[giancarlostoro]

Not what I'm saying at all, but okay. More like "don't sleep on cyber security" more than anything. I don't care if you use AI, though it can definitely be useful for security auditing. Red teams are going to become more invaluable these days.

[yifanl]

You're talking about living in a world where we have to take entirely preventative steps, not reactive because hacking is going to be that much more prevalent.

AI can tell you you're being zero-day'd, but that isn't much comfort - you're already expecting everyone to always be zero-day'd at all times!

[giancarlostoro]

What I'm suggesting is that AI and security tooling can help you minimize attack vectors.

[romaniv]

You can post any number of snarky booster comments, but at the end of the day they are the opposite of insightful. They are an obfuscation.

What I'm seeing is that the whole security model built around endless code re-evaluation and continuous (usually online) updates is collapsing in a spectacular fashion. This is not "good for red teams" or "good for security AI". This is not good for anyone except malicious actors.

I rarely do these, but here is my prediction: doing more of the same but faster is not going to work. No matter how much AI compute people will throw at security scans and patching, the number of security incidents and the overall instability will keep going up until the underlying security model is fundamentally changed.

[giancarlostoro]

Booster comments? What? Since when is routine security auditing bad? A lot of people sleep on it, and have insanely obvious (in hindsight) security issues that could have been avoided by a simple audit.