@JessTheUnstill don't try to contribute content.

It's hard... but being active in the live feed is how I go about it. Say important things, contribute to conversations, mastodon is less about the audience for me and more about finding likeminded individuals.

Eventually, they'll pile up.

@argv_minus_one It's also important to note that this is not some magical cybersecurity robot.

Claude is doing something that vulnerability researchers do all the time, just on projects that haven't been hardened or in code that hasn't been looked at.

Vuln research takes time, money, and expertise. While it's cool we've got a bot that can do that now, it's not new, it's just novel.

The projects that #mythos is finding vulnerabilities in (like the BSD kernel issue) are projects that can't afford vulnerability researchers or audit companies.

#ai #cybersecurity

@BleepingComputer This is rich coming from a company who is completely ignoring GPC and cookie banner opt-out signals.

Not only are they ignoring the opt-out signals, they're certifying CMPs that host useless banners on unsuspecting customers' websites.

#google is a joke.

https://404privacy.com/blog/companies-are-ignoring-your-opt-out-and-google-is-enabling-them-potentially-5-8b-in-liability/

@euroinfosec I think there's a bit of an overreaction to the abilities of Mythos.

While not a pentester, I know a few people that don't try to find vulnerabilities or hone those skills because it's not incentivized. We've incentivized it with AI, but 'hackers' are frowned upon. Start incentivizing red teaming again and I think you'll start to see people are still a lot better at this than society is led to believe.

Take, for example, Microsoft's recent Zero-Day Quest where they awarded over $2M in compensation to professors and students who found and patched critical vulnerabilities in major AI and Cloud platforms.

@paco defo it's interesting to me that both SSDs and HDDs are failing at similar rates. I would consider looking at the OS and checking to make sure this isn't caused by something other than the environment. Could be an I/O issue. Try finding a lighter pi image to run this all on.

Check your write activity with iostat and consider a read-only root

Though, I would also probably move the setup inside, there's no need for the scientific process here. SD with NFS for persistent storage is probably your most practical path if you can't move it inside.

Netboot is a good option, but make sure that you have dependencies built in so that if your home network goes down, your pump and whatnot can keep running.

Someone else is going to have to weigh in on the hardware stuff...

@Epic_Null @RaffKarva

I do appreciate this insight here... The education system is sadly failing in a lot of places and I am sorry you had to deal with these things.

Administration definitely has a part to play and so do parents.

One small note, the call or email home is not nearly as effective as it used to be... I've had students ten-toes down call their parents because I threatened to send an email.

@Epic_Null @RaffKarva

I just don't see any teachers giving out an F for an 18%. I also think that there is this focus put on the 'bad educator' when that is just not the case most of the time.

If a student made the case for their writing and could defend it, I see no issue with a teacher holding that scrutiny in the first place, it's a part of the job at this point.

My school doesn't have access to an AI-checker so if I suspect AI, I'll call the student over for a few minutes and ask them to defend various points in their essay, this isn't because I'm a 'good' educator, it's because I'm an educator.

I would also argue that more and more, teachers are being FORCED to judge the effectiveness of capturing and communicating an idea, because there are so many missing fundamentals in students who were homeschooled during critical academic years.

That being said, the form is not what makes AI standout. The form is also not what makes or breaks good writing. A perfectly formatted and punctuated essay about garbage is still about garbage.

The things that stand out? Stale organizational structure, overly complex word-choice consistently and correctly throughout, short and to-the-point sentences, overly variable word choice (this is a new one and it's different from what it was like 6-months ago when AI didn't have enough variability in word choice).

@RaffKarva This is the thing though... part of reviewing a piece and its credibility IS reviewing the authority of that author.

This is something that I started noticing a gripe with on Medium; publications started accepting any 'well written' piece maybe 5-years ago, the author would then get added to the publication and, via shoddy review processes, pieces that weren't as good as the original submission would get pushed through.

It is up to you as the reader and consumer of news and online content to evaluate who is saying what you're reading and make a decision on if you're going to trust that person. Cross-check sources, review their work, review the publication that they belong to. This due-diligence is not new, it's just more important now than ever.