LiveOverflow 🔴

How could OpenAI be hacked with a vulnerability that had already been fixed for a year? Follow the dependency chain from Discourse through ImageMagick, libheif, and Debian to see why security fixes can take so long to reach the applications. https://t.co/YJkUcCbWRL #OpenAI #CyberSecurity #Vulnerability #Thetweetdoesnotspecificallymentionanycountries.Therefore #therearenocountrycodestoreturn.

This is unpopular but correct. AI labs have gotten spoiled by super chill responses to CFAA violations and the whole edifice is a house of cards. Wanna know why Hugging Face didn't sue OpenAI? Google “new DOJ policy CFAA” and thank the hacker community fighting for this. #CFAA #AIlaws #HackerCommunity #Nospecificcountrycodesarementionedinthetweet.

@gergely_kalman We disagree here. I think this hack was important for public to know about. These companies are building one of the most powerful technologies. They themselves admit to it. We as researchers can only offer the facts, journalists decided if this is an important story to tell. If #CyberSecurity #TechEthics #Journalism #Thetweetdoesnotmentionanyspecificcountries.Therefore #therearenocountrycodestoreturn.

Actually serious question. Are we in a cyber cold war? It feels like an arms race... USA wont stop escalating, because they think China will, and vice versa. Any calls for slowing down will not work. Cold war only stopped because one of the involved nation collapsed. #CyberColdWar #ArmsRace #USChinaRelations #USA #CHN

We stopped making fun of devs writing bugs, because we understood that it’s very very hard to avoid bugs, even if you try hard. So how come we make fun of a bad sandbox design or system architecture? Isn’t it also just a “preventable oversight” like a software bug? 🙃 #SoftwareDevelopment #Architecture #Debugging #Therearenospecificcountrycodesmentionedinthetweet.

There is a HUGE difference between knowing when it actually becomes a risk vs. believing it will become a risk at some point. I can pick a random sci-fi story with an evil AI and predict "something like that might happen at some point". And when it happens I can boast I #AIDangers #SciFiRealism #RiskAssessment #Nocountrycodesfound.

🤔 Attackers always choose the path of least resistance. And most breaches happen due to phishing or credential re-use, and not vulnerabilities. So if vulnerability research is less important and we shift even more resources away from it, will easy vulns come back and lead to #CyberSecurity #Phishing #DataBreach #Nospecificcountrycodesarementionedinthetweet.

This is an interesting perspective for me. Because my cybersecurity world was "just bugs" long before AI. I think we can trace cyber incidents to one of two root causes: 1. exploited vulnerability (bugs) 2. human error (malware, phishing, ...) In the video, the wider security #Cybersecurity #Vulnerabilities #HumanError #Nospecificcountrycodesarementionedinthetweet.

After seeing OpenAI's talk at Black Hat, I couldn't believe it... Am I the only one who thinks this is f'n scary? https://t.co/kAWRP2YLB2 https://t.co/nMP1RJ3swh #OpenAI #BlackHat #AIConcerns #Therearenospecificcountriesmentionedinthetweet.Therefore #theresponseis:

We could theoretically automate entire factories with robots. But it doesn’t always make sense economically, so we don’t do it. The future of AI will look similar. And there will be a point where you cannot justify 10x cost for agent when cheaper harness exists. #AI #Automation #FutureTech #Nospecificcountrycodesarementionedinthetweet.