Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • PopulĂŠre
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce.

Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce.

Planlagt Fastgjort LÄst Flyttet Ikke-kategoriseret
88 IndlĂŠg 60 Posters 0 Visninger
  • Ældste til nyeste
  • Nyeste til ĂŠldste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne trÄd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • spartan_1986@infosec.exchangeS spartan_1986@infosec.exchange

    @GossiTheDog PS: we did raise these concerns when management announced everyone was getting Copilot. Took months (and months) to get them to agree to a test. “No one will be able to see anything they don’t already have access to,” they said.đŸ€·â€â™‚ïž

    Yes. Exactly.

    darryl@toot.communityD This user is from outside of this forum
    darryl@toot.communityD This user is from outside of this forum
    darryl@toot.community
    wrote sidst redigeret af
    #63

    @Spartan_1986 @GossiTheDog A lot easier to *find* the stuff that you have access to but shouldn’t.

    1 Reply Last reply
    0
    • spartan_1986@infosec.exchangeS spartan_1986@infosec.exchange

      @GossiTheDog And then there is the non-monetary costs. We recently completed our first penetration test against Copilot in my corp and to say we found a lot of secret and confidential stuff out there just for the prompting is an understatement. The company totally believed Microsoft when they said everything would be safe guarded, yet I personally found a document with every marketing service account name and password. Vender contracts, company secrets, legal documents: we found it all. Copilot in a corporate environment is the single largest amplifier of poor IAM configurations. It is the largest insider threat I’ve ever seen.

      n_dimension@infosec.exchangeN This user is from outside of this forum
      n_dimension@infosec.exchangeN This user is from outside of this forum
      n_dimension@infosec.exchange
      wrote sidst redigeret af
      #64

      @Spartan_1986 @GossiTheDog

      Parameters of the test?

      And as it in the compartmentalised corpo environment or public?

      1 Reply Last reply
      0
      • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

        In an era where companies need to become more efficient and diverse they’ve basically picked the least efficient way to do it, with the biggest risks and highest costs - because everybody else is doing it.

        I know somebody at one of the big 4 who has written something in Claude that prompts Claude each twenty minutes for a question, then feeds Claude’s question back into Claude to use their tokens - because token usage is factored into employee evaluations. What are we even doing.

        cshishido@infosec.exchangeC This user is from outside of this forum
        cshishido@infosec.exchangeC This user is from outside of this forum
        cshishido@infosec.exchange
        wrote sidst redigeret af
        #65

        @GossiTheDog That sounds like reinforcement training to me. /s

        1 Reply Last reply
        0
        • spartan_1986@infosec.exchangeS spartan_1986@infosec.exchange

          @GossiTheDog And then there is the non-monetary costs. We recently completed our first penetration test against Copilot in my corp and to say we found a lot of secret and confidential stuff out there just for the prompting is an understatement. The company totally believed Microsoft when they said everything would be safe guarded, yet I personally found a document with every marketing service account name and password. Vender contracts, company secrets, legal documents: we found it all. Copilot in a corporate environment is the single largest amplifier of poor IAM configurations. It is the largest insider threat I’ve ever seen.

          avirr@sfba.socialA This user is from outside of this forum
          avirr@sfba.socialA This user is from outside of this forum
          avirr@sfba.social
          wrote sidst redigeret af
          #66

          @Spartan_1986 @GossiTheDog The obscurity is gone

          1 Reply Last reply
          0
          • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

            In an era where companies need to become more efficient and diverse they’ve basically picked the least efficient way to do it, with the biggest risks and highest costs - because everybody else is doing it.

            I know somebody at one of the big 4 who has written something in Claude that prompts Claude each twenty minutes for a question, then feeds Claude’s question back into Claude to use their tokens - because token usage is factored into employee evaluations. What are we even doing.

            lightfighter@infosec.exchangeL This user is from outside of this forum
            lightfighter@infosec.exchangeL This user is from outside of this forum
            lightfighter@infosec.exchange
            wrote sidst redigeret af
            #67

            @GossiTheDog The security risk surrounding all these users with access to LLM's with access to all that corporate data is chilling.

            1 Reply Last reply
            0
            • hans5524@mastodon.nlH hans5524@mastodon.nl

              @malwareminigun @GossiTheDog No attribution necessary, it's AI generated.

              theeclecticdyslexic@mstdn.socialT This user is from outside of this forum
              theeclecticdyslexic@mstdn.socialT This user is from outside of this forum
              theeclecticdyslexic@mstdn.social
              wrote sidst redigeret af
              #68

              @hans5524 @malwareminigun @GossiTheDog Yep it is, this exact piece made the rounds a few weeks ago. There was a very thorough thread where every little AI tell was poured over in detail.

              1 Reply Last reply
              0
              • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

                In an era where companies need to become more efficient and diverse they’ve basically picked the least efficient way to do it, with the biggest risks and highest costs - because everybody else is doing it.

                I know somebody at one of the big 4 who has written something in Claude that prompts Claude each twenty minutes for a question, then feeds Claude’s question back into Claude to use their tokens - because token usage is factored into employee evaluations. What are we even doing.

                agentultra@types.plA This user is from outside of this forum
                agentultra@types.plA This user is from outside of this forum
                agentultra@types.pl
                wrote sidst redigeret af
                #69

                @GossiTheDog there’s an old tale about optimizing for the wrong things. Something about getting rid of rats only made a market for breeding them.

                Guess that means we’ll burn the planet and use up all the drinkable water to autocomplete our homework and live life without having to deal with people.

                1 Reply Last reply
                0
                • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

                  In an era where companies need to become more efficient and diverse they’ve basically picked the least efficient way to do it, with the biggest risks and highest costs - because everybody else is doing it.

                  I know somebody at one of the big 4 who has written something in Claude that prompts Claude each twenty minutes for a question, then feeds Claude’s question back into Claude to use their tokens - because token usage is factored into employee evaluations. What are we even doing.

                  tokyo_0@mas.toT This user is from outside of this forum
                  tokyo_0@mas.toT This user is from outside of this forum
                  tokyo_0@mas.to
                  wrote sidst redigeret af
                  #70

                  @GossiTheDog @paninid That's actually the smartest use of AI (given the constraints imposed) that I've heard about so far â˜ș

                  1 Reply Last reply
                  0
                  • malwareminigun@infosec.exchangeM malwareminigun@infosec.exchange

                    @bontchev you're missing the point. This thread started with people talking about how AI was crazy expensive, and you saying, in my experience, it's cheap. The reason it's cheap for you right now is you're using a setup that subsidizes the crap out of it. Anyone using a path that doesn't have such subsidy is currently paying for it and it's not cheap. Those folks are paying those costs right now.

                    I'm not saying it's valueless, or don't use it, or you should change anything about what you are doing right now, i'm explaining why people are saying it's expensive. The employee at the beginning of this thread is easily costing a $1000 a day, just in AI usage.

                    bontchev@infosec.exchangeB This user is from outside of this forum
                    bontchev@infosec.exchangeB This user is from outside of this forum
                    bontchev@infosec.exchange
                    wrote sidst redigeret af
                    #71

                    @malwareminigun I don't dispute that it's cheap right now because it is subsidized - but that's besides the point. The point is that it *is* (or at least can be, as demonstrated in my case) very cheap right now compared to the value it brings.

                    Yes, that's likely to change. When it changes, I'll revaluate. I am not arguing that AI won't become too expensive to use. I'm arguing that AI can be quite cheap to use (while bringing tremendous value) *right now* - for whatever reasons.

                    1 Reply Last reply
                    0
                    • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

                      RE: https://mastodon.social/@404mediaco/116908074107231828

                      Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word.

                      Giving the 99% of people tools which cost $$$ per user a month and letting them do anything is like giving a child a car, and being surprised when they ram the car into a wall three days later and cost $10k after achieving nothing.

                      painting_squirrel@muenchen.socialP This user is from outside of this forum
                      painting_squirrel@muenchen.socialP This user is from outside of this forum
                      painting_squirrel@muenchen.social
                      wrote sidst redigeret af
                      #72

                      @GossiTheDog
                      And the tech firms didn't even only give cars to their children but explicitly told them to drive as much and as fast as they possibly could đŸ€Ż

                      1 Reply Last reply
                      0
                      • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

                        RE: https://mastodon.social/@404mediaco/116908074107231828

                        Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word.

                        Giving the 99% of people tools which cost $$$ per user a month and letting them do anything is like giving a child a car, and being surprised when they ram the car into a wall three days later and cost $10k after achieving nothing.

                        misusecase@twit.socialM This user is from outside of this forum
                        misusecase@twit.socialM This user is from outside of this forum
                        misusecase@twit.social
                        wrote sidst redigeret af
                        #73

                        @GossiTheDog @blogdiva I am not an Excel wizard but I am a weirdo who can align tables in Word.

                        1 Reply Last reply
                        0
                        • brnrd@bsd.networkB brnrd@bsd.network

                          @GossiTheDog honestly, isn't most of the stuff IT teams do nowadays extremely wasteful?
                          I look at CI pipelines and feel the need to scream.
                          Upgrade your OS image with hundreds of packages on every push,
                          Build all layers of your container every time...
                          Then migrate to the next git service and CI/CD framework every year, complete rewrites.
                          How many bloody Artifactory mirrors does a company need?!!!

                          Etc. etc. These kids should start with a C64 or ZX80 before let loose on this hot garbage

                          misusecase@twit.socialM This user is from outside of this forum
                          misusecase@twit.socialM This user is from outside of this forum
                          misusecase@twit.social
                          wrote sidst redigeret af
                          #74

                          @brnrd @GossiTheDog Wait wait wait. Is this why I have to update and restart my enterprise laptop all the time? And when I have to do it one time, I will probably have to do it one or two more times on the same day?

                          1 Reply Last reply
                          0
                          • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

                            RE: https://mastodon.social/@404mediaco/116908074107231828

                            Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word.

                            Giving the 99% of people tools which cost $$$ per user a month and letting them do anything is like giving a child a car, and being surprised when they ram the car into a wall three days later and cost $10k after achieving nothing.

                            okuna@social.tchncs.deO This user is from outside of this forum
                            okuna@social.tchncs.deO This user is from outside of this forum
                            okuna@social.tchncs.de
                            wrote sidst redigeret af
                            #75

                            @GossiTheDog I once had a colleague who wrote letters, official letters, with Excel.
                            When I asked why not word he said:
                            In Excel I can align the indent, tabs and the paragraphs better.

                            Case closed your honour.

                            1 Reply Last reply
                            0
                            • gossithedog@cyberplace.socialG gossithedog@cyberplace.social

                              RE: https://mastodon.social/@404mediaco/116908074107231828

                              Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word.

                              Giving the 99% of people tools which cost $$$ per user a month and letting them do anything is like giving a child a car, and being surprised when they ram the car into a wall three days later and cost $10k after achieving nothing.

                              okuna@social.tchncs.deO This user is from outside of this forum
                              okuna@social.tchncs.deO This user is from outside of this forum
                              okuna@social.tchncs.de
                              wrote sidst redigeret af
                              #76

                              @GossiTheDog “A fool with a tool is still a fool”

                              1 Reply Last reply
                              0
                              • bontchev@infosec.exchangeB bontchev@infosec.exchange

                                @GossiTheDog This is stupid, of course - but, as they say, show me the incentive and I'll show you the outcome.

                                Still, I don't quite understand the "cost" thing. If used properly, AI should reduce cost. By using Claude, I was able to do in 3 months what I previously couldn't do in 5 years. This is on a Pro subscription (the cheapest one) that costs something like 180 euros per year.

                                If we had hired a professional programmer for the same work, their *monthly* salary would have been more than 10 times higher - and they would have become annoyed with me and left after 2 months anyway.

                                lepapierblanc@mamutovo.czL This user is from outside of this forum
                                lepapierblanc@mamutovo.czL This user is from outside of this forum
                                lepapierblanc@mamutovo.cz
                                wrote sidst redigeret af
                                #77

                                @GossiTheDog @bontchev

                                That period is over since 1st of June. Actual billing schema is on a different level.

                                bontchev@infosec.exchangeB 1 Reply Last reply
                                0
                                • bontchev@infosec.exchangeB bontchev@infosec.exchange

                                  @malwareminigun You might be right but I'm talking about the right now, not about the future. And even before the boss bought me the Pro subscription, I managed to do quite a lot of work with the free version, which offers like 9 times less tokens per 5-hour session.

                                  grandmasterbash@chaos.socialG This user is from outside of this forum
                                  grandmasterbash@chaos.socialG This user is from outside of this forum
                                  grandmasterbash@chaos.social
                                  wrote sidst redigeret af
                                  #78

                                  @bontchev @malwareminigun maybe a Perspektive of rising costs. My employer uses GitHub Copilot (offering anthropic models) and they have usage based subscriptions (that still are subsediced). They have a spending Limit of 8000€ per Developer per month. Last Time they hit the Limit in the third week of the month.

                                  So what ever you run, its nowhere near the real coompute costs.

                                  bontchev@infosec.exchangeB 1 Reply Last reply
                                  0
                                  • lepapierblanc@mamutovo.czL lepapierblanc@mamutovo.cz

                                    @GossiTheDog @bontchev

                                    That period is over since 1st of June. Actual billing schema is on a different level.

                                    bontchev@infosec.exchangeB This user is from outside of this forum
                                    bontchev@infosec.exchangeB This user is from outside of this forum
                                    bontchev@infosec.exchange
                                    wrote sidst redigeret af
                                    #79

                                    @lepapierblanc @GossiTheDog This is a screenshot from today:

                                    1 Reply Last reply
                                    0
                                    • grandmasterbash@chaos.socialG grandmasterbash@chaos.social

                                      @bontchev @malwareminigun maybe a Perspektive of rising costs. My employer uses GitHub Copilot (offering anthropic models) and they have usage based subscriptions (that still are subsediced). They have a spending Limit of 8000€ per Developer per month. Last Time they hit the Limit in the third week of the month.

                                      So what ever you run, its nowhere near the real coompute costs.

                                      bontchev@infosec.exchangeB This user is from outside of this forum
                                      bontchev@infosec.exchangeB This user is from outside of this forum
                                      bontchev@infosec.exchange
                                      wrote sidst redigeret af
                                      #80

                                      @GrandmasterBash @malwareminigun Well, I can speak only from personal experience. I don't know what they are doing. With my Pro subscription of 180 euros per year, I often hit the 5-hour session token limit but the most I've ever used of the weekly token limit is 78%.

                                      grandmasterbash@chaos.socialG 1 Reply Last reply
                                      0
                                      • bontchev@infosec.exchangeB bontchev@infosec.exchange

                                        @GossiTheDog This is stupid, of course - but, as they say, show me the incentive and I'll show you the outcome.

                                        Still, I don't quite understand the "cost" thing. If used properly, AI should reduce cost. By using Claude, I was able to do in 3 months what I previously couldn't do in 5 years. This is on a Pro subscription (the cheapest one) that costs something like 180 euros per year.

                                        If we had hired a professional programmer for the same work, their *monthly* salary would have been more than 10 times higher - and they would have become annoyed with me and left after 2 months anyway.

                                        bertdriehuis@infosec.exchangeB This user is from outside of this forum
                                        bertdriehuis@infosec.exchangeB This user is from outside of this forum
                                        bertdriehuis@infosec.exchange
                                        wrote sidst redigeret af
                                        #81

                                        @bontchev @GossiTheDog that 180 Euros is not covering the cost of inference. And you're correct: for users who do not let their skills atrophy, GenAI can be of value. For the majority, it will be a provider of brain rot, unmaintainable code and vulns, and for society, the extinction of the senior in the workplace.

                                        At $ORKPLACE, I've now run into the first case of a user who is patently wrong in his interpretation of some vendor docs but won't budge because AI summarizes it wrong, and he trusts the 'puter more than his colleagues.

                                        bontchev@infosec.exchangeB 1 Reply Last reply
                                        0
                                        • bertdriehuis@infosec.exchangeB bertdriehuis@infosec.exchange

                                          @bontchev @GossiTheDog that 180 Euros is not covering the cost of inference. And you're correct: for users who do not let their skills atrophy, GenAI can be of value. For the majority, it will be a provider of brain rot, unmaintainable code and vulns, and for society, the extinction of the senior in the workplace.

                                          At $ORKPLACE, I've now run into the first case of a user who is patently wrong in his interpretation of some vendor docs but won't budge because AI summarizes it wrong, and he trusts the 'puter more than his colleagues.

                                          bontchev@infosec.exchangeB This user is from outside of this forum
                                          bontchev@infosec.exchangeB This user is from outside of this forum
                                          bontchev@infosec.exchange
                                          wrote sidst redigeret af
                                          #82

                                          @bertdriehuis @GossiTheDog I was talking about the financial cost, since people say that AI is too expensive. You're talking about something different - the potential harm of it. But even there, what I said applies - it has to be used *correctly*. Never trust it blindly. Know what it can and cannot do. And, yes, some skills will eventually atrophy - how many people can multiply 3-digit numbers in their head now that we have calculators? Do we still insist that we must multiply by hand because calculators atrophy our math skills?

                                          1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ĂŠldste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • PopulĂŠre
                                          • Verden
                                          • Bruger
                                          • Grupper