Comment Re:Or build better sites (Score 1) 71
The difference between this and a foreign adversary hacking is this is publicly discounted. Time to build better technology stacks to combat this issue. We already reached a threshold we canâ(TM)t back down from. At the very least aid in the securing of said stacks to harden the tech.
AND. And build better sites. That's my opinion.
The pathways for these intrusions are going to be found and exploited. It'll be by greedy blackhats, nation-state blackhats, and maladjusted domestic blackhats but it's going to happen.
The key difference is that domestic actors - be they individuals or companies - can and should be prosecuted. It doesn't matter if it's a script kiddie using non-AI tools or some frontier model-training corporate entity... accessing computer systems you don't have the rights to is illegal.
As for the "safety" of these tools, it seems to me that they're being developed with a default-allow-plus-blacklist model of permission instead of default-deny-plus-whitelist model. Someone will find ways to "trick" them into working around blacklists of behavior and access. They should be scoped the opposite way so the only behaviors and targets they can use is limited. I totally get it that reduces their utility dramatically but... tough.