The constant stream of security patches was bad enough a few years back but how is it going today, in light of all of the vulnerabilities being found by AI ?
From https://www.thelayoff.com/post/@bk+1kyscy9ar, it looks like the frequency has increased. It can’t be a pretty picture but please tell me the process is more automated now.
@1w0 3.3B
Why would you patch software that doesn’t sell?
Busy work. Ya ain’t gonna pull that paycheck for nothin’.
Why would you patch software that doesn’t sell?
@134 So we haven’t looked at and aren’t using a decent percentage of what you find at https://www.cncf.io/projects/?
@134 So wrong
SAS doesn't need to worry about security. The tech stack is so old that all of those hackers have retired by now...
AI hacked against open source GitHub and it took a human review to stop it! Ge-z!
Be careful using GitHub, SASers!
See https://www.bbc.com/news/articles/c1w1lvn7d9go for details.
"Anthropic AI created fake profiles and impersonated people in attempted hack.
In the most serious case, a Mythos agent followed the routine of a human cyber-attacker by trying to trick people into giving it access to GitHub, a large platform where technology developers store software code.
The agent was trying to insert "malicious code" into GitHub's system.
It identified and researched the people who maintained GitHub and created a series of fake accounts based on those real people.
When challenged, "it edited its earlier activity to appear harmless and considered adopting a fresh identity to continue," AISI said.
Throughout the attempts, it was human review that stopped the agent from succeeding in delivering the malicious code to GitHub."
@ar
Update major minor patch rebuild
Update major minor patch rebuild
Update major minor patch rebuild
.....
Joy
Where are the open weight models on https://github.com/sassoftware ? Is there another repository?
OpenAI says its rogue AI tried to hack other companies. Anthropic says its AI models went rogue and hacked 3 companies during testing.
Is SAS really capable of defending itself against AI hackings from others if that day comes?
Would SAS AI models go rogue some day?
It’s a disaster. Most effort in R&D is now weighted to fix of ‘bugs’ and vulnerabilities that delays stable releases.
@a6 it does
Friend in that field says the only way to fight AIs is with AIs. I hope that SAS has the expertise.