7 ms·
That’s like arguing against using locks on doors because they’re pickable. You’re right: they can be defeated. But they might cut it by 80-90%, and be complem
by mediaman 4y ago
That’s like arguing against using locks on doors because they’re pickable.
You’re right: they can be defeated.
But they might cut it by 80-90%, and be complemented with other tools to reduce the flood to a trickle.
- majewsky 4y agoThe problem with those real-world analogies is that those things don't scale in the real world. Even if you're a 10x lockpicker compared to an average burglar, you still have to actually go to the place you want to steal from, actually carry out the loot, expose yourself to being witnessed, and all that stuff. Whereas with computers, if you have, say, a zero-day exploit for nginx, it's feasible for a small band of black hats to infect hundreds of thousands of servers. And if a single person has the equivalent of a zero-day exploit for NPM's hypothetical review AI, they can just spam tens of thousands of modules and if only 0.1% manage to slip through the cracks, you're golden.
- dtagames 4y agoFresh story this evening says it's already being used for that. https://www.theregister.com/2023/03/30/socket_chatgpt_malware/ https://www.theregister.com/2023/03/30/socket_chatgpt_malwar...