4 ms·

Here is an example what keeps me up at night https://youtu.be/_mkRAArj-x0 https://youtu.be/_mkRAArj-x0 Adding or removing cancer. Image manipulation of medica

Here is an example what keeps me up at night https://youtu.be/_mkRAArj-x0 https://youtu.be/_mkRAArj-x0 Adding or removing cancer. Image manipulation of medical related diagnostics/data. Imagine a hospital hack where 50% of cancer patient images are clear and unsuspecting other 50% have fake cancer injected in. The ransomeware on this stuff is going to be absolutely insane to resolve and/or insure against.

not_a_cop75 7y ago
It's not as if political dissidents haven't been executed properly without this tool, but what you're stating is now it's going to get worse. I'm of a pretty strongly held belief that everyone the top echelons really want dead are already dead. People that have the money to reliably make this thing happen need no low tech solutions, although possibly you're worried now that anyone can do it? It seems that such a move would be used to upset a fight for power among a government. If you have a government where this is already an issue, then the problem is more likely the government than the action created by the hack. Furthermore, such a large rise in cancer cases would be heavily researched, and causation would be discovered, prompting hospital care facilities to start issuing hash code with images to prevent manipulation, if that is not already being done.
truncatedApathy 7y ago
The only actor that would have sufficient motive to operate precision sabotage like this would be an APT. Next to nobody else would harbor a serious urge or inclination to experiment with image forgery like this. It's much too dry to draw garden variety sociopaths, and the remainder is likely more rare than a simultaneous bee sting and lightning strike during an earthquake. The ransomware angle incentivizes hostile firmware/software tampering, but naive doctors that expect reliable equipment will have alternative paths to catch image processing misbehavior, and patients facing serious medical issues often have an intuition for errant medical opinions and recruit second opinions when something is especially grave or feels incorrect. And besides, the world has existed for centuries without medical imaging, and life will go on. This is a soft threat. It's also readily solvable, by hardening systems integrity, and moving away from swiss cheese consumer grade operating systems. The kind that ship with advertising blobs baked into every build. Ad tech is much more hostile to civilization as we know it than deep fakes, mainly because it's the original hole that you can drive a truck through. Software contaminated by unnecessary cruft by default represents the boiled frogs that lead people to learned hopelessness. People know their OEM systems and free/open alternatives are all adulterated with uncontrolled effluence, and are disgusted by it. All the compromises that began in the mid 2000's have ruined the trust that we can even have workstations that only deploy and install the essentials for the task at hand. The vulnerability and zero day treadmill would not be what it is if software were more focused and eliminated rampant "app" ecosystems hopelessly clogged with factory images that attach to services the user cannot uninstall.
Balgair 7y ago
Wow! That is eye opening. Thanks for the share on that one.

not_a_cop75 7y ago

It's not as if political dissidents haven't been executed properly without this tool, but what you're stating is now it's going to get worse. I'm of a pretty strongly held belief that everyone the top echelons really want dead are already dead. People that have the money to reliably make this thing happen need no low tech solutions, although possibly you're worried now that anyone can do it? It seems that such a move would be used to upset a fight for power among a government. If you have a government where this is already an issue, then the problem is more likely the government than the action created by the hack. Furthermore, such a large rise in cancer cases would be heavily researched, and causation would be discovered, prompting hospital care facilities to start issuing hash code with images to prevent manipulation, if that is not already being done.

truncatedApathy 7y ago

The only actor that would have sufficient motive to operate precision sabotage like this would be an APT. Next to nobody else would harbor a serious urge or inclination to experiment with image forgery like this. It's much too dry to draw garden variety sociopaths, and the remainder is likely more rare than a simultaneous bee sting and lightning strike during an earthquake. The ransomware angle incentivizes hostile firmware/software tampering, but naive doctors that expect reliable equipment will have alternative paths to catch image processing misbehavior, and patients facing serious medical issues often have an intuition for errant medical opinions and recruit second opinions when something is especially grave or feels incorrect. And besides, the world has existed for centuries without medical imaging, and life will go on. This is a soft threat. It's also readily solvable, by hardening systems integrity, and moving away from swiss cheese consumer grade operating systems. The kind that ship with advertising blobs baked into every build. Ad tech is much more hostile to civilization as we know it than deep fakes, mainly because it's the original hole that you can drive a truck through. Software contaminated by unnecessary cruft by default represents the boiled frogs that lead people to learned hopelessness. People know their OEM systems and free/open alternatives are all adulterated with uncontrolled effluence, and are disgusted by it. All the compromises that began in the mid 2000's have ruined the trust that we can even have workstations that only deploy and install the essentials for the task at hand. The vulnerability and zero day treadmill would not be what it is if software were more focused and eliminated rampant "app" ecosystems hopelessly clogged with factory images that attach to services the user cannot uninstall.

Balgair 7y ago

Wow! That is eye opening. Thanks for the share on that one.