Forgot your password?
typodupeerror

Comment Re:More from the "never happened" department (Score 1) 38

It does not look like this did anything to "stop nukes". Iran still has the material. Iran can still make nukes with not too much effort. The main reason they stopped is that they do not actually need to have nukes. But after this moronic attacks, they got freshly motivated in that area.

Comment Re:More from the "never happened" department (Score 1) 38

Indeed. While that nicely sums it up, the MAGA idiots are not equipped to understand what is actually going on and how much of an epic fail the whole thing is. The only real thing the US accomplished is kill masses of civilians, many of them children. Such a heroic thing to do.

Comment That sounds like nonsense (Score 1) 38

Somebody is trying to create an appearance of superiority and being in the possession of "magic". Well, the people doing that also try to give the appearance they are competent and making good decisions and know what they are doing, when that clearly is not the case. Just propaganda lies as usual. I am sure the usual morons (predominantly the MAGAs) will eat it up though.

For an instructive exercise, read up on WW2 where such myths were around as well and then compare to the actual reality which has been declassified in the meantime. The first casualty of war is still the truth. There is no magic. Occasionally you just get lucky and then can sell that as an illusion of superiority. And as to the supposed massive superiority of the US in this conflict, if that were true then how did the oh-so-primitive and incapable Iranians manage to shoot down that plane in the first place? Yeah, right.

Comment Re:Great, more marketing myths (Score 1) 39

I would restrict that even further to "LLMs can unreliably find some defective code patterns if they are obvious enough". (Remember, they cannot do deduction, just statistical pattern recognition. Too much noise or too far from the template and they fail.) That is useful, but it is not a game-changer for the defenders. It may be a game-changer for the attackers though, because attackers are golden when they find just one working vulnerability. And attackers can randomize and can limit focus to some small parts of a piece of code, and that does not work on the defender side.

As to "LLMs are gods", I think to many people they appear like they are. If a person has really limited mental abilities to apply their minds to general settings (most people qualify for that, even high-IQ people typically cannot do it) then the illusion of thinking that an LLM provides may look very convincing. But just as a question in an area of expertise you have and then observe how much context, caveats and limitations are missing. LLMs are comically inept at giving a complete answer, quite unlike human experts. Of course, if you are not an expert in an area and you do not have independent thinking and fact-checking skills (which most people are missing) then LLM answers may look really good to you.

Comment Re:Great, more marketing myths (Score 1) 39

It may be fundamentally changing the cybersecurity landscape, but if so, it does not do so in a good way. What is happening is that defenders get some things, not a lot, but attackers get a massive upgrade. In particular, I have research that finds that on the defender side, LLMs do not find even relatively obvious vulnerabilities reliably. Finding some things does not cut it for defenders when the attackers can randomize and have a chance to find other things than the defenders found.

Personally, I think defenders have reached the end of the sustainability of the "test and fix" approach, because searching for vulnerabilities is a massive more powerful tool for attackers due to that randomization possibility that the defenders do not have. After all, an attacker just has to find one vulnerability that works. The defenders have to find and fix all (!) vulnerabilities that AI does now allow the attackers to find for cheap. That is really bad. Even worse is that AI can cheaply write crappy attack code that sometimes work, which is all the attackers need. That is the second barrier that is failing. Up to now writing working attack code was slow and expensive and gave the defenders time when it was not a zero-day.

My take is we will have to massive upgrade software quality and use "secure by construction" for anything that needs to survive being exposed to the Internet in the future. The problem with that is that most current coders cannot do it. Hence we probably will get significant unemployment on one side and far more expensive software creation on the other. Well, looks like we will be making a real step towards professionalization of IT and that is always painful, but in the end it probably will be a good thing when the dust settles.

Comment Re:Great, more marketing myths (Score 1) 39

I am aware of that article. You think "something happened a month ago" makes for a solid result or insight? Good luck with that. All that happened is that the non-reports git culled. That is a good thing, but it does not reduce the other problems. And "force multiplier"? That is wishful thinking. All we are getting is a very limited view on bugs having gotten a lot cheaper. That will make the rest of the field not any less problematic.

Comment Re:Great, more marketing myths (Score 1) 39

Soo, you make a technical issue an emotional argument? Nice! You have obviously done your cognitive surrender a long time ago.

For the record, what counts is what makes software secure, not that you believe the great God of AI should be worshipped. This is obvious to any expert, but you clearly are not one.

Comment Great, more marketing myths (Score 0) 39

Seriously, this constant delivery scam has to stop. And, again, because some some people still do not get what is going on: Finding some vulnerabilities is an attacker skill and of relatively low value for defenders. The only thing that really counts for defenders is which vulnerabilities this thing does not find. Quite non-surprisingly, there is no information on that.

Slashdot Top Deals

"A great many people think they are thinking when they are merely rearranging their prejudices." -- William James

Working...