Posts by cxiao@infosec.exchange
(DIR) Post #B55fOxlxUaFneBguOm by cxiao@infosec.exchange
0 likes, 0 repeats
wake up babe ANOTHER conservative MP just crossed the floor🚬(it's poiliover)https://www.cbc.ca/news/politics/conservative-mp-marilyn-gladu-crosses-floor-to-liberals-9.7156167#cdnpoli
(DIR) Post #B57V2mmx2VKFz6rUB6 by cxiao@infosec.exchange
0 likes, 1 repeats
RE: https://infosec.exchange/@mttaggart/116371937587992264I think the way I would put it is:1) The point of the AI project is ideological; the goal is to reshape industries such that we are dependent on AI companies' products, and to destroy free and open knowledge such that we are dependent on these products for thought and reasoning. We see an injection of AI into cybersecurity, while simultaneously drawing money and resources away from (boring) efforts that would actually broadly improve cybersecurity.¹ We see an injection of AI into knowledge acquisition, while simultaneously polluting the landscape of the internet as a useful source of knowledge. Both are in service of the same ideological project, and working towards the same goal.2) The touted usefulness of AI for programming and cybersecurity is directly funding the project to expand it everywhere else, where it is causing massive harms to civil society, individuals' mental health, and the information landscape. You or your company paying for these products is keeping investment money flowing and extending the runway, for AI companies to reach that point of "indispensability". There is no divorcing your cool shiny toy from the creation of AI deepfakes that destroy democracy, or the AI psychosis that destroys lives. This is because the AI companies are pursuing an ideological project that ultimately has nothing to do with improving people's work or their lives; the leaders of these companies have loudly and publicly said that very clearly. You are laundering the reputation of these companies and keeping them alive, when the only moral option is to destroy them.I've said this elsewhere, but: Maybe you, who are reading this, is offended by this framing, because you use and enjoy the AI tools. But it's also likely that you, and many other technologists, take moral abdication almost as a point of pride, where the only thing that matters is "capability". In that case, I don't understand the defensive response. Why are you uncomfortable being described as the thing you're bragging to be?#fuckAI ¹ The stark contrast: The breathless and brainless promotional posts about Glasswing came into my feed at the same time as the posts about the final gutting of CISA. https://www.securityweek.com/white-house-seeks-to-slash-cisa-funding-by-707-million/RT: https://infosec.exchange/users/mttaggart/statuses/116371937587992264
(DIR) Post #B57V2nG1IQZtRGShUG by cxiao@infosec.exchange
0 likes, 0 repeats
More details on the cuts at CISA, from @ericjgeller.com.The budget also proposes a 75% cut to the CyberSentry program, which manages intrusion-detection sensors on the networks of participating critical infrastructure organizations, and a 55% cut to the Cyber Analytic and Data System, which integrates cyber threat data from across the agency. (CISA said technology improvements would allow for less spending on CyberSentry, which it called “a key capability” for its mission.)Under the spending cuts outlined in the budget, CISA would also retreat from its mission to provide cybersecurity solutions to the rest of the government. The document proposes scaling back CISA’s support to the Justice Department’s Security Operations Center as a Service offering, ending CISA’s support for a General Services Administration program that evaluates cybersecurity vendors’ products and ending the development of a Critical Infrastructure Shared Services program.https://www.cybersecuritydive.com/news/cisa-trump-budget-fy2027-details/816855/
(DIR) Post #B5cfzdvaeHvD1zMdNI by cxiao@infosec.exchange
0 likes, 1 repeats
RE: https://mastodon.social/@caseynewton/116456942253634796Opponents of AI are often depicted as naive and ignorant. We are depicted as having our heads buried in the sand, unwilling to accept the great capabilities of AI, or as insecure and afraid of AI's capabilities.I would like to flip this narrative around: I think pro-AI technologists who only look at AI's "capabilities" are the naive ones.This is because the AI industry and the people funding, producing, and pushing AI tools are not at all working on the level of capability - they are working on the level of AI as ideology. They are interested in AI as a tool to devalue labour, suppress wages, justify layoffs, and foster dependency on centralized tools controlled by a few companies. Technologists who only focus on "this code can be written good by this tool" are not even playing on the right level. Programmers talking about "wow! look at the code it can generate!" feel to me at this point like the 2-dimensional inhabitants of Flatland.Perhaps this sounds conspiracy-minded to you, but the way in which AI is practically being deployed across industries is very stark evidence of this. The quoted employee monitoring at Meta, to gather data for using AI to devalue the work of white-collar workers, is just one example. AI mandates, token usage dashboards, performance reviews based on AI adoption, AI code acceptance metrics, and even the time and energy spent on building AI tools rather than things that would actually improve product quality - these are all in service of the same ideology.The AI industry, and those who push AI tools are fundamentally uninterested in making your work better or leaving you in control of your work. They are telling you this directly through both words and actions. I think ignoring that is a stunning level of naïvete.#noAIRT: https://mastodon.social/users/caseynewton/statuses/116456942253634796
(DIR) Post #B5nHqPy8uwmuyHBZ0y by cxiao@infosec.exchange
0 likes, 0 repeats
RE: https://infosec.exchange/@jvoisin/116488420408417722For @ifin folks, I started a discussion about this on the Discourse here: https://discourse.ifin.network/t/carrot-disclosure-forgejo/My personal thought is that I appreciate, as a defender, knowing this information about a project having a systematic lack of security.RT: https://infosec.exchange/users/jvoisin/statuses/116488420408417722
(DIR) Post #B6A9rPk0v5XzYYcSCu by cxiao@infosec.exchange
0 likes, 0 repeats
@Jonimus thank you jonimus!! what a beautiful guy. nary a peahen in sight though 😆
(DIR) Post #B6GCnKPAHdcIeuN0Rk by cxiao@infosec.exchange
0 likes, 0 repeats
@benjancewicz nice