We've definitely got an IT Security problem that goes down to the roots. If you're testing an AI for hacking ability and it's not air-gapped from the internet, you need to go to jail when it inevitably breaks out and commits crimes.
The whole hugging face incident could have been completely prevented. The underlying security problem we've faced for the past decade is that Linux/Windows/MacOS, etc are all not fit for purpose in an age of persistent internet connections and mobile code. The only way out is an OS built around default deny instead of ambient authority.
More people need to know what a data diode is, and how to use it, myself included. I've finally got the resources together to start figuring that out, 2 Raspberry Pi B+ computers, the old kind without wireless. The data diode itself is trivial, I'll probably end up with a 6N137 optocoupler between 2 serial ports. The hard part is the proxies for all the protocols, and the digital fountain to spray the data across the connection with ECC.
At this point I intent to do it all in Free Pascal/Lazarus, but I'll suck it up and use C++ if I have to.
We've definitely got an IT Security problem that goes down to the roots. If you're testing an AI for hacking ability and it's not air-gapped from the internet, you need to go to jail when it inevitably breaks out and commits crimes.
The whole hugging face incident could have been completely prevented. The underlying security problem we've faced for the past decade is that Linux/Windows/MacOS, etc are all not fit for purpose in an age of persistent internet connections and mobile code. The only way out is an OS built around default deny instead of ambient authority.
More people need to know what a data diode is, and how to use it, myself included. I've finally got the resources together to start figuring that out, 2 Raspberry Pi B+ computers, the old kind without wireless. The data diode itself is trivial, I'll probably end up with a 6N137 optocoupler between 2 serial ports. The hard part is the proxies for all the protocols, and the digital fountain to spray the data across the connection with ECC.
At this point I intent to do it all in Free Pascal/Lazarus, but I'll suck it up and use C++ if I have to.
A few people have full control.
And do not exercise it because they are in a race.
A race where one wins and everyone else loses.
Irresponsible refusal to control.
Winning isn't everything. It's the ONLY thing. [0]
Consequences be damned.
[0] https://quoteinvestigator.com/2017/03/13/winning/
how?