[a / b / c / d / e / f / g / gif / h / hr / k / m / o / p / r / s / t / u / v / vg / vm / vmg / vr / vrpg / vst / w / wg] [i / ic] [r9k / s4s / vip] [cm / hm / lgbt / y] [3 / aco / adv / an / bant / biz / cgl / ck / co / diy / fa / fit / gd / hc / his / int / jp / lit / mlp / mu / n / news / out / po / pol / pw / qst / sci / soc / sp / tg / toy / trv / tv / vp / vt / wsg / wsr / x / xs] [Settings] [Search] [Mobile] [Home]
Board
Settings Mobile Home
/g/ - Technology

Name
Options
Comment
Verification
4chan Pass users can bypass this verification. [Learn More] [Login]
File
  • Please read the Rules and FAQ before posting.
  • You may highlight syntax and preserve whitespace by using [code] tags.

08/21/20New boards added: /vrpg/, /vmg/, /vst/ and /vm/
05/04/17New trial board added: /bant/ - International/Random
10/04/16New board for 4chan Pass users: /vip/ - Very Important Posts
[Hide] [Show All]


[Advertise on 4chan]


Are you scared yet?
>>
>>108813872
>theo twitter screenshot thread
i hope something truly horrible happens to you.
>>
Bump
>>
>CTRL+F "OpenBSD"
>0 results
I'm fine thank you
>>
File: 1772741535145751.png (761 KB, 749x652)
761 KB PNG
>>108814256
what do you mean? he is one of the best programmers nowadays.
>>
File: 1776083670462797.png (319 KB, 850x683)
319 KB PNG
>>108813872
>copyfail
>dirtyfrag
Nothingburgers that need local access to work.
>yellowkey
Nothingburger that need tpm-only setup, if you use a password the data is encrypted with AES-XTS or whatever else.
>greenplasma
Another nothingburger that needs local access to work.
>python/node packages compromised
You're a moron if you use a language-level package manager.

Also you should kill yourself for posting a Xitter screenshot, fuck off from my board, trash.
>>
>>108813872
The CIAMOSSAD backdoors are being discovered and removed. A rare good use case for AI. This is a good thing
>>
>>108813872
That dude is insufferable, just like all richfags.
>>
>>108815172
get used to it oldtroon
>>
>>108813872
>Are you scared yet?
Scared of what? The usual
There's always been this many vulnerabilities. This is nothing special
>>
File: 1778700480328.gif (1.49 MB, 512x512)
1.49 MB GIF
>>108814344
based (good post)
>>
>>108816266
>normal CVEs
yawn.
>CVE+AI
oh no, it's over!
>>
>>108816223
Die, cancer.
>>
>>108813872
I'm not a clueless boomer, of course not
>>
>>108813872
Why?
AI finally closing all the NSA backdoors?
>>
>>108816277
E=mc^2 + CVE + AI
>>
>>108816327
Kek
>>
>>108813872
kinda I split my files and move most of the documents into a different user then moved most of the applications/binaries/dev tools to a distrobox container which is backed by podman. Of course thats not that secure but now at least a random vim extension can't just read my browser passwords.
>>
>>108814344
This is an example of all the security issues that are being discovered and fixed.
Now extrapolate this to every complex software and imagine all the security that can be discovered and exploited with these new AI tools.
>>
>>108816604
Buy an ad Dario.
>>
>>108813872
No, any vulnerability discovered is one less that exists.
>>
>>108816604
>start a bug fixing initiative because of the advances in AI
>all hands on deck to use mythos to find and fix bugs
>more bugs are found and fixed because you have all your people working on it
wwwaaAAAOOOOOooowwww!!!
>>
>>108813872
None of this affected me
>>
>>108813872
Doesn't affect me.
>>
File: stare5.jpg (34 KB, 512x512)
34 KB JPG
Waiting for NetWatch to develop their Blackwall
>>
>>108815172
any priviledge escalation vuln is not a nothingburger if you run lots of machines for various lower priviledged users, like in a computer lab
supply chain attacks are definitely more common now, though it's unclear if this is because of ai or because people have realized that npm is literally the wild west. docker is effectively the same and i don't know why they're not targeting dockerhub/containers as hard as they are npm packages
>>
>>108813872
nah choom i ain't scared of none of that shit DAY 0 NETRUNNER HERE
>>
I think the concept of there being a worm in the npm toolchain is incredibly beautiful
>>
>>108813872
lol i use windows 98
not my problem
>>
how many of these bugs were introduced or somehow induced by AI to begin with?
reminds me of tesla cars that would stop autopilot 200ms before a crash happened so it would get recorded as a human-caused crash instead

these faggots always lie and misrepresent data
>>
>>108815050
That is a truly cursed image
>>
>>108815050
>the blizzard nepo baby
>ltt fleshlight
who are the other two
>>
>>108813872
From the bottom of my heart, I hope you get raped to death by a pack of feral niggers
>>
>>108817103
It's the brownwall and it keeps India off the clearnet
>>
>>108813872
and when i told you to use simple software you called me a schizo
get fucked nigger
>>
Scared of what?
Software becoming more secure? the horror.............
>>
>>108817558
far left is Theo faggot and next to him is The Primeagen a junkie (literally)
>>
>>108813872
Not really? I mean I daily drive tinycore linux. I compiled everything myself by going through every single commit. Takes weeks or even months to add a program, but I find a lot of zero day vulnerabilities in the process and I'm at a point where it's actually useable and way faster than any other OS. None of those exploits work on my machine.
>>
>>108820850
Release your distro and shill it as the most secure OS. It would definitely be more true than can be said about openplacebo at least.
>>
File: 1492101915899.jpg (63 KB, 480x640)
63 KB JPG
>>108817228
Why GNU `su' does not support the `wheel' group
===============================================

(This section is by Richard Stallman.)

Sometimes a few of the users try to hold total power over all the
rest. For example, in 1984, a few users at the MIT AI lab decided to
seize power by changing the operator password on the Twenex system and
keeping it secret from everyone else. (I was able to thwart this coup
and give power back to the users by patching the kernel, but I wouldn't
know how to do that in Unix.)

However, occasionally the rulers do tell someone. Under the usual
`su' mechanism, once someone learns the root password who sympathizes
with the ordinary users, he or she can tell the rest. The "wheel
group" feature would make this impossible, and thus cement the power of
the rulers.

I'm on the side of the masses, not that of the rulers. If you are
used to supporting the bosses and sysadmins in whatever they do, you
might find this idea strange at first.
>>
File: fully-clothed-karina.webm (3.96 MB, 1502x900)
3.96 MB
3.96 MB WEBM
>>108813872
The opposite.
Getting rid of glowfag backdoors is great.
It's the best use of AI yet.
>>
>>108821205
While i don't see a use case in a wheel group either, i don't understand this justification.
A good guy with a su password could just add everyone else to wheel.
>>
>>108821588
But what if you looked at the wheel sideways?
>>
No, because that is the job of IT janny (read: sysadmins)
>>
>>108821637
sysadmin hasn't been a job for almost two decades now
>>
>>108821676
damn, didn't know I was unemployed
>>
>>108821468
Why do I find flat Asian butts so hawt
>>
>>108813872
>letting AI lose on open source
>find bugs
Oh no's how scary
>>
>>108816604
All this shows is that verifying the secureness of software is now much easier.
AI is a force multiplier for both penetration and security, just like any other tool. If companies use them effectively, they will be fine.
>>
>>108821770
it doesn't show this.
it doesn't answer why firefox is like this but chrome isn't. those are both comparable c++ codebases.
>>
>>108813872
>>108813732
>>
>>108821719
like half of those aren't ai
>>
File: drool.png (25 KB, 669x514)
25 KB PNG
>>108813872
to bypass bitlocker completely:
>Attacker only need to copy a specifically named FsTx folder onto a compatible USB stick and plug it into the target machine.

kek. the absolute state of microslop security.
>>
>>108821698
Larping as having a job that literally hasn't existed except maybe in apefrica for 2 decades doesn't give you any credits.
>>
I guess DNF doesn't apply to LLM's does it?
>major refactor required for exploit if an attacker has physical access to server and valid credentials
code monkeys ain't gonna bother, it's gonna stay in the code until an LLM rediscovers it 30 years later
>>
>>108821205
That seems like a poorly thought out argument. Freedom to use my computer doesn't mean freedom to use any computer for any purpose.
If it's my computer, I should be allowed to decide which parts of it I let others use. I do not, for example, want to let users use it to steal other people's data. If they want root access, they can have that on their computer.
>>
>>108822437
He's not talking about personal computers though.
>>
>>108821205
I wonder what song he's playing, maybe some egyptian alladin tone?
>>
>>108822443
I really don't see what difference that makes.
>>
>>108822354
In my experience it's more of whether a company chases the trendy job titles or not.
>>
>>108815050

>nightmare blunt rotation.
>>
>>108822354
crazy that I've been working an imaginary job for a decade now, living in an imaginary house paid for with my imaginary salary
>>
>>108822455
No, it's about scope creep. Of course the same duties are still there, but now it's devsecgitllmcloudops thank you very much.
>>
>>108822698
right. the tools evolved and more work has been piled on, but it's essentially sysadmin work. of course a startup is going to use the latest trendy words, but not everyone is going to do that. it's just like how govt jobs have standardized naming.
>>
>>108813872
I’m a bit concerned as an updooter fag because all these backdoors getting closed is going to make hackerchud glowtroons bum rush whatever supply chain exploits they have on hand before it’s gone.
>>
>>108822866
Yes, but just like devs have to also do infra work and test now, universally, and there is no such thing as 'test engineers' in software, and QA virtually doesn't exist except in very specialized industries, so is it for the "sysadmins" of yore. Similarly, we don't call them programmers anymore, but software developers at best, though usually software engineers.
>>
>>108822972
that would be good. i'd rather get all of this shit out of the way quickly. then it'll quiet down until mythos 2
>>
>>108816266
>There's always been this many vulnerabilities.
There hasn't been anything like CopyFail and Dirtyfrag in recent history.
1. A pure logic bug with 100% chance of LPE, trivially exploitable on the majority of standard linux deployments.
2. Embargo was broken on Dirty Frag, requiring emergency mitigation before OS patches were available. This almost certainly happened because someone who didn't give a shit about the security embargo discovered the vulnerability using AI.
>>
>>108823658
Achsully copyfail is not exploitable if MAC is on, and all linux distros have had MAC by default in absolute ages. Dirtyfrag requires local access and modules that none of my installs have ever had enabled.
>>
>>108813872
Nothing happens, 2B ip addresses, good luck being found.
>>
>>108813872
No. All the nerds will fix it for me
>>
>>108813872
amount of H1Bs involved in the software development of those things?
>>
>>108823658
>2. Embargo was broken on Dirty Frag, requiring emergency mitigation before OS patches were available. This almost certainly happened because someone who didn't give a shit
fake news.
kernel doesn't do embargos. kernel considers security bugs just bugs.



[Advertise on 4chan]

Delete Post: [File Only] Style:
[Disable Mobile View / Use Desktop Site]

[Enable Mobile View / Use Mobile Site]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.