Notices by Dave 🐶 (cyberoutsider@infosec.exchange)

@patrickcmiller "OpenAI facilitated and profited from..."

@bloor About time Clacton had a serious MP.

@fesshole Some Scandinavian metal groups aspire to that aesthetic.

I honestly don't think I've seen such a clear example of time & effort being wasted as a result of blind reliance on AI before.

Let's be clear, it probably won't take that long to fix as a lot of the work will still be applicable (as long as the implementation wasn't AI-drivel too)... but, seriously, all for the sake of not spending the time to read the actual standard?

Sat in a call where someone has just realised that their whole ISO framework that they've spent months creating is based on an incorrect list of controls that an AI tool gave them.

Apparently they never thought to purchase the actual standard and check themselves.

Is there a German word for this?

@GossiTheDog Errr... either how big is your house, or how unobservant are you?

@georgetakei Were the military aware they were building a massive complex under the ballroom before he said that?

@georgetakei Everyone else: "Oh my god! That's terrible!"

Trump administration: "Okay, that's the target to beat!"

@annika It doesn't count if you aren't playing the Tetris theme tune on repeat while you build.

@GossiTheDog And everyone was worried about Huawei providing services to CNI...

@GossiTheDog Hmmm... I dunno about the "things are amicable". I've seen a CTO go under similar circumstances in a similar org.

The rumour from that example was that the CTO was adamant that roughly the same thing would happen again if the outsourcer wasn't booted soon/significant moves were made to start relying less on them... and the rest of the Board (essentially CEO + CFO) told them that wasn't an option.

@GossiTheDog The bit that really confuses me from a management-perspective is how you'll usually go from a small, highly skilled and experienced in-house team (say 3 or 4 people)... to TCS's/an-other-MSP's teams of 28 people, who all turn up on the same calls, say nothing and hide behind Service Desk ticket hot potato...

And after all that, management still thinks they're getting a good deal out of this?

@GossiTheDog I can't honestly believe that *anyone* brings in TCS (or similar other MSPs) with the long-term intent of personally working with them.

@GossiTheDog You got GDPR because companies didn't really have much incentive to care about mismanaging personal data/severely impacting the lives of their customers.

Aside from NIS/new CS+R bill, one assumes it was felt there wasn't really the need to legislate the operations part/"perhaps don't let your company burn down" potential scenarios as you'd usually think a CEO is primarily focused on exactly that anyway... turns out we were wrong. Getting to the next end-of-quarter bonus seems to be more important than checking whether the company is still there or not.

@GossiTheDog @metacurity You're off GCHQ's Christmas list then for pointing this out.

@GossiTheDog Did someone take their portal down, saying that they shouldn't "do crime"?

@GossiTheDog Even if no new CVEs are officially released for the next five years, I reckon we can still have applications riddled with CVEs still being used in most businesses.

@GossiTheDog Yes, the "old" line doesn't match up with what we know as customers.

That said, we've not had that line directly from our Account Manager, so I'm waiting for an updated statement from them.

@GossiTheDog I'm actually genuinely intrigued to see whether this strategy will pay off.

In theory you only have to wait long enough for everyone to get bored and for some other significant thing to happen, then you're in the clear...

@GossiTheDog @kemotep Pretty much every sales pitch for similar AI capabilities are contradictory.

Feature 1: Bulk out stuff because you think it looks more professional to add a bunch of unnecessary words.
Feature 2: Summarise stuff because you think it's been bulked out unnecessarily and you don't want to wade through all the unnecessary words.

Even the 'summarise Teams meetings' capability is a cover up from the fact that people have forgotten how to properly chair and run meetings. Advertised AI capabilities are a sticking plaster over other poor habits rather than addressing root problems.