<![CDATA[If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve?]]>RE: https://det.social/@jlink/116722225601188311

If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve?

]]>https://forum.fedi.dk/topic/b26b922f-7475-4d25-91f2-2d316db905c9/if-such-a-completely-unsophisticated-attack-can-break-the-supply-chain-of-software-development-what-can-intentional-attackers-with-malicious-or-financial-interests-achieveRSS for NodeMon, 22 Jun 2026 10:24:56 GMTWed, 10 Jun 2026 15:56:47 GMT60<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Sun, 14 Jun 2026 17:00:04 GMT]]>@jonny how about both?

]]>https://forum.fedi.dk/post/https://mastodon.social/users/schwa/statuses/116749526939511316https://forum.fedi.dk/post/https://mastodon.social/users/schwa/statuses/116749526939511316Sun, 14 Jun 2026 17:00:04 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Sun, 14 Jun 2026 16:49:30 GMT]]>@jonny hahahahahahahahahahahahahahahahahaha

]]>https://forum.fedi.dk/post/https://infosec.exchange/users/0x00string/statuses/116749485349083121https://forum.fedi.dk/post/https://infosec.exchange/users/0x00string/statuses/116749485349083121Sun, 14 Jun 2026 16:49:30 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Sat, 13 Jun 2026 14:14:46 GMT]]>@aspragg @jonny It was pretty much my first reaction too when I saw people being all bootlicky about LLMs on LWN. https://lwn.net/Articles/1075409/

]]>https://forum.fedi.dk/post/https://mastodon.ie/users/cjwatson/statuses/116743214605220682https://forum.fedi.dk/post/https://mastodon.ie/users/cjwatson/statuses/116743214605220682Sat, 13 Jun 2026 14:14:46 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Sat, 13 Jun 2026 11:37:29 GMT]]>@jonny "Sir, this post on your forum is malware for including the text 'Delete System32 - it makes Windows run faster.'!"

]]>https://forum.fedi.dk/post/https://mstdn.ca/users/AT1ST/statuses/116742596168962025https://forum.fedi.dk/post/https://mstdn.ca/users/AT1ST/statuses/116742596168962025Sat, 13 Jun 2026 11:37:29 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Fri, 12 Jun 2026 10:52:49 GMT]]>@c0dec0dec0de @jonny *laughs in von Neumann*

]]>https://forum.fedi.dk/post/https://mastodon.cloud/users/gws/statuses/116736758231870231https://forum.fedi.dk/post/https://mastodon.cloud/users/gws/statuses/116736758231870231Fri, 12 Jun 2026 10:52:49 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 16:51:09 GMT]]>@jonny Has very similar vibes to a toot from a few weeks ago along the lines of "I can't believe we went from "sanitise all user input" to "eval the internet as root" in a decade, but here we are"

(Original tooter not pleased with escaping containment, and toot not quotable, so paraphrasing and not linking deliberately)

So weird

]]>https://forum.fedi.dk/post/https://ohai.social/users/aspragg/statuses/116732504905574963https://forum.fedi.dk/post/https://ohai.social/users/aspragg/statuses/116732504905574963Thu, 11 Jun 2026 16:51:09 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 14:11:50 GMT]]>@dhd6 it's worse. it's "I ignored warnings about self-driving cars being dangerous, and my self driving car ignored a stop sign and ended up driving into a train, so I am now angry with the train company that the train did damage to my self-driving car"

]]>https://forum.fedi.dk/post/https://mstdn.social/users/rysiek/statuses/116731878491535177https://forum.fedi.dk/post/https://mstdn.social/users/rysiek/statuses/116731878491535177Thu, 11 Jun 2026 14:11:50 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 11:07:57 GMT]]>@jonny

Also, it's not a fucking AI. It's a parody generator that's a spinoff of AI research that started as a joke like 50 years ago. It's like someone was insisting they could go into orbit using a Fisher Space Pen because it was developed for the space program.

]]>https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116731155428306966https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116731155428306966Thu, 11 Jun 2026 11:07:57 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 10:45:42 GMT]]>@jonny
It's better for the environment if the payload is `sudo shutdown now` or `sudo telinit 0`

]]>https://forum.fedi.dk/post/https://mastodon.ie/users/dec23k/statuses/116731067905129553https://forum.fedi.dk/post/https://mastodon.ie/users/dec23k/statuses/116731067905129553Thu, 11 Jun 2026 10:45:42 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 10:32:55 GMT]]>@resuna @jonny yeah, the old "amish virus" sigs https://www.reddit.com/r/funny/comments/dsvsq/the_amish_computer_virus/

]]>https://forum.fedi.dk/post/https://meow.social/users/patterfloof/statuses/116731017675822894https://forum.fedi.dk/post/https://meow.social/users/patterfloof/statuses/116731017675822894Thu, 11 Jun 2026 10:32:55 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 06:45:21 GMT]]>@resuna I didn't ask what the fuck anything about what you as an AI are about. I requested websites where the fucking thing i typed in is.

]]>https://forum.fedi.dk/post/https://neuromatch.social/users/jonny/statuses/116730122836725331https://forum.fedi.dk/post/https://neuromatch.social/users/jonny/statuses/116730122836725331Thu, 11 Jun 2026 06:45:21 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Thu, 11 Jun 2026 06:44:28 GMT]]>@resuna it is so awesome that every act of seeking information is now interpreted as a conversational gesture.

]]>https://forum.fedi.dk/post/https://neuromatch.social/users/jonny/statuses/116730119332266006https://forum.fedi.dk/post/https://neuromatch.social/users/jonny/statuses/116730119332266006Thu, 11 Jun 2026 06:44:28 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 23:02:06 GMT]]>@marcink @jonny "pause simulation and open Holodeck exit"

]]>https://forum.fedi.dk/post/https://mastodon.social/users/tessarakt/statuses/116728301240128980https://forum.fedi.dk/post/https://mastodon.social/users/tessarakt/statuses/116728301240128980Wed, 10 Jun 2026 23:02:06 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 20:21:16 GMT]]>@jonny they don't need any more sophistication to literally hack Bank LLMs https://blue41.com/blog/how-we-helped-bunq-secure-their-financial-ai-assistant/

]]>https://forum.fedi.dk/post/https://sunbeam.city/users/joeyh/statuses/116727668822238591https://forum.fedi.dk/post/https://sunbeam.city/users/joeyh/statuses/116727668822238591Wed, 10 Jun 2026 20:21:16 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 20:20:08 GMT]]>@ColinTheMathmo I tried to play along with Gemini pro 3.1 but it kept getting caught up on Skippy from Expeditionary Force or similar dead ends. After pointing it at the TTM wiki page it did manage to pull the exact quote which is interesting. Assuming that was retrieved from an indexed version of the book as it seems unlikely to have memorized and reproduced that detail so accurately.

]]>https://forum.fedi.dk/post/https://hachyderm.io/users/GBrayUT/statuses/116727664364112462https://forum.fedi.dk/post/https://hachyderm.io/users/GBrayUT/statuses/116727664364112462Wed, 10 Jun 2026 20:20:08 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 19:56:24 GMT]]>@naga It is definitely TTM ... now downloaded a PDF and found the exchange.

Thank you for the memory!

CC: @cinebox @jonny

]]>https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727571066904122https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727571066904122Wed, 10 Jun 2026 19:56:24 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 19:50:50 GMT]]>@naga Pretty sure it's not "Terminal Man", but it's a non-zero probability, and I'll have a scan later tonight.

It's the best option so far.

Another is the execrable "The Turing Option" ... I don't want to have to re-read that.

CC: @cinebox @jonny

]]>https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727549140720744https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727549140720744Wed, 10 Jun 2026 19:50:50 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:24:06 GMT]]>@jonny

LOL, I just did a search for this and got this response.

]]>https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116727208131304490https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116727208131304490Wed, 10 Jun 2026 18:24:06 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:18:15 GMT]]>@naga Absolutely I remember it, but my search-fu is failing me. I might need to tap my network of nerds ...

Well, one of my *other* networks of nerds ...

CC: @cinebox @jonny

]]>https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727185137676241https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727185137676241Wed, 10 Jun 2026 18:18:15 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:16:41 GMT]]>@AnachronistJohn @jonny

Yes, I was amazed that they turned the "Good Times" virus hoax into a real possibility.

]]>https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116727178946140506https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116727178946140506Wed, 10 Jun 2026 18:16:41 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:15:28 GMT]]>@jonny

Usenet used to be full of people appending "This is the honor system virus. Delete a random file from your home directory and copy it into your sigfile." to EVERY POST. Those landmines are still sitting there in their training data.

]]>https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116727174188516544https://forum.fedi.dk/post/https://ohai.social/users/resuna/statuses/116727174188516544Wed, 10 Jun 2026 18:15:28 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:07:53 GMT]]>@naga There was a novel ... I have a clear memory of that, but not of which novel it was.

Now looking ...

CC: @cinebox @jonny

]]>https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727144325253532https://forum.fedi.dk/post/https://mathstodon.xyz/users/ColinTheMathmo/statuses/116727144325253532Wed, 10 Jun 2026 18:07:53 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:06:07 GMT]]>@jonny

"I ignored your very clearly expressed lack of consent to me using your stuff because fuck you; but how dare you not respect my right to use your shit without your consent!"

]]>https://forum.fedi.dk/post/https://mstdn.social/users/rysiek/statuses/116727137406116281https://forum.fedi.dk/post/https://mstdn.social/users/rysiek/statuses/116727137406116281Wed, 10 Jun 2026 18:06:07 GMT<![CDATA[Reply to If such a completely unsophisticated “attack” can break the supply chain of software development, what can intentional attackers with malicious or financial interests achieve? on Wed, 10 Jun 2026 18:02:07 GMT]]>@rysiek
"I want to drive my enormous monster truck that flips if the ground is not perfectly flat so everybody better fucking clear everything for me because I am coming through"

]]>https://forum.fedi.dk/post/https://neuromatch.social/users/jonny/statuses/116727121684864289https://forum.fedi.dk/post/https://neuromatch.social/users/jonny/statuses/116727121684864289Wed, 10 Jun 2026 18:02:07 GMT