Post by @Merovius@chaos.social
Let me be advocata diaboli here:
AI is the democratic equalizer, that lifts the general IT crowd to the level of (malicious) state actors and it doesn’t wait to be invited to the party by anybody.
How wrong is that pov?
@AwetTesfaiesus@mastodon.social
Ich versuche, die Rolle von KI bei #php2shell einzuordnen. Ist es das Fieber oder das Fieberthermometer?
Mir scheint: letzteres.
Liege ich falsch?
@AwetTesfaiesus Given that running it requires compute and compute costs money, I would say pretty wrong.
@Merovius that I don’t understand. Compute and money seems to be exactly what state actors have plenty of
@AwetTesfaiesus Huh? Yes, that is exactly my point. AI is not a "democratic equalizer", because for that, everyone would need to have the same access to it. I could never run, say, a frontier model on all of GitHub. A state actor can. So I'm clearly not lifted to the level of a state actor.
@Merovius but someone ran it and it was brought to the public eye. So what used to be state only privilege is now in the public domain.
@AwetTesfaiesus@mastodon.social @Merovius@chaos.social no, it’s in the domain of the likes of OpenAI, google, anthropic. The public domain can’t afford it. We see a shift from state actors to a very few tech companies.
@docwhozee @Merovius granted. But in this particular instance: the news is packed with it. Everyone updates their servers now. Couldn’t possibly/ be more in the public domain.
Remember: not that long ago, the news used to be the public domain
@AwetTesfaiesus @docwhozee Heartbleed was also in the news. I don't understand the argument. And no, not "everyone updates their servers now". The percentage of actually fixed websites will be pretty low. The overwhelming majority of people affected won't even know their website uses PHP, even if they hear about it.
@Merovius @docwhozee chasing the tail now.
From: all servers are open to state actors via this flaw.
To: … many are not.
Wrong?
@AwetTesfaiesus @docwhozee Oh at this point right now, I would say definitely wrong. Every server (except *maybe* the ones from the hyperscalers) is almost definitely open to state actors right now. I would bet almost any amount that any intelligence agency worth its salt has a zero day for Linux.