I’ve had a couple of friends ask me if I’m prepping.

Prepping for what?

I see the UK is doing a Be Prepared campaign and Fucking Dan Bongino said something on a podcast. What’s that about?

  • TheReanuKeeves@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    2 days ago

    If people are using LLMs to find vulnerabilities then why doesn’t cybersecurity do the same. Run patches and updates through simulations until it’s as AI proof as possible. Is there a reason why AI can’t be used for white hatting?

    • BooBees@fedinsfw.app
      link
      fedilink
      English
      arrow-up
      10
      ·
      edit-2
      2 days ago

      Many are, but it’s not enough. Yes ai is expected to be used to automate white hatting, and already is by the most reasonable and advanced orgs, but greed and stupidity do exist and always will. Many companies fired or minimized security staff because they wanted to minimize overhead or thought ai would make one security staff member able to do the job of five. Many servers and sites just sit there run by private individuals or small companies that don’t even have a cybersecurity team.

      A huge issue is ai tools have done a very specific thing that makes it harder to shore up - it used to be tedious and boring to implement hacks once a vulnerability was discovered, so a vulnerability would sit unused for days, weeks, months. Ai now ca do all that tedious, boring work for you, and lowers the bar for who can. That drastically increases the number of attacks and the discovery and dissemination of zero day hacks. Ai won’t be omniscient, so it won’t prevent everything even when it can be always on and just as capable defensively.

      • Tyrq@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        6
        ·
        1 day ago

        Also, it’s a good rule of thumb to expect destructive forces to take less time than constructive ones, depending on the target and the goals. Constructing things properly takes care and planning, but taking a sledgehammer to a system can be pretty swift if you know where to hit

        • BooBees@fedinsfw.app
          link
          fedilink
          English
          arrow-up
          2
          ·
          1 day ago

          That’s how I read it too. All because they hope it pays off for rich people… and maybe some of us poors. But probably not.

    • CapuccinoCoretto@lemmy.world
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      edit-2
      1 day ago

      Whose AI are you using to secure your systems? If you’re in the UK and your using American AI to harden things, you could be just installing their back doors. Maybe you get the lesser AI and they use the top of the line.

      Edit maybe they just quietly interfere with your cloud infra, under a secret presidential order.

      • TheReanuKeeves@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        1 day ago

        I’m not sure what you’re talking about. A white hat would design their own AI for the specific purpose of stress testing a security system.

        • CapuccinoCoretto@lemmy.world
          link
          fedilink
          arrow-up
          1
          arrow-down
          1
          ·
          1 day ago

          Not sure what you’re talking about. A white hat doing home hobbyist levels of DIY AI building will get blown out of the water by the corporations and governments sponsoring serious systems.

          • TheReanuKeeves@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            1 day ago

            I don’t understand why you think someone contracted or works for a cybersecurity company would be some hobbyist DIY guy with a computer.

                • CapuccinoCoretto@lemmy.world
                  link
                  fedilink
                  arrow-up
                  1
                  arrow-down
                  1
                  ·
                  19 hours ago

                  A white hat would design their own AI for the specific purpose of stress testing a security system.

                  A white hat, singular. Sorry if I misunderstood. In retrospect you could have been implying a white hat org.