• toast@retrolemmy.com
    link
    fedilink
    English
    arrow-up
    15
    ·
    13 hours ago

    Foothills…epidemic…cyber frontline

    Must be serious – you don’t mix this many metaphors under normal circumstances.

  • ZoteTheMighty@lemmy.zip
    link
    fedilink
    English
    arrow-up
    14
    ·
    edit-2
    1 hour ago

    People seem to be able to reverse engineer almost anything with AI now, so the notion that “proprietary code is secure code” is becoming obsolete. Major hacks like this are going to be more common with anything on a network.

    • P03 Locke@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      1
      ·
      9 hours ago

      You act like this is a new problem with technology. It’s not.

      When one country figures out how to make guns, the other country doesn’t just say “You know what… I’m going to stick with the same sword and shield warfare.” No, they figure out how to make guns of their own, and figure out defenses that are appropriate to gun warfare. It is the new norm, and everybody else must account for it.

      When the Internet popped into the public zeitgeist, some companies were slow to adopt but pretty soon, everybody had a website. Those that didn’t adapt to this new technology failed as a business and died.

      This is an adaptation problem, and unless people take it seriously, there will be one side that uses LLMs to their advantage and one side that doesn’t.

    • ɔiƚoxɘup@infosec.pub
      link
      fedilink
      English
      arrow-up
      1
      ·
      11 hours ago

      The funniest thing about this is that there’s no way a human can keep up with this increase in cybersecurity flaws and vulnerabilities that are being discovered, but at the same time, there is no parity between cybersecurity defense and attack.

      Regardless of efforts, we’re still going to be in a losing battle for quite a while.

  • dan1101@lemmy.world
    link
    fedilink
    English
    arrow-up
    10
    ·
    14 hours ago

    This was inevitable with people connecting things to the internet for convenience instead of security.

    • shalafi@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      arrow-down
      1
      ·
      7 hours ago

      I only buy appliances off FB Marketplace and I’m dreading a potential future where everything on the used market is smart and requires a connection.

    • frongt@lemmy.zip
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      11 hours ago

      They already do. The cheap devices are cheap because their manufacturing cost is subsidized by the ads they show and the data they collect.

  • Drag00n@lemmy.zip
    link
    fedilink
    English
    arrow-up
    1
    arrow-down
    2
    ·
    6 hours ago

    Genuinely serves everyone who bought a fridge with a screen right lmfao

  • marxismtomorrow@lemmy.today
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    2
    ·
    13 hours ago

    I mean, it’s kinda obvious. But it’s also not a bad thing. No secure system will be affected, because secure systems are designed to be impossible to fail.

    Lots of “secure” systems designed by hacks that took money selling half-cocked nonsense to dumb people will fail, and it’ll probably be revealed there’s trillions of dollars of investment by these dumb people into insecure systems that should outrage everyone.

    • ɔiƚoxɘup@infosec.pub
      link
      fedilink
      English
      arrow-up
      4
      ·
      11 hours ago

      There are literally thousands of water infrastructure facilities that are on Shodan now. I take your meaning, but it’s a very bad thing.

      • marxismtomorrow@lemmy.today
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        3
        ·
        11 hours ago

        Exactly my point. Corruption, stupidity, and complacency allowed that to happen despite experts warning for years it was a terrible idea. This isn’t some new threat, the only ‘new’ part of it is democratization of otherwise arcane knowledge. This is like getting mad that a thermite recipe is being passed around. Yeah, some people will do bad things with it, but generally anything that needs to be secure should be built to be secure against it.

        • ɔiƚoxɘup@infosec.pub
          link
          fedilink
          English
          arrow-up
          2
          ·
          10 hours ago

          That’s not exactly accurate. The problem is that everything in infrastructure was working just fine, and so they figured they could make it more efficient by reducing the staff. And to do that, they put everything online, so it was controllable by fewer people. And they kept doing that year after year. The funding went down and down and down, and there are literal, uh, literal policies that keep them from switching to better stuff. So it’s much more complex than the way you draw it.

          For example, US water infrastructure would need $2.1 trillion or something around that amount to actually become current and fully repaired.

          Where exactly would that come from? It’s not an easy answer. It’s a much more complex problem. That’s all I’m saying.

          • P03 Locke@lemmy.dbzer0.com
            link
            fedilink
            English
            arrow-up
            2
            ·
            9 hours ago

            For example, US water infrastructure would need $2.1 trillion or something around that amount to actually become current and fully repaired.

            Source?

          • marxismtomorrow@lemmy.today
            link
            fedilink
            English
            arrow-up
            1
            arrow-down
            2
            ·
            10 hours ago

            Where exactly would that come from?

            Well we could start by nationalizing water services so the inefficiencies that are inherent to monopolistic capitalist entities could be eliminated, drastically reducing costs. And we could pay for it over time with some sort of fee… one that might target those that have hoarded over 98% of all wealth produced over the last 50 years which should have gone into infrastructure maintenance and upgrades. We might even, if we’re really clever, directly seize the wealth of the companies that sold these solutions to these water companies given they’ve compromised national security and public health.

            That all would drastically reduce the inflated $2.1 Trillion number which isn’t the actual cost, it is the price for private contractors to do it for the government, to something you could reasonably pay for with the wealth already accumulated or that could be accumulated by actually fairly taxing those that have actively harmed society.

      • marxismtomorrow@lemmy.today
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        11 hours ago

        Implanted medical devices require pretty much skin to skin contact to adjust, the few that do use bluetooth to adjust settings. But yes, it is terrible that we use wireless technology in medical implants. We should, you know, sue the companies that made them knowing they were using naturally vulnerable technology to make them.

        • T. Hex@lemmy.dbzer0.com
          link
          fedilink
          English
          arrow-up
          2
          ·
          11 hours ago

          the few that do use bluetooth to adjust settings.

          That may be the intended use, but it does not imply the system is secure.

          Here’s an example of an insulin pump vulnerability from a few years ago that enabled attacks from up to six meters away. Think about how many potentially-compromised devices you’re ever within six meters of. The vulnerability enabled remote control over the insulin pump, which IIUC can be deadly.

          https://www.aha.org/h-isac-reports/2021-11-29-h-isac-tlp-white-vulnerability-report-researchers-identify-high-severity

          My point being — it’s not a good thing to be in the midst of a hacking epidemic! Real people will be harmed as a result of increased hacking.