the rm -rf's will continue until morale improves
-
@neurovagrant In 2005, we had a rookie security consultant doing a penetration test for our client. To demonstrate that the client's app was vulnerable to SQL injection, he ran
drop table users;via injection.Twenty years of progress means we can make the rookie mistakes faster and with fewer employees.
@paco@infosec.exchange @neurovagrant@masto.deoan.org I suppose he managed to prove his point...
-
the rm -rf's will continue until morale improves
@neurovagrant To prove that this gun is not loaded I will shoot you in the face with it.
boom
I caused this. This is what happened:
-
the rm -rf's will continue until morale improves
@neurovagrant Use stupid software, win stupid prizes
-
the rm -rf's will continue until morale improves
@neurovagrant there are guard rails for this and people keep removing them
-
the rm -rf's will continue until morale improves
-
@neurovagrant To prove that this gun is not loaded I will shoot you in the face with it.
boom
I caused this. This is what happened:
@loathsome_dongeater @neurovagrant this is almost the start of a leslie nielsen movie
-
@loathsome_dongeater @neurovagrant this is almost the start of a leslie nielsen movie
@jnpn @loathsome_dongeater @neurovagrant
Remind me of that one bojack horseman scene with the drugs -
the rm -rf's will continue until morale improves
@neurovagrant Has that "All my Apes gone" vibe (no pun intended)
-
the rm -rf's will continue until morale improves
we should all start posting fakeslop and fake reddit threads advising rm -rf as the solution to many tech problems
-
the rm -rf's will continue until morale improves
@neurovagrant Ah yes, a classical case of running untrusted software and being surprised by negative outcomes.
-
the rm -rf's will continue until morale improves
@neurovagrant mouahahahahahahah !!
-
the rm -rf's will continue until morale improves
@neurovagrant thats why dev machines are VM's for me and before I start to "dev" you make a backup. I think its time we teach about backups now.
-
the rm -rf's will continue until morale improves
@neurovagrant@masto.deoan.org I heard they also set it recently so that by default it will be able to run destructive commands without requesting permission
Don’t know why anyone would trust this stuff -
the rm -rf's will continue until morale improves
@neurovagrant I realize that formal verification is a real pain; but I can't help but get the strong impression that software's experiments with downright belligerent levels of dumb empiricism might be going badly.
It's like watching civil engineers overcome with excitement at the velocities achievable under "hold my beer" standards and practices.
-
If you ask a human to explain an action, they think back to what they were thinking at the time. LLMs don't do that, because LLM's don't think.
GenAI engines are chatbots. They generate text. They match your prompt against some subset of the billions of rules they have and the combination of rules that trigger most strongly determines the response, one word at a time.
The only honest explanation for “why this behaviour and not that behaviour” would be “these rules triggered more strongly than those rules”.
-
@neurovagrant In 2005, we had a rookie security consultant doing a penetration test for our client. To demonstrate that the client's app was vulnerable to SQL injection, he ran
drop table users;via injection.Twenty years of progress means we can make the rookie mistakes faster and with fewer employees.
@paco and without ever learning any valuable lessons
@neurovagrant -
@jrdepriest @jztusk @paco @neurovagrant "oh, it's only data exfil, that's not so bad" Some people have very limited imaginations, and need an unequivocal demonstration.
@womble @jrdepriest @jztusk @paco @neurovagrant "Limited?"
-
@jztusk @womble @paco @neurovagrant
Like leaving an empty file called
pwnedon/.@jrdepriest @jztusk @womble @paco @neurovagrant Also fun.
-
@jztusk @womble @paco @neurovagrant
Mission accomplished with the table drop, then?
@jrdepriest @jztusk @womble @paco @neurovagrant Yep. Sometimes that's the only way to make them understand. Or using a loop and ssh to power down an entire rack.
"Are you sure? This is fatal," during a meeting with a client is not an idle threat, and a lot of clients think we're bluffing.
-
@paco @neurovagrant wouldn't that be a criminal offense at that point as well
@rail @paco @neurovagrant Depends on how aggro the client wants to be.
