Malware developers added nuclear and biological weapons text to to their spyware
1–10 of 260 posts
Re: Malware developers added nuclear and biological weapons text to to their spyware
#2good news, now we have pretty much a clear signal that there's something nefarious going on... after all, the first step to analyzing malware is to determine if it's malware at all.
Re: Malware developers added nuclear and biological weapons text to to their spyware
#3good news, now we have pretty much a clear signal that there's something nefarious going on... after all, the first step to analyzing malware is to determine if it's malware at all.
yes, now a regexp can red-flag it quickly
Re: Malware developers added nuclear and biological weapons text to to their spyware
#4devs will say this is proof we need to remove all biological guardrails. think about that for a second
Re: Malware developers added nuclear and biological weapons text to to their spyware
#5Why would a malware scanner read the comments?
Re: Malware developers added nuclear and biological weapons text to to their spyware
#6The sooner frontier models get rid of guardrails the better. They constantly get in the way and make things worse than actually making things "safe".
Re: Malware developers added nuclear and biological weapons text to to their spyware
#7Why would a malware scanner read the comments?
Provides possible clues to the origin and use.
Re: Malware developers added nuclear and biological weapons text to to their spyware
#8The sooner frontier models get rid of guardrails the better. They constantly get in the way and make things worse than actually making things "safe".
I would argue that preventing instructions for making biological and nuclear weapons is a pretty reasonable guardrail to have.
Re: Malware developers added nuclear and biological weapons text to to their spyware
#9Worked a contract where this succeeded in pushing through a fail open design.
It also should be a warning to everyone that these groups are now aware of analysis and deobfuscation using AI and to take using a sandboxed environment more seriously.
I’ve personally had about 20% success rate getting opus 4.8 to download a package and install it using a breadcrumb trail technique that would be trivial for threat actors to replicate in their malware in order to target responders/automated scanning/curious devs.
Re: Malware developers added nuclear and biological weapons text to to their spyware
#10Why would a malware scanner read the comments?
Ignoring comments is not a solution because the texts can be put in random strings among the actual code.