• 0 Posts
  • 10 Comments
Joined 2 years ago
cake
Cake day: July 3rd, 2024

help-circle



  • homework was a chain around our necks with unspeakable consequences had it remained incomplete

    I had the opposite experience. I worked hard to always finish my homework, but many of my classmates completely blew off both homework and classwork and still “passed”. I knew kids who had all F’s but would get their grades suddenly changed at the last minute to a C- because if the school failed too many kids they would lose federal funding.

    Felt like the value of my high school diploma plummeted considerably when I realized just how many of my graduating class were completely checked out for the entire curriculum. I dunno how different it is now; I graduated nearly two decades ago.


  • Gimp is really just a rare/archaic ableist slur anyway - like to refer to someone with a limp or otherwise a leg/lack of a leg that impedes their gait. I’ve never heard it used in my life.

    I’ve only heard it used that way once in my life. When I was in high school (about 20 years ago), I hurt my leg while playing basketball and was on crutches for a few weeks. This one kid in one of my classes constantly referred to me as “gimp” throughout my recovery.



  • Perhaps I misunderstood the author’s intent. Though even if their position is that the red team and blue team will be on a more even playing field when both have access to AI tools, I’m not sure I can agree with that assessment. The asymmetrical nature of offense and defense isn’t fundamentally changed by the advent of AI tools. While the current slate of AI tools may be uniquely more useful for finding and patching bugs, I can’t imagine a future in which AI tools aren’t also being tailored for exploiting and penetrating. The red team isn’t just going to sit around and not adapt the available toolset to favor their use cases as well.

    Much like the arms race between anti-virus development and virus development, there will be defensive AI development and offensive AI development. Similar to what we’ve already seen with the arms race between LLMs and software that can detect if something was written by an LLM.


  • This fluff piece has quite the pie-in-the-sky attitude toward the blue-teaming applications of AI.

    Some commentators predict that future AI models will unearth entirely new forms of vulnerabilities that defy our current comprehension, but we don’t think so.

    How reassuring.

    The defects are finite, and we are entering a world where we can finally find them all.

    Could’ve said the same thing when enterprise anti-malware came onto the scene decades ago, but the reality was it was just another vector for the arms race between the red team and the blue team. The author seems to put a lot of stock in the whole “the blue team has access to these AI tools that the red team doesn’t currently have access to” argument, which kinda ignores the fact that that reality is simply not going to last.

    I could be wrong, but any article suggesting “zero-days are numbered” doesn’t pass the smell test.


  • This, and standardizing what “this Thursday” and “next Thursday” mean. These terms have become functionally useless (to me) because of how they’re used differently by different people. Whenever someone uses these terms to try to intimate a particular date to me, I just ask for the exact calendar date rather than the day of the week to avoid ambiguity.


  • People always say this on stories about “obvious” findings, but it’s important to have verifiable studies to cite in arguments for policy, law, etc. It’s kinda sad that it’s needed, but formal investigations are a big step up from just saying, “I’m pretty sure this technology is bullshit.”

    I don’t need a formal study to tell me that drinking 12 cans of soda a day is bad for my health. But a study that’s been replicated by multiple independent groups makes it way easier to argue to a committee.