Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Post-Mythos Cybersecurity: Keep calm and carry on

cephalosec.com

Post reply on HN
Print view View original

31–40 of 83 posts

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#31

Post by zer00eyz »

datakan wrote: post #7

The fear porn around this all has been horrible. I work in Cybersecurity and Mythos is all the vendors will talk about because they want to sell something. It started the day of the announcement which is what told me it was all BS. They had no information about it yet would happily tell me about all their solutions for it. Anyone in my profession worth a damn will tell you the vast majority of security issues are rel…

All of this, but you forgot that ai opens up new vectors.

AI itself is a security risk: https://www.404media.co/hackers-simply-asked-meta-ai-to-give...

I keep seeing screen shots of random AI chat bots who have been prompt injected to write code. That car dealership is now paying for the tokens for some script kiddie to pump out python.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#32

Post by [deleted] »

Henchman21 wrote: post #28
signatoremo wrote: post #26

Earlier quoted context omitted.

Democracy cannot be taken for granted. There are always tendencies to drift toward authoritarian. China is authoritarian, full stop. They are capitalism, not communism, but authoritarian. Keep that in mind when discussing what come out of China.

We actively take it for granted in the US AND we’re actively watching it slip away. No one seems to give a shit.

[deleted]

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#34

Post by nozzlegear »

Henchman21 wrote: post #28
signatoremo wrote: post #26

Earlier quoted context omitted.

Democracy cannot be taken for granted. There are always tendencies to drift toward authoritarian. China is authoritarian, full stop. They are capitalism, not communism, but authoritarian. Keep that in mind when discussing what come out of China.

We actively take it for granted in the US AND we’re actively watching it slip away. No one seems to give a shit.

A populist wave electing a shitbird in response to a global economic downturn does not mean democracy is being taken for granted or that no one gives a shit. It's only been a year and a half, we haven't even had the chance to rebuke him in the midterms yet.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#35

Post by SubiculumCode »

datakan wrote: post #7

The fear porn around this all has been horrible. I work in Cybersecurity and Mythos is all the vendors will talk about because they want to sell something. It started the day of the announcement which is what told me it was all BS. They had no information about it yet would happily tell me about all their solutions for it. Anyone in my profession worth a damn will tell you the vast majority of security issues are rel…

Does depth matter when you can automate attacks with intelligent agents?

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#36

Post by cyberax »

Henchman21 wrote: post #28
signatoremo wrote: post #26

Earlier quoted context omitted.

Democracy cannot be taken for granted. There are always tendencies to drift toward authoritarian. China is authoritarian, full stop. They are capitalism, not communism, but authoritarian. Keep that in mind when discussing what come out of China.

We actively take it for granted in the US AND we’re actively watching it slip away. No one seems to give a shit.

There's an alternative viewpoint: democracy is experiencing a revival.

The old "cathedral-style" democracy is dying. People are seeing that the "regular" politicians are just ineffective and kinda boring. The old party-based structures are stifling and prevent changes. People want more direct participation in the governance.

So people are voting for a "new wave" of candidates that promise to work around the old institutions. Right-wingers were the first to harness this, initially with the Tea Party takeover and then Trump came in and crushed the entire Republican Party into his personal fiefdom.

Mamdani is doing the same with the Democratic Party now. After the recent primary victories, he's well-poised to become the left-wing Trump.

If you want historical analogies, the situation is similar to the start of the 20-th century when the wide masses first became politically active. Literacy spread, then radio broadcasts and daily nation-wide newspapers gave people the impression that they're a part of the same entity.

It ended well, with democracy winning over authoritarianism. But the middle part contained a couple of world wars and mass genocides.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#37

Post by oivey »

SubiculumCode wrote: post #35
datakan wrote: post #7

The fear porn around this all has been horrible. I work in Cybersecurity and Mythos is all the vendors will talk about because they want to sell something. It started the day of the announcement which is what told me it was all BS. They had no information about it yet would happily tell me about all their solutions for it. Anyone in my profession worth a damn will tell you the vast majority of security issues are rel…

Does depth matter when you can automate attacks with intelligent agents?

Will the intelligent agents be plugging the infected USB sticks in?

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#38

Post by spacington »

The CCC talk in December showed me how good llms are at ctf.

Ctf fundamentaly have to change.

It also showed how critical it is to use llms now.

A lot has changed in just 12 month tbh.

If you still don't invest time and money into adding llms to your security you didn't hear the bang.

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#39

Post by Versipelle »

spacington wrote: post #38

The CCC talk in December showed me how good llms are at ctf. Ctf fundamentaly have to change. It also showed how critical it is to use llms now. A lot has changed in just 12 month tbh. If you still don't invest time and money into adding llms to your security you didn't hear the bang.

Ha yeah I totally agree, that's actually one of the future posts I have in draft : the other downfall of GenAI in cyber. You can't outsource learning, and a lot of learning opportunities in the Cybersecurity industry are getting totally ruined by llms (ctf, low hanging fruit bug bounties, foss software getting burnout by AI slop and closing the gate to potential newbie willing to get involved, etc.)

Re: Post-Mythos Cybersecurity: Keep calm and carry on

#40

Post by petcat »

throawayonthe wrote: post #21
petcat wrote: post #5

Earlier quoted context omitted.

> outrage in the news if the Chinese government had been the first to pull this kind of stunt. I suspect that the Chinese government "pulls this kind of stunt" often but just nobody ever hears about it because their society is not free to complain about such a thing publicly.

> their society is not free to complain about such a thing publicly wuh?

wuh? what? The Chinese government tightly controls every aspect of their technology industry and all public discourse around it.
Post reply on HN