4 ms·

>"Goes Public" implies there was a human who pulled the trigger; it was a bot: Meaningless distinction, a human designed the bot that pulled the trigger. Buil

>"Goes Public" implies there was a human who pulled the trigger; it was a bot: Meaningless distinction, a human designed the bot that pulled the trigger. Building a robot that then murders someone doesn't absolve the designer from the ramifications of what they built.

SSLy 10y ago
Until we get seeded AGI's, that is.
dsacco 10y ago
It's not meaningless. It would be more appropriate to compare it to a human-designed insurance algorithm that will refuse to offer a discount for extenuating circumstances. That's not so much an analogy as it is a reimplemented example of the same philosophy in practice. The meaningful distinction is that a human can be persuaded to extend the deadline, at least in theory. A bot cannot be persuaded to do anything, and if a deadline passes an action is triggered like a dead man's switch. In one scenario, a human needs to maintain the decision to uphold that deadline without bias every single time it comes into question. In the other, they only have to do it once: when the bot is initially designed. They're different things entirely. Arguing that they're not is like arguing that it's easy to maintain a diet or exercise regimen because you just have to uphold a New Year's resolution for a week. This has important ramifications for a security disclosure deadline, because it (theoretically) reduces bias. There are other elements of a disclosure that can still elicit bias, but at least the deadline time itself will not be one of them.
- deleted 10y ago
  [deleted]
rucker 10y ago
I think you're being pedantic. It's pretty clear what the headline implies and what the parent commenter is saying. From headline reading "X goes public with...", most people would infer a scenario where something out of the ordinary is taking place. Pointing out that this disclosure was made by a bot is a meaningful distinction.
digler999 10y ago
> a human designed the bot that pulled the trigger. And a human designed the insecure code on IE. That programmer isn't "absolved of the ramifications" of exposing their user base to god-knows-what kind of malware/ransomware.
gburt 10y ago
The distinction is game theoretical. The fact this is a process that has no exception sets the standard and doesn't allow more "costly" bugs to be ignored knowing that they will continue to embargo anyway. This process and the costly signal associated ensures better behaviour from vendors in the long run.
naasking 10y ago
> Meaningless distinction, a human designed the bot that pulled the trigger. Building a robot that then murders someone doesn't absolve the designer from the ramifications of what they built. Not meaningless at all. A better analogy is that you built a robot that pointed a gun at a chair, and said, "this robot will pull the trigger on date X, so don't sit in that chair on date X." It's not trivial to argue that the robot designer shares the lion's share of the blame here.

SSLy 10y ago

Until we get seeded AGI's, that is.

dsacco 10y ago

It's not meaningless. It would be more appropriate to compare it to a human-designed insurance algorithm that will refuse to offer a discount for extenuating circumstances. That's not so much an analogy as it is a reimplemented example of the same philosophy in practice. The meaningful distinction is that a human can be persuaded to extend the deadline, at least in theory. A bot cannot be persuaded to do anything, and if a deadline passes an action is triggered like a dead man's switch. In one scenario, a human needs to maintain the decision to uphold that deadline without bias every single time it comes into question. In the other, they only have to do it once: when the bot is initially designed. They're different things entirely. Arguing that they're not is like arguing that it's easy to maintain a diet or exercise regimen because you just have to uphold a New Year's resolution for a week. This has important ramifications for a security disclosure deadline, because it (theoretically) reduces bias. There are other elements of a disclosure that can still elicit bias, but at least the deadline time itself will not be one of them.

deleted 10y ago
[deleted]

rucker 10y ago

I think you're being pedantic. It's pretty clear what the headline implies and what the parent commenter is saying. From headline reading "X goes public with...", most people would infer a scenario where something out of the ordinary is taking place. Pointing out that this disclosure was made by a bot is a meaningful distinction.

digler999 10y ago

> a human designed the bot that pulled the trigger. And a human designed the insecure code on IE. That programmer isn't "absolved of the ramifications" of exposing their user base to god-knows-what kind of malware/ransomware.

gburt 10y ago

The distinction is game theoretical. The fact this is a process that has no exception sets the standard and doesn't allow more "costly" bugs to be ignored knowing that they will continue to embargo anyway. This process and the costly signal associated ensures better behaviour from vendors in the long run.

naasking 10y ago

> Meaningless distinction, a human designed the bot that pulled the trigger. Building a robot that then murders someone doesn't absolve the designer from the ramifications of what they built. Not meaningless at all. A better analogy is that you built a robot that pointed a gun at a chair, and said, "this robot will pull the trigger on date X, so don't sit in that chair on date X." It's not trivial to argue that the robot designer shares the lion's share of the blame here.