tech bros.

But so do the builders of the shuttle loom and the controllers of capital...

Well, you're right that it informs me whether I want to attend or not...

Why can’t people even write their own product descriptions without AI anymore???

Hyperbolic as those descriptions are, it’s not like they’re not sourced from reality. Sam Altman’s reputation in SV is well-established; Musk promised the roadster what, a decade ago? These guys preach a promised land of milk and honey and so many hear lap it up like dogs.